Privacy policy

Last updated: October 11, 2026

Mia is an assistant that answers Instagram Direct Messages for small businesses, such as beauty studios, on their behalf. Mia is operated by Devon Meyer ("we"). This policy explains what happens to information when you message a business that uses Mia, and when a business connects its Instagram account to Mia.

If you message a business that uses Mia

When you send a Direct Message to a business's Instagram account that is connected to Mia, we receive through Meta's Instagram API:

• the text of your messages
• your Instagram-scoped user ID and, where Instagram provides it, your name or username
• when each message was sent
• the recent messages in your conversation with that business, so a reply can follow on from what was already said

We use this only to reply to you on the business's behalf, to hand your conversation to the business's owner when you need a person, and to send the owner a daily summary of conversations.

What we store, and for how long

• Conversation summaries. After Mia replies, we store a short summary of the conversation, your name or username, and whether it needs the owner's attention. These are kept until they appear in the owner's next daily summary (normally within a day) and are then deleted.
• Message IDs. We keep the IDs (not the text) of messages Mia sent, for about a day, so Mia can tell her own messages apart from the owner's.
• Owner takeovers. When the owner replies to you personally, we note your Instagram-scoped ID and the time, so Mia stays out of that conversation for a while.
• Server logs. Our logs record activity such as when a message arrived and its length, and occasionally an excerpt of a reply when something goes wrong. Logs are kept by our hosting provider for a limited period and are used only to keep Mia working.

We do not store the full text of your messages in our database. We do not sell your information, use it for advertising, or use it to train AI models.

If you connect your business's Instagram

When a business owner logs in with Instagram to connect their account, we receive and store their Instagram account ID, username, and an access token that lets Mia read and reply to the account's Direct Messages. The token is stored encrypted. We also store the business details the owner gives us (such as services, prices, hours and policies) so Mia can answer accurately, and the email address the daily summary goes to.

Who else processes your information

• Meta (Instagram) delivers messages to and from Mia under Instagram's privacy policy.
• Anthropic provides the AI model that writes Mia's replies. Message content is sent to Anthropic's API to generate each reply. See Anthropic's privacy policy.
• Railway hosts Mia's servers and database. See Railway's privacy policy.
• Resend delivers the daily summary email to the business owner. See Resend's privacy policy.

Deleting your information

• If you messaged a business: email us at [email protected] with the business's Instagram handle and your Instagram username, and we will delete any summaries and records about your conversation within 30 days. You can also ask the business directly.
• If you connected a business: remove Mia under Instagram Settings > Website permissions > Apps and websites, or request deletion there. Instagram tells us, and we disconnect the account and delete its token and stored conversation summaries. You can also email us.

Children

Mia is meant for adult customers of businesses and is not directed at children under 13.

Changes to this policy

If we change this policy, we will update the date above. Significant changes will be shared with connected businesses.

Contact

Devon Meyer · [email protected]