# FamDev Comment Reply Privacy Policy > Privacy policy of FamDev Comment Reply, the Instagram automation by FAMDEV OÜ that sends requested links by private reply. - URL: https://franamadis.com/famdev-comment-reply-privacy-policy/ - Language: en - Last updated: 2026-11-13 - Versión en español: https://franamadis.com/famdev-comment-reply-politica-de-privacidad/ - Publisher: FAMDEV OÜ (Fran Amadis) · info@franamadis.com FamDev Comment Reply # FamDev Comment Reply Privacy Policy FAMDEV OÜ · Tallinn, Estonia · info@franamadis.com **Effective Date: November 13, 2026** FamDev Comment Reply is an automation operated by FamDev OÜ, a company registered in Estonia (“we”, “us”). It works with the Instagram professional accounts that connect to it through Instagram Login (the “Creator”). When someone comments a keyword on one of the Creator’s posts or Reels, the service sends that person the link they asked for in a private message (an Instagram “private reply”) and may reply publicly to the comment. This Privacy Policy explains which data the service processes, why, and for how long. ## Data Controller FamDev OÜ (registry code 16917226), Sepapaja tn 6, 15551 Tallinn, Harju County, Estonia. Contact: [info@franamadis.com](mailto:info@franamadis.com) ## Data We Process When someone comments on a Creator’s post, Instagram (Meta) sends us: - the comment ID and the text of the comment; - the commenter’s Instagram-scoped user ID and username; - the ID of the post or Reel that was commented on. For the Creator’s account we store the Instagram account ID, the username and the access token granted through Instagram Login. We do not collect email addresses, phone numbers, location, contacts or payment data. We do not read the Creator’s direct messages, and we do not use cookies, analytics or advertising tools. ## How We Use the Data Only to provide the service: - check whether a comment contains the keyword chosen by the Creator; - send the commenter one private message with the requested link; - publish a short public reply to the comment; - avoid sending the same message twice and avoid replying to the Creator’s own comments; - keep the service running (technical logs and error alerts). We do not use the data for advertising or profiling, we do not make automated decisions with legal or similarly significant effects, and we never sell or share personal data for marketing. ## Legal Basis Comment data is processed on the basis of legitimate interest (Art. 6(1)(f) GDPR): the commenter asks for the link by writing the keyword, and the Creator wants to deliver it. The Creator’s account data is processed to provide the service the Creator requested when connecting the account (Art. 6(1)(b) GDPR). ## Retention - Comment IDs (to prevent duplicate messages): up to 8 days. Instagram only allows a private reply within 7 days of a comment. - Technical logs (comment text, username and delivery result): 14 days, then deleted automatically. - Post IDs and their short codes: 30 days. - The Creator’s access token: while the account stays connected. It is deleted when the Creator disconnects the app or asks us to delete it. ## Service Providers and International Transfers - **Meta Platforms** (Instagram API): delivers the comments and sends the messages. Meta’s own Privacy Policy applies to your use of Instagram. - **Railway** (Railway Corporation, United States): hosts the server that runs the automation. - **Telegram** (optional): technical alerts to the operator, which may include a username when a message fails to send. When data is processed outside the European Economic Area, we rely on the safeguards offered by these providers, such as the European Commission’s Standard Contractual Clauses. ## Your Rights You can ask us to access, correct or delete your data, to restrict or object to its processing, and to receive a copy of it. You can also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, [www.aki.ee](https://www.aki.ee)) or with the data protection authority of your country. ## Data Deletion Instructions To delete the data related to you: 1. Send an email to [info@franamadis.com](mailto:info@franamadis.com) with the subject “Data deletion” and your Instagram username. 2. We will delete all data related to that username within 30 days and confirm by email. Commenters can also delete their comment on Instagram at any time. Creators can disconnect the app in Instagram (Settings → Website permissions → Apps and websites → Remove); after that we delete their access token and account data. ## Security The service only accepts notifications signed by Meta, uses encrypted connections (HTTPS), keeps access tokens out of its logs and restricts access to the operator. ## Children’s Privacy The service is not directed at children under 13, which is also the minimum age to use Instagram. ## Changes to This Privacy Policy We may update this policy. The current version and its effective date are always published on this page. ## Contact Us If you have any questions about this Privacy Policy, contact us at [info@franamadis.com](mailto:info@franamadis.com). [Versión en español](https://franamadis.com/famdev-comment-reply-politica-de-privacidad/)