Victoria_ErimitaQ: Quick question on EU compliance (GDPR & AI Act)
Hi team,
Inrō looks great, and being an EU company is a huge plus. Before buying, could you clarify three quick compliance questions so I know I can use it safely?
* GDPR & DM training: When the AI trains on "real messages," does it only read my outgoing replies, or also incoming user DMs (and is their data anonymized)? Also, do you provide a standard DPA?
* EU AI Act: Since the AI copies my tone, is it easy to lock in a short disclaimer on first replies so people know it's an AI assistant?
* Anti-spam control: Can I strictly limit promo DMs to specific keyword triggers, so general comments or Story mentions never accidentally trigger a marketing flow?
Thanks so much!
Etienne_Inrō
Nov 7, 2026A: Hi! Thanks for reaching out and for checking these details before purchasing. Happy to clarify!
1. GDPR & AI training
Inrō's AI Agent can learn your brand's tone of voice from training materials, FAQs, and past conversations. For tone-of-voice training, it only uses DMs you've sent, not incoming messages.
For data capture, Inrō processes both incoming and outgoing DMs. All data is encrypted but not anonymized, as it feeds directly into your CRM within Inrō. Personal data is handled in accordance with Meta's data policies and your own privacy policy.
In compliance with GDPR, when a user requests the deletion of their data, the request is automatically flagged for your review and approval before deletion.
A standard DPA, with Inrō acting as the data processor and you as the data controller, is available upon request.
2. EU AI Act & AI disclosure
Inrō supports AI disclosure to ensure users know when they're interacting with an AI assistant.
By default, if someone asks whether they're speaking with AI, the agent will always confirm that it is an AI assistant.
You can also configure your AI Agent or automations to proactively disclose this in the very first interaction.
3. Anti-spam & keyword triggers
Absolutely! Inrō gives you precise control over what triggers each automation.
You can set up automations based on specific keywords, full sentences, or AI-detected intent across different interaction types, including comments, DMs, Story mentions and reactions, icebreakers, ad clicks, and IG.me links. You can also configure outgoing DM campaigns separately.
Each trigger is configured independently, so a promotional automation designed for a specific keyword won't accidentally activate from unrelated comments or Story mentions.
Hope this clears things up! Let us know if you have any other questions. Happy to help!