Privacy information

This self-hosted installation processes Instagram account identifiers, authorized tokens, media metadata, comment interactions and delivery results to run automations you configure.

Data and purpose

Tokens are encrypted at rest and remain server-side. Comment and message content is retained for the workspace’s chosen period (7–90 days). Minimal deduplication and opt-out records remain until the connected account is deleted. No Instagram passwords, scraped profiles or inferred emails are collected.

Your controls

Pause automations in Settings, disconnect an Instagram account to delete its associated records, or delete your account and owned workspaces. See data deletion instructions.

Operator publication required

Before public launch, the installation owner must publish their legal identity, contact details, lawful processing basis, subprocessors, hosting regions, backup retention and applicable privacy rights. This page is a technical disclosure template and does not claim to be a completed legal policy.