Privacy Policy

Last updated: 14 November 2026

Dharra Labs (dharralabs.com) is a social media management app run by Dharra Advance Business Solutions, Delhi, India ("we", "us"). It lets businesses and their teams connect Facebook Pages and Instagram professional accounts, then create, schedule, publish and manage posts. This policy explains what data we collect, why, and the choices you have.

1. Data we collect

Your account

• Name and email address.
• Your password, stored only as a one-way hash (bcrypt). We never see or store your actual password.
• If you sign in with Google: your Google account ID, name and email address.
• Workspaces you create or join, your role, and team invitations.

Data from Facebook and Instagram (only after you connect)

When you click Connect Facebook & Instagram and approve access on Facebook, we receive only what you allow:

• The Facebook Pages you choose: Page ID, name, profile picture and follower count.
• The linked Instagram professional accounts: account ID, username, name, profile picture and follower count.
• Page access tokens that let us act for the Pages and Instagram accounts you selected. Tokens are encrypted (AES-256-GCM) before they are stored.
• For posts you publish through Dharra Labs: the post ID and link returned by Facebook or Instagram.
• Comments and replies on the recent posts of your connected Pages and Instagram accounts (comment text, the commenter's public name or username, time, and the post it belongs to), so your team can read and answer them in the Inbox.
• Instagram direct messages and Facebook Page (Messenger) messages sent to or from your connected accounts (message text, attachment links, the sender's name or username and ID, and time), so your team can read and reply to them in the Inbox.

Content you create

• Captions, photos and videos you upload, schedule times and post status.

Technical data

• A session cookie (dl.sid) that keeps you logged in. It is required for the app to work. We do not use advertising or analytics cookies.
• An activity log of important actions (for example sign-in, post published, profile connected), with the IP address, for security and support.

2. How we use data

• To run your account and workspaces, and to let your team work together.
• To publish, schedule and delete posts on the Facebook Pages and Instagram accounts you connected, only when you or your team ask us to.
• To show comments on your posts in the Inbox, and to reply to, hide or delete them when you or your team ask us to.
• To show Instagram direct messages and Facebook Page messages in the Inbox and send the replies your team writes. We never send messages automatically.
• To show your connected profiles, follower counts and post results inside the app.
• To send account emails: email verification, password reset and team invitations.
• To keep the service secure, prevent misuse and fix problems.

We do not sell your data. We do not use data from Facebook or Instagram for advertising, profiling or any purpose other than the features you use. We use Meta Platform Data only as allowed by the Meta Platform Terms.

3. Who we share data with

• Meta (Facebook and Instagram): the posts, media and requests you send to your connected Pages and accounts.
• Google: only if you choose Sign in with Google, to confirm your identity.
• Hostinger: our hosting and email provider, which stores the app, the database and uploaded media, and sends our emails.
• Your team: members of a workspace can see that workspace's connected profiles and posts.
• Authorities: only when Indian law requires it.

Photos and videos you attach to a post are placed at a hard-to-guess public web address so that Facebook and Instagram can fetch them. Do not upload media you are not allowed to publish.

4. How long we keep data

• Account and workspace data: while your account is active. When you ask us to delete your account, we delete it within 30 days.
• Facebook/Instagram tokens: until you disconnect the profile, remove the app in your Facebook settings, or delete your account. Disconnecting a profile deletes its stored token straight away.
• Posts and uploaded media: until you delete the post in Dharra Labs, or your account is deleted.
• Instagram and Facebook messages: while the profile stays connected. Disconnecting a profile deletes its stored messages straight away.
• Comments in the Inbox: while the profile stays connected. Disconnecting a profile deletes its stored comments straight away. Comments deleted on Facebook or Instagram are removed from the Inbox at the next refresh.
• Login sessions: up to 7 days after your last activity.
• Activity logs: up to 12 months, for security.

5. Your choices and rights

• See and update your name and password under My account.
• Disconnect any Facebook Page or Instagram account under Accounts & team.
• Delete posts from Facebook or Instagram, and from Dharra Labs, on the Publishing page.
• Remove Dharra Labs's access in Facebook: Settings & privacy → Settings → Business integrations.
• Ask for a copy of your data, a correction, or full deletion. See Data deletion.

You can also exercise your rights under India's Digital Personal Data Protection Act, 2023, by emailing us. We reply within 30 days.

6. Security

We use HTTPS, hashed passwords, encrypted access tokens, CSRF protection and access controls by workspace and role. No system is perfectly secure. If we learn of a breach that affects you, we will tell you and the authorities as the law requires.

7. Children

Dharra Labs is for businesses and is not meant for anyone under 18. We do not knowingly collect data from children.

8. Changes

If we change this policy, we will update the date above. For important changes we will also tell account owners by email or in the app.

Contact us

Dharra Advance Business Solutions (operator of Dharra Labs)
20/235, Doctor Complex, Lampur Road, Opp. MCD Hospital, Narela, Delhi 110040, India
GSTIN: 07AZXPS4891H2ZB
Email: contact@dharralabs.com