Privacy Policy

How Huat handles information belonging to you and to the people who interact with your Instagram account.

Last updated 20 August 2026.

Who we are

Huat is operated by 1UP! Sales AI Technologies Pte. Ltd., Singapore. You can reach us at support@1upsalesai.com.

What Huat does

Huat connects to the Instagram professional account of a business that chooses to use it. Once connected, Huat can publish content that the business gives us, reply to comments left on that business's posts, and reply to direct messages sent to that business.

The business is the owner of that data. We process it on their instructions.

What we collect

From the business using Huat

• Their Instagram user ID, username, and the access token Instagram issues when they connect.
• Content they ask us to publish: images, video, captions.
• The automation settings they configure: keywords, reply text, disclosure wording.

From people who interact with that business on Instagram

• The text of comments left on the business's posts, and of direct messages sent to it.
• The Instagram-scoped ID and username of the person who sent it.
• A record of any automated reply we sent, and whether the person asked to stop receiving them.

We do not collect email addresses, phone numbers, payment details or location from people who comment or message. We do not buy or receive personal data from anywhere else.

Why we hold it

Only to deliver the service the business asked for, and to obey Meta's platform rules — for example, keeping a record of which comments we have already replied to so that we never send more than one automated direct message per comment.

We do not sell personal data. We do not use it to train models that serve anyone other than the business it belongs to. We do not share it with advertisers.

Who we share it with

• Meta Platforms — necessarily, since the messages and posts are delivered through Instagram.
• Cloudflare — our hosting provider, which stores the data at rest.

Nobody else. We do not transfer personal data to any other third party.

How long we keep it

• Access tokens: until the business disconnects, or the token expires and is not renewed.
• Comment and message records: 24 months, then deleted.
• Opt-out records: kept indefinitely, because deleting them would mean we could start messaging someone again after they asked us to stop.

How your data is protected

Access tokens are encrypted at rest with AES-GCM. All traffic runs over HTTPS. Access to production data is limited to the people who operate the service.

How to have your data deleted

Three ways, all of which work:

1. If you are a business using Huat — disconnect your Instagram account from inside the app. That removes your tokens and stops all automation immediately. Email us to have the remaining records erased.
2. If you commented on or messaged a business that uses Huat — email support@1upsalesai.com with your Instagram username. We will delete your records and confirm within 30 days.
3. Through Instagram — remove Huat from your Instagram account's connected apps. Instagram notifies us and we delete your data automatically. You will be given a confirmation code and a link to check the status of that deletion.

Your rights

Under Singapore's PDPA, and under the GDPR where it applies, you may ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Write to support@1upsalesai.com.

Children

Huat is a business tool and is not directed at anyone under 18.

Changes

If we change this policy we will update the date at the top and, where the change is significant, tell connected businesses directly.