This policy explains what data igrm ("we", "us") collects when an account holder connects their Instagram account, how we use that data, and how we protect it. Plain language. No surprises.
When you authorize igrm through Instagram's official approval flow, we receive — and only receive — the following:
We do not receive — and could not access even if we wanted to — passwords, direct messages, follower lists, story views, private notifications, or any data belonging to accounts that have not been authorized.
That is the full list. We do not sell data. We do not share data with third parties for advertising. We do not train public AI models on your content.
Data sits on cloud infrastructure in an Indian region for low latency. Comment records, Excel reports, and access tokens are stored encrypted at rest. Only the deployed application can read them.
Comment text is sent to a third-party AI inference provider for classification. That provider's policy states that API content is not retained or used for training. We pass only the comment text and minimal context — never the commenter's identity beyond their public username.
Under the Digital Personal Data Protection Act, 2023 (India), you have the right to:
To exercise any of these rights, email learn.legits@gmail.com or DM @ig_reputation.
Anytime, in two clicks. Open Instagram → Settings → Apps and Websites → find "igrm" → Revoke. Our access disappears instantly. We then have 30 days to delete the rest of your data, which we do automatically.
igrm is a B2B product for Instagram Business and Creator accounts. We do not knowingly process data about individuals under 18 except as it appears in public Instagram comments.
If we materially change this policy, we will email every active subscriber at least 14 days before the change takes effect. The current version always lives at this URL.
Questions, requests, complaints — all go to learn.legits@gmail.com or @ig_reputation on Instagram. We reply same day, every working day.