Privacy Policy

Controller and contact

The data controller is Vojta Ponrt. Privacy and data-rights requests can be sent to vojtech.ponrt@gmail.com.

Data processed

• Instagram-scoped account identifiers, usernames and profile names supplied by Meta.
• Direct-message text, timestamps, conversation identifiers and delivery status.
• AI-generated reply drafts, approval decisions and a limited audit history.

Purpose and legal basis

Data is used only to receive, organize and respond to messages sent to the account. Replies are drafted by AI but require human approval before they are sent.

Processing is based on responding to the sender's request and the controller's legitimate interest in managing business communications. Data is not sold or used for advertising profiles.

Services and transfers

Meta provides Instagram messaging. Google Gemini processes selected message and writing-style context to create a draft. Telegram delivers the private approval card to the controller. Cloudflare secures the webhook connection. These providers may process data outside the EEA under their contractual transfer safeguards.

Storage, retention and security

The working archive is stored on a privately controlled computer. Access tokens and webhook secrets are kept outside source control. Signed webhooks, restricted network exposure and human approval protect the reply flow.

Messages are retained while they are reasonably needed for communication history and reply style. A verified deletion request removes active records within 30 days; residual encrypted backups are removed within 90 days.

Your rights

You may request access, correction, deletion, restriction or objection by emailing vojtech.ponrt@gmail.com. You may also complain to your local supervisory authority; in Czechia this is the Office for Personal Data Protection.