Privacy Policy

1. What We Collect

• Account information (name, email, password hash)
• Instagram account metadata (username, follower count, post IDs)
• Comment text processed for moderation
• Usage analytics (moderation actions, settings)

2. How We Use It

We use your data solely to provide and improve the Commentra service. Comment text is processed by AI models (OpenAI) to determine toxicity. We do not sell your data to third parties.

3. Data Retention

Moderation logs are retained for 90 days. You may request deletion of your account and all associated data at any time by contacting us.

4. Third-Party Services

• Meta / Instagram: OAuth access token stored encrypted in our database
• OpenAI: Comment text sent for AI classification (no PII included)
• Vercel: Hosting and serverless infrastructure

5. Security

Instagram access tokens are encrypted at rest using AES-256. Passwords are hashed using bcrypt. All connections use HTTPS/TLS.

6. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at privacy@commentra.in