Privacy Policy

Controller (responsible under the GDPR): Krola Consulting GmbH, Nördliche Münchner Str. 47, 82031 Grünwald. Register: Amtsgericht München, HRB 234113. VAT ID: DE312639911. Managing directors: Dimitry Kirschner, Dmitry Gorelenkov, Oleg Orlov. Contact for privacy and deletion requests: insta.service@gorelenkov.dev.

What this service does: it connects an Instagram Professional Account through official Meta OAuth and, when someone comments a configured keyword on a post or Reel you selected, sends the configured private reply and/or public comment reply.

Data about the account owner: Telegram account metadata (id, username, first and last name, language), connected Instagram and Meta account ids, encrypted access tokens, automation settings, feature-request text, delivery status, quota usage and audit events.

Data about commenters (third parties): the comment id, the commenter id and username, the comment text and the raw webhook payload of the matched comment. Source: the Meta and Instagram Graph API for the media you selected. It is used only to match your keyword and send the configured reply.

Legal bases: performance of the service you requested (Art. 6(1)(b) GDPR) and our legitimate interest in abuse prevention, security and proof of deletion (Art. 6(1)(f) GDPR).

Processors and recipients: Cloudflare (hosting, Workers, D1 database, queues), Telegram (bot messaging) and Meta/Instagram (platform APIs). Data may be processed outside the EU/EEA; such transfers rely on the EU Standard Contractual Clauses or an adequacy decision where applicable.

Retention: when you delete your account, all personal data is erased from active systems. Cloudflare D1 Time Travel snapshots may remain restorable for up to 30 days. After deletion we keep only overall counts of deleted accounts, connections, automations and sent messages, without individual records or identifiers.

Your rights: access, rectification, erasure, restriction, objection and data portability. You can delete your account at any time in the bot settings or by contacting insta.service@gorelenkov.dev. You also have the right to lodge a complaint with a data-protection supervisory authority.

Product usage statistics: To understand product usage, we store the internal account ID, channel (Web or Telegram) and used product areas for each UTC day. No message text, keywords, URLs or callback payloads are stored for this statistic. Account-level daily details are incrementally removed after about 90 days and erased on account deletion. Completed daily summaries contain counts without account IDs. These statistics use no external analytics service, additional analytics cookies or persistent analytics browser storage.