Privacy Policy
Last updated 1 August 2026
CreatorOS is a product operated by okan. It helps Instagram creators reply to comments and direct messages automatically. This policy explains exactly what we collect, why we need it, and how to get rid of it. “We” means okan throughout.
The short version. We store your Instagram access token and the conversations our automations have on your behalf. We never post to your feed, never message anyone unless an automation you created matched their comment, and never sell your data. Disconnecting deletes your token immediately.
What we collect
- Your Instagram account. When you connect Instagram we store your account id, username, display name, biography, profile picture URL, follower and post counts, and a long-lived access token issued by Meta.
- Your posts. We read your posts and reels so you can choose which ones an automation watches. We display them from Instagram’s own servers; we do not copy or re-host your media.
- Comments and messages. When someone comments on a post you have automated, we receive that comment along with the commenter’s Instagram-scoped id and username, so that we can reply to them.
- What you create here. Products, prices, uploaded files, knowledge-base answers, automation templates, orders and conversation history.
Why we collect it
Only to operate the features you switch on: matching comments to your automations, sending the replies you wrote, taking payment for products you listed, and showing you what happened. We do not sell your data, rent it, or use it to target advertising.
What we never do
- Post to your feed, stories or reels.
- Message anyone unless an automation you created and activated matched their comment.
- Send your access token to a browser. It stays server-side and is never included in any API response.
- Read direct messages in conversations your automations were not part of.
Who else sees it
- Meta — so we can read comments and send messages on your behalf.
- Razorpay — when you sell a paid product. Card and UPI details go to Razorpay directly and never reach our servers. Funds settle to your own Razorpay account.
- Google (Gemini) — only when you enable AI replies. The conversation and your knowledge base are sent so a response can be generated.
How long we keep it
While your account is active. Disconnecting Instagram deletes the stored access token immediately. Deleting your account removes everything, as described on the data deletion page.
Your rights
You can disconnect Instagram from the Setup screen at any time, revoke our access from within Instagram, or ask us to delete everything. See data deletion for how.
Who we are
CreatorOS is operated by okan, at okan.in. okan is the data controller for everything described above.
Contact
Questions, complaints or deletion requests: amangoel300@gmail.com