Compliance

Instagram platform policies

GramForGrow uses Meta's official Instagram API. The product is built around its rules: businesses only reply to people who commented or messaged first, replies are limited to 24 hours after the person's last message (7 days for human agents where permitted), one private reply per comment, and stop requests are honoured. You remain responsible for what you send.

India — DPDP Act, 2023 and IT Act, 2000

• We collect personal data for stated purposes and describe them in our Privacy Policy
• You can ask us to access, correct or erase your data and to withdraw consent
• We take reasonable security safeguards and will report breaches as the law requires
• A grievance channel is available at support@gramforgrow.com

GDPR and UK GDPR

For customers who are subject to GDPR, we act as your processor for workspace data. We can provide a data processing agreement on request, list our sub-processors (see the Privacy Policy) and support your data-subject requests. International transfers rely on appropriate safeguards.

GST invoicing

Every paid plan generates a tax invoice with a sequential number, our GSTIN (when configured), your billing details and a CGST + SGST or IGST breakup based on the place of supply. Add your GSTIN under Billing details to claim input tax credit.

Payments

Payments are processed by Razorpay, which is PCI DSS compliant. We do not store your card, UPI or bank credentials.

Need something specific?

Contact support@gramforgrow.com for a security questionnaire, a data processing agreement or other compliance documents.