Privacy Policy
Effective September 24, 2026
At Nabdah, we take your privacy seriously. This Privacy Policy explains what we collect when you use Nabdah (the "Service"), how we use it, and who we share it with. Any term used here without being defined has the meaning given to it in our Terms of Service.
Nabdah is operated by AaMa Development, a company registered in the Netherlands with the Chamber of Commerce (KVK) under number 42066321.
1. Information We Collect
- Account information: name, email address, password (hashed), and profile details you provide.
- Connected social account data: when you connect an account (e.g. Instagram), we access data such as posts, comments, DM threads, and access tokens needed to operate the features you enable.
- Automation activity: the comments, contacts, and messages processed by comment-to-DM automation and DM auto-reply features you configure.
- Usage & analytics data: engagement metrics, feature usage, and log data used to operate and improve the Service.
- Payment information: card and billing details are entered on Stripe's hosted checkout and handled by Stripe, our payment processor. We receive the subscription status and limited billing metadata (such as card brand and last four digits); we never see or store full card numbers.
2. How We Use Information
- To provide, operate, and maintain the Service, including scheduling, analytics, and automation features;
- To execute automations you configure, such as sending an automated DM in response to a comment;
- To communicate with you about your account, billing, or support requests;
- To detect, prevent, and address fraud, abuse, or security issues;
- To comply with legal obligations and the policies of connected platforms (e.g. Meta).
3. Third-Party Service Providers
We share data with service providers ("processors") who help us operate the Service, strictly to perform the functions you use. These include:
- Meta (Instagram) — the platform your connected account belongs to. To carry out the automations you configure, we send Meta the replies and direct messages you have written, and read the comments, messages, and engagement figures for your own account, using the access you granted when you connected it. Meta handles that data under its own terms and privacy policy.
- Stripe — our payment processor, used to take subscription payments and to run the billing portal where you manage invoices, payment methods, and cancellation. Card and billing details are entered directly on Stripe's hosted pages and are processed by Stripe under its own privacy policy; we receive only the subscription status and limited billing metadata (such as card brand and last four digits).
- Resend — our email delivery provider, used to send transactional and account-related email such as confirmations, password resets and notices that a connected account needs reconnecting.
- Hetzner — our hosting provider. The Service and its database run on servers we operate at Hetzner in Germany, which is where data from your connected accounts is stored.
We do not sell your personal information. We only share data with third parties as described in this policy, to comply with law, or with your consent.
4. Data Retention
We retain account and automation data for as long as your account is active, or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data as described below.
5. Your Rights
Depending on your location, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at
You can also disconnect a social account or delete automations at any time from within the Service.
6. Security
We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Children's Privacy
The Service is not directed to children, and we do not knowingly collect personal information from children under the age required by applicable law to consent to data processing.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date, and material changes will be communicated to you.
9. Contact Us
Questions about this Privacy Policy or your data? Contact us at