Privacy Policy
What we process, why, how long we keep it, and how to take it back. No legal fog: below is exactly what the service does.
Last updated 5 August 2026
Who we are
zapyt.io is a service operated by DForce (dforce.com.ua). We help businesses find people who are PUBLICLY asking for the products or services those businesses provide, and we prepare a reply draft for a human to review and approve.
What data we process
Only with the explicit authorization of the social account owner, given by them through the platform's own consent screen. We access:
- public posts returned by keyword search for the keywords the account owner configures;
- the authorized account's own posts and the replies to them;
- basic profile data of the authorized account (id, username).
Why
Solely to identify public posts relevant to the account owner's business and to prepare a suggested reply. Every suggested reply is reviewed by a human before anything is sent. We NEVER publish automatically and we do not even request publishing permissions.
What we store
Post text, permalink, author username and publication time - only for posts matched by the account owner's keywords. Plus the reply drafts we generate and the owner's decisions (approved / skipped). Access tokens are stored encrypted at rest and are never shared with third parties.
We do not collect or store private messages, private profiles, contact details from outside the public post, payment data, or any special categories of personal data.
Retention
Matched posts and drafts are kept for up to 12 months, then deleted. Access tokens are deleted immediately when the account owner disconnects the integration or asks us to.
Sharing
We do not sell personal data and do not share it with third parties for their own purposes. Post text is sent to our AI provider (Anthropic) solely to generate the reply draft and is not used to train models. Data is stored in Supabase infrastructure (database hosting).
Your rights
The account owner can revoke access at any time in the platform's own settings (Threads: Settings → Account → Websites and apps) or by contacting us. On revocation we delete the stored token and, on request, all associated data. You can also ask for a copy of what we store about you, or ask us to correct an inaccuracy.
Contact
Questions about data, access and deletion: a.bakhtalovskyi@dforce.com.ua.