เอกสารทางกฎหมายมีให้เป็นภาษาอังกฤษและภาษาเกาหลี

This is a translation. If it differs from the Korean version, the Korean version prevails.

Privacy Policy

Effective date: October 21, 2026

Information we receive from members

When you connect an Instagram account, we receive the account ID, username, and profile photo URL provided by Instagram.

We receive the access token issued by Instagram. The token is stored encrypted, and we do not receive members' Instagram passwords.

We store the post IDs, keywords, DM messages, and public reply messages set by members.

We do not collect email addresses, phone numbers, or real names.

Information about commenters

When someone comments on a member's post, we read the comment to check whether it contains a keyword. We do not store the comment text.

For comments that received a DM, we store the comment ID, the commenter's Instagram username, the matched keyword, and the send time and result, so that no comment receives a DM twice and so that we can show send records.

How we use information

We use information only to keep you logged in, send DMs and replies to keyword comments, prevent duplicate sends, provide send records, and prevent misuse.

Meta Platform Data

Information received from Instagram is used only for the purposes above. We do not sell it or use it for advertising.

Each member's data is stored separately and is not shown to other members.

Retention

When you disconnect or request deletion, we immediately delete your account, token, settings, and send records.

Send records are deleted after 90 days, even while you remain connected.

Server access logs are kept for up to 90 days for security checks and then deleted.

Sharing with third parties

We do not provide the information we receive to other companies or organizations, except when requested under applicable law.

Processors

DMs and replies are sent through the Instagram API of Meta Platforms, Inc.

We use cloud services to run our servers and website.

To find and fix errors in the Service, we entrust error logs to Sentry, operated by Functional Software, Inc.

We use Google Analytics, operated by Google LLC, to view visit statistics.

International transfers

Error logs and visit statistics are sent to servers of companies in the United States.

Sentry: We send Functional Software, Inc. (United States) the address of the page where an error occurred, the browser and device type, the IP address, and the error details. This is sent when an error occurs and kept for up to 90 days. Contact information is at https://sentry.io/privacy/.

Google Analytics: We send Google LLC (United States) a cookie identifier, the addresses of pages visited, the browser and device type, and the approximate region. This is sent when a page is opened and kept for 14 months. Contact information is at https://policies.google.com/privacy.

If you do not want your information transferred abroad, send a request to [email protected].

Cookies

We use cookies to keep you logged in.

We use Google Analytics cookies for visit statistics. You can block them in your browser settings, and the Service still works if you do.

Deletion requests

Both members and commenters can request deletion of their information. The Data Deletion page explains how.

Privacy officer and contact

Privacy officer: 방기로

Contact: [email protected]

Send privacy questions, complaints, and requests for remedies to the contact above. You can also contact the Personal Information Dispute Mediation Committee (1833-6972) or the Personal Information Infringement Report Center (118).

Changes to this policy

If this policy changes, we will post a notice on this page starting 7 days before the change takes effect.

Effective October 21, 2026: Added error logs and visit statistics to Processors, International transfers, and Cookies.

Effective October 12, 2026: First published.