CDConnectDots

Privacy Policy

Last updated: August 4, 2026

This Privacy Policy explains how RD AnalytiX LLC (“RD AnalytiX,” “we,” “us,” or “our”), operator of the ConnectDots platform at getconnectdots.com (the “Service”), collects, uses, shares, and protects information. ConnectDots helps brands and creators create trackable product links, measure Amazon attribution, and automate Instagram comment-to-DM replies. By using the Service you agree to this Policy.

1. Who we are

The Service is provided by RD AnalytiX LLC, a limited liability company registered in the United States. For any privacy request, contact us at team@getconnectdots.com.

2. Information we collect

a. Account information

When you create an account we collect your name or brand name, and one or more of: email address, phone number, or Google account identifier (when you sign in with Google), along with your role (brand or creator) and, for creators, your social handle. Passwords are stored only as salted hashes.

b. Meta / Instagram data (only with your authorization)

If you connect an Instagram Professional account, we access — through the Meta APIs and only after you grant permission — the following to operate the features you enable:

  • Your connected account’s ID, username, display name, profile picture, and follower count (to show which account is connected).
  • Your media (e.g., Reels/posts): ID, caption, thumbnail, permalink, and like/comment counts (so you can pick a post to automate).
  • Comments on your own media that you have chosen to automate — the comment ID, text, and the commenter’s username — used solely to match your trigger keywords and send the reply you configured.
  • The ability to send, on your behalf, a private reply (direct message) and/or a public comment reply in response to those comments.

We request the Meta permissions instagram_business_basic, instagram_business_manage_comments, and instagram_business_manage_messages for these purposes. We do not access private messages you did not initiate through the Service, and we do not use Instagram data for advertising or profiling.

c. Link and click analytics

For tracked links you create, we record click events to give you analytics: device type (e.g., iOS/Android/desktop), operating system, browser, in-app source (e.g., whether the click came from within the Instagram or TikTok in-app browser), coarse geographic location (country, region, city) derived from the IP address, referrer, UTM parameters, language, and a bot flag. We do not store raw IP addresses; we store only a salted, one-way hash used to estimate unique visitors.

d. Amazon advertising & selling-partner data (only with your authorization)

If you connect an Amazon Advertising account, we retrieve — through the Amazon Ads API and Amazon Attribution — aggregate report metrics (such as clicks, detail-page views, add-to-cart, purchases, sales, and units) and campaign structure to show your performance. If you connect Amazon Selling-Partner access, we retrieve catalog and listing information (such as product titles, images, and ASINs) to build your links and bio pages. We do not request or receive shoppers’ personal information from Amazon. We use and protect Amazon information in accordance with the applicable Amazon Ads API and Selling Partner API agreements and Amazon’s Data Protection Policy, use it only to provide the features you enable, and do not sell it or use it for unrelated purposes.

e. Google sign-in data

If you sign in with Google, we receive your basic profile identifier and email to create and secure your account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google data for advertising and do not share it except as needed to operate the Service.

f. Payment data

Subscription payments are processed by Stripe. We do not store your full card number; Stripe handles card data under its own terms.

3. How we use information

  • To provide, operate, and secure the Service and its features.
  • To run the automations you configure (matching comments and sending the replies you set up).
  • To generate the analytics and attribution reports you request.
  • To communicate with you about your account, security, and support.
  • To comply with law and enforce our terms.

4. How we share information

We do not sell your personal information. We share data only with:

  • Service providers (subprocessors) who host and operate the Service on our behalf — including cloud hosting, our database provider, and Stripe (payments) — under contractual confidentiality and data-protection obligations.
  • Platform APIs you connect (Meta, Amazon) — solely to perform the actions you request (e.g., sending a reply you configured).
  • Legal and safety — when required by law or to protect rights, safety, and the integrity of the Service.

Our use and transfer of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including the Limited Use requirements.

5. Data retention

We keep personal information for as long as your account is active or as needed to provide the Service, then delete or de-identify it within a reasonable period unless a longer retention is required by law. Instagram comment/message content used for automations is retained only as needed to operate and report on your automations.

6. Your rights and choices

You may access, correct, export, or delete your information, and disconnect any connected Instagram or Amazon account at any time from within the Service. Disconnecting revokes our ongoing access. To request deletion of your data, see our Data Deletion instructions or email team@getconnectdots.com. Depending on your location, you may have additional rights under laws such as the GDPR or CCPA.

7. Security

We use industry-standard safeguards, including encryption in transit, encryption of stored third-party access tokens at rest, hashed passwords, and access controls. No method of transmission or storage is 100% secure, but we work to protect your information.

8. Children

The Service is for businesses and is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.

9. International users

We operate in the United States; if you access the Service from elsewhere, your information may be processed in the U.S.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with a new “Last updated” date.

11. Contact

RD AnalytiX LLC · team@getconnectdots.com
6600 S Rice Ave, Ste C, Bellaire, TX 77401, USA