Privacy Policy

CommentLoop is a tool for Instagram creators. When someone comments a keyword you choose (for example “GUIDE”) on a post you pick, CommentLoop sends that person a direct message on your behalf with the link or content you configured. This page explains what data we handle, why, and what control you have.

When you connect your Instagram account, we store:

• Your Instagram username, account ID, and the access token Instagram gives us so we can act on your behalf.
• The posts you choose for automations (their IDs, captions, and thumbnails).
• Your email address, name, and billing details if you subscribe to a paid plan.

When people comment on your posts and your automation is running, we store:

• The commenter’s Instagram username and user ID.
• The text of the comment, so we can match your keyword.
• Which automation matched, when, and whether the message was sent, delivered, or failed.
• Whether the recipient clicked the link in your message (if you use CommentLoop’s click tracking).

We do not read your Instagram direct-message history. We only send messages you wrote in your automation template, and we store delivery status — not private conversations.

• To run your automations: match keywords in comments and send your message.
• To show you results: your dashboard, lead list, and analytics.
• To respect opt-outs: if someone replies STOP to your account, we never message them again.
• To enforce per-person cooldowns so people are not messaged repeatedly.
• To bill you and provide support.

You are responsible for how you use data about people who comment on your posts. CommentLoop processes comment data only to deliver the message you configured. You must not use CommentLoop to send unlawful, harassing, or deceptive content, and you must comply with applicable privacy laws (including GDPR and CCPA where they apply to you) when messaging people who interact with your content.

CommentLoop works with Instagram’s official Messaging API, so comment and messaging data necessarily passes through Meta’s infrastructure under Meta’s own terms. We use infrastructure providers to host the service (data storage and computing) and a payment provider for billing. We do not sell your data or your followers’ data, and we do not share it for advertising.

• Your automations, leads, and analytics are kept while your account is active.
• Deleting your account removes your Instagram connection, automations, and lead data from active use.
• Disconnecting an Instagram account revokes our access token and stops all automation immediately.

Access tokens and other credentials are stored encrypted and are used only to run the features you configure. Access to production data is limited to the people who operate the service.

You can access, correct, export, or delete your data at any time from Settings, or by contacting us. If you are in the EU or UK, you have additional rights under GDPR, including the right to complain to your data protection authority.

If we change this policy in a way that matters, we will notify you by email or in the app before the change takes effect.

Questions about privacy? Write to support@commentloop.app.