Privacy Policy

Mass Reacher is a brand operated by SOCIALLY LABS, registered in Italy, VAT no. 05490280756 ("we", "us", "our"). We provide a done-for-you Instagram direct message (DM) delivery service: you provide the target list and the message, and instant automated actions from thousands of our own accounts send the DMs.

This policy explains what personal data we collect, why we collect it, and the rights you have over it. It applies to this website and to every order placed through it.

Account data: your name (if provided), email address and password hash, created when you register or when your customer account is generated after a purchase.

Order data: the plan you selected, your Instagram handle, the target list you upload, the message content to be delivered, order status and payment references.

Payment data: payments are processed by our payment provider (myPOS). We never see or store your full card details, we only receive a payment confirmation and a transaction reference.

Technical data: standard server logs such as IP address, browser type and pages visited, used for security and analytics.

Communications: messages you send us (for example via WhatsApp or email) so we can support you.

To deliver the service you purchased: managing your order, sending your DMs and reporting results. This is the performance of our contract with you.

To manage your account and order history. This is based on the contract and on our legitimate interest in keeping accurate records.

To process payments and prevent fraud. This is based on the contract and our legal obligations.

To send service communications about your order (confirmations, delivery updates). These are necessary for the contract, not marketing.

To comply with Italian and EU law, including tax and accounting obligations.

You provide us with a list of Instagram usernames to contact. We process that list strictly to execute your order.

You are responsible for having a lawful basis for contacting the people on your list and for ensuring your message complies with applicable law and Instagram's terms. We deliver messages only from accounts we control, we never ask for your Instagram login or password.

We do not sell or reuse target lists. Once your order is delivered, the list is retained only as long as needed for order records, then deleted.

We share data only with providers that help us run the service: our hosting and database provider, our payment provider (myPOS), and our email delivery provider. These processors act under contract and process data only on our instructions.

We may disclose data where required by law, court order or competent authority. We never sell your personal data.

Order and accounting records are kept for the period required by Italian tax law (generally 10 years).

Target lists and message content are retained only as long as necessary to deliver and document your order. Account data is kept until you ask us to delete your account.

Under the GDPR you have the right to access, rectify, export and erase your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent.

To exercise any right, contact us using the details below. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

We protect your data with encrypted connections (HTTPS), access controls and scoped database permissions. Passwords are stored only as hashes. Because we send DMs from our own accounts, we never need and never collect your Instagram credentials.

We may update this policy to reflect changes in our service or the law. The version published on this page is the version that applies. Significant changes will be highlighted on this page.

For any privacy question or request, contact SOCIALLY LABS via WhatsApp at +39 351 154 6476. We reply to all requests as quickly as possible and in any case within the timeframes set by the GDPR.