How we handle your Instagram data

This notice supplements the general CommentCare privacy notice. CommentCare is operated by Theodor Conrad Borth, Zehenthofgasse 37, 1190 Vienna, Austria. Contact hello@commentcare.app.

What we access

With your authorization through Instagram Business Login, we receive your professional account ID, username, profile picture, a time-limited access token, post and reel identifiers, captions, thumbnails, links, comments and replies. Comment records may include the commenter's username, text, timestamp and moderation state. We store scan status, AI assessments and actions taken. We do not receive your Instagram password or download post or reel media files.

Why we use it

We use this data to display comments, identify possible spam and unwanted promotion, and moderate comments. New comment notifications arrive through Instagram webhooks; CommentCare retrieves the associated comment and checks accumulated comments approximately every 15 minutes. In this review environment, automatic hiding is off unless explicitly enabled for the account after testing. You can manually hide a comment, and a hidden comment can be restored. AI assessments can be wrong. CommentCare does not publish or edit your posts or captions.

AI and hosting

Comment text, usernames and relevant conversation or post context are sent to OpenAI's API for classification. OpenAI does not receive your Instagram credentials. Railway hosts the API and database; Vercel hosts the web interface. We do not sell Instagram data or use it for advertising. OpenAI states that API inputs and outputs are not used for model training by default. See the general privacy notice for further information about service providers, international transfers and your rights.

Retention and deletion

Saved Instagram comments are removed after 29 days. Post metadata is refreshed while your account is connected and removed after disconnect. Disconnecting your account deletes its stored token, comments and post metadata from CommentCare; it does not reverse comments already hidden on Instagram. Disconnect from the account connection page or contact hello@commentcare.app to request access or deletion. You can also remove CommentCare's authorization in Instagram. Revoking access there stops future access but does not by itself erase data already saved in CommentCare. Backups and records required by law may have separate retention periods.

Account owners should inform their community about their own comment moderation practices.