Privacy Policy

Last updated: February 2026

This Privacy Policy describes how we collect, use, and protect your information when you use our application and its Instagram integration (including Instagram sign-in and Meta’s Instagram APIs).

1. Information we collect

Account and identity

• When you sign in, we receive from our identity provider (e.g. Amazon Cognito): your user ID, email address, and name.

Instagram data

• When you connect an Instagram Business or Creator account via Instagram sign-in, we receive and store: your Instagram account ID and username, and access tokens needed to manage comments and content on your behalf.
• We do not store your Instagram password.

Usage and preferences

• Your moderation settings (e.g. how comments are handled, reply preferences) and preferences you set in the app.
• Comment and reply activity related to your connected Instagram account(s), to the extent required to provide moderation and reply features.

2. How we use your information

• To authenticate you and manage your account.
• To link and manage your connected Instagram account(s) and to perform actions you request (e.g. moderate comments, send replies).
• To communicate with you about the service and to respond to support requests.
• To improve our services and to comply with legal obligations.

3. Sharing of information

We do not sell your personal data. We share data only as follows:

• Meta (Instagram): We use Meta’s Instagram APIs and Instagram sign-in. Data shared with Meta is governed by the Meta Platform Terms and the Meta Privacy Policy. We send and receive data (e.g. tokens, comment content) as necessary to provide Instagram management features.
• Service providers: We use Amazon Web Services (e.g. for hosting, databases, identity) to run the application. They process data on our instructions and in line with their privacy and security practices.
• Legal: We may disclose information where required by law or to protect our rights and safety.

4. Data storage and security

Your data is stored in secure, access-controlled systems. We use industry-standard measures to protect your information. Access tokens and sensitive data are stored in encrypted form and are not exposed to the client.

5. Your rights

You may:

• Access and update your account and profile information through the app.
• Disconnect your Instagram account at any time from within the app.
• Request deletion of your data. For how to request deletion of data associated with your use of our app (including data shared with or derived from Instagram), see our User Data Deletion page.

6. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will be revised when we do. Continued use of the service after changes constitutes acceptance of the updated policy.

7. Contact

For privacy-related questions or requests, please contact us through the support or contact channels provided in the application.