Got a message through Rudud? Here is what you should know
Last updated: · Version: 2026-10-05 · Previous versions
If you commented on an Instagram post and then received a private message, the account owner is probably using Rudud, a service that lets them reply automatically to people who comment a certain word. This page explains what happens to your data, how to stop the messages, and how to ask for deletion.
Why you received the message
Because you commented on the account owner's post with a word they chose (such as "link" or "price"). Instagram allows the account owner to send one private message in reply to your comment, and that is what Rudud did on their behalf. We never send more than one message per comment, and we never message people who did not comment.
Who is responsible for your data
The account owner whose post you commented on is the controller of your data and wrote the message. Rudud (Alhramayn LLC, United States) processes the data on their behalf as a processor, on their instructions only. For questions about why you got the message or what it says, contact the account owner. For questions about your data held by us, contact us.
What we keep about you
- Your Instagram username and the scoped ID Instagram gives us for you.
- The dates of your first and last interaction, and how many messages you received from this account.
- Your comment text and the message text in a temporary archive that is deleted within 23 hours. We do not keep comment or message text after that.
We do not keep your photo or any other personal data, and we do not see your private conversations with anyone else. Your data stays with the account owner you commented on only; it is not combined across accounts, not sold, and not used for advertising.
How long we keep it
Until the account owner deletes their Rudud account, 30 days after they disconnect Instagram, or 12 months after your last interaction, whichever comes first.
How to stop the messages
Reply to the message, or comment, with "stop", "إيقاف" or "توقف". You will receive one confirmation message, and then no more messages from this account through Rudud; we keep your ID as that account sees it, for that purpose only, even after the rest of your data is deleted. If you want no messages from any account that uses Rudud, email privacy@rudud.app and ask for a "global opt-out", or send the deletion request form, which stops them at once; we then keep only a hashed fingerprint of your username so we can honor it. If you change your username afterwards, send the request again.
You can always block or restrict the account in Instagram itself.
How to request deletion
Send your Instagram username to privacy@rudud.app, or use the deletion request form. We complete the request within 30 days and let you know. You also have the right to see what we hold about you, and to complain to your country's data protection authority.
Reporting abuse
If the message you received was abusive, fraudulent or otherwise improper, report it to abuse@rudud.app with the account name and a screenshot, and report it to Instagram in the app as well. We suspend accounts that break our rules.
Rudud is not Instagram
Rudud is an independent product of Alhramayn LLC, not affiliated with, endorsed by, or sponsored by Meta or Instagram. We use Instagram's official API only.
Questions: privacy@rudud.app · Full Privacy Policy