Privacy Policy

Last updated: May 1, 2026

Comment Moderator ("we", "us", or "the Service") is a private web CRM for managing Instagram comments on Instagram Business or Creator accounts connected by authorized users.

1. Information We Collect

When you connect an Instagram account, we may collect and process the following information through the official Instagram Platform API:

• Instagram account ID, username, profile image, and account connection status;
• Instagram media IDs, permalinks, timestamps, and comment counts;
• comment IDs, comment text, commenter username, commenter ID when available, timestamps, hidden/deleted status, and reply IDs;
• OAuth access tokens required to read, hide, unhide, reply to, and moderate comments on your behalf;
• CRM user account data such as username, role, login status, and audit log entries.

2. How We Use Information

We use this information only to provide comment moderation features:

• display Instagram comments in the CRM;
• classify comments as safe, needing review, spam, harmful, hidden, kept, deleted, or error;
• hide, unhide, keep, delete, or reanalyze comments when a user requests it;
• prepare AI-assisted reply drafts and publish replies only after manual approval;
• keep an audit trail of moderation actions.

3. AI Processing

Comment text may be sent to an AI provider, such as OpenAI, solely to classify the comment and generate optional reply drafts. We do not sell comment data or use it for advertising. AI-generated replies are drafts and require manual publication by an authorized CRM user.

4. Data Sharing

We do not sell personal data. We share data only with service providers necessary to operate the CRM, such as hosting, database, and AI processing providers, and only for the purposes described in this policy.

5. Data Retention

Comment and moderation data is retained only as long as needed to provide the CRM and maintain audit history. Connected users may request deletion of their data at any time.

6. Security

Access to the CRM is protected by login, role-based permissions, session cookies, and CSRF protection. OAuth tokens and moderation data are stored on a private server accessible only to authorized personnel.

7. Your Choices and Data Deletion

You may disconnect the Instagram account from the Service or revoke access in Instagram/Meta settings. You may also request deletion of account data using our Data Deletion Instructions.

8. Contact

For privacy questions or data deletion requests, contact us at aerostovsky@gmail.com.