Privacy Policy

Content OS · Last updated 27 July 2026

Who this covers

Content OS is a content-management tool operated by Redefined by AI. It lets the account owner schedule and publish their own social media content, and — the subject of this policy — automatically reply to comments left on their own Instagram posts.

This policy explains what Instagram data the application receives, why it receives it, how long it is kept, and how to have it deleted.

Information we collect

When an Instagram professional account is connected to Content OS, we store:

• The account's Instagram user ID, username, and an access token issued by Meta.
• Basic details of the account's own published posts and reels — media ID, caption, thumbnail image URL, permalink, and publish date — used to let the owner choose which post an automation applies to.

When someone comments on one of the connected account's posts, and only if that comment matches a keyword the owner configured, we store:

• The comment ID, the text of the comment, and the ID of the post it was left on.
• The commenter's Instagram-scoped ID — an identifier issued by Meta that is specific to this application and cannot be used to identify the person outside of it.
• Whether the automated reply was sent successfully, for troubleshooting.

We do not collect commenters' email addresses, phone numbers, follower lists, private messages they did not initiate, or any data from accounts other than the connected one.

How we use it

• To detect a keyword the account owner chose (for example “LINK”) in comments left on the owner's own posts.
• To send that commenter a single direct message containing the link or resource the owner configured, and optionally to post a public reply under their comment.
• To show the account owner a log of which comments triggered an automation.

We do not sell this data, share it with advertisers, use it for advertising or profiling, or use it to train machine-learning models.

How long we keep it

• Access tokens are kept for as long as the Instagram account remains connected, and are deleted immediately when the owner disconnects it.
• Comment records are kept so the same comment is never replied to twice, and are deleted when the owner deletes the automation or disconnects the account.
• Post details are refreshed periodically and removed when the account is disconnected.

Data deletion

The account owner can disconnect Instagram at any time from Settings → Integrations in the application, which deletes the stored token and all associated automation data.

If you commented on a post and want the record of that comment removed, email redefinedbyai@gmail.com with the Instagram username you commented from. We will delete it within 30 days and confirm by reply.

Storage and security

Data is stored in a private PostgreSQL database on infrastructure controlled by Redefined by AI, not exposed to the public internet. Access is restricted to the account owner. Traffic between Instagram and the application is served over HTTPS, and incoming requests from Meta are verified using a cryptographic signature so that forged requests are rejected.

Third parties

The application communicates with Meta's Instagram Graph API in order to receive comment notifications and send replies. It does not send Instagram data to any other third party.

Changes to this policy

If this policy changes materially, the updated date at the top of this page will change. Continued use of the application after that constitutes acceptance of the revised policy.

Contact

Questions or deletion requests: redefinedbyai@gmail.com

---