Privacy Policy

Last updated: 20 August 2026

Who we are

commentfor ("we", "us") is an Instagram comment-to-DM automation platform operated by Neurai Technologies Private Limited ("Neurai"). It lets Instagram professional accounts automatically reply to keyword comments with a direct message containing a tracked link, using Meta's official Instagram Platform API. Questions about this policy: privacy@commentfor.com.

What we collect

• Instagram professional account info — your Instagram username and account ID, provided by Meta when you connect your account.
• Instagram access tokens — issued by Meta so we can act on your behalf. Stored encrypted at rest.
• Comments and messages — comments on your posts and reels, and DM replies to your automations, are processed to match your keyword triggers and run the automations you configure.
• Lead email addresses — if you enable lead capture, email addresses that people voluntarily send in a DM reply are stored (encrypted at rest) so you can export or forward them.
• Dashboard account — your email address and a password hash (we never store your password) for logging in to app.commentfor.com.

How we use it

Solely to run the comment-to-DM automations you configure: matching keywords, sending DMs and public replies, tracking link clicks, and showing you your own analytics. We do not sell data, we do not show ads, and we do not use your data for anything you didn't set up.

Third parties

• Meta — all Instagram actions go through Meta's official Instagram Platform API, under Meta's privacy policy.
• Cloudflare — hosting, CDN, network security, and cookieless web analytics for this site and the app.
• Google Analytics and Meta Pixel — Google's tag runs on this website in consent mode (cookieless, all signals denied) by default; measurement cookies, and the Meta Pixel itself, activate only after you press "Accept" on the consent bar. See "Cookies and analytics" below.
• Email marketing (optional) — if you connect Kit or Flodesk, captured lead emails are forwarded to your account there. This only happens if you configure it.
• Stripe (optional) — payment processing for paid plans. We never see or store your card details.

Retention and deletion

Your data stays only as long as you use the service:

• Disconnect in the dashboard — disconnecting your Instagram account in the app fully purges your Instagram data, tokens, automations, and captured leads.
• Remove via Instagram — deleting commentfor from your Instagram app settings triggers Meta's data-deletion callback, which we honor by purging your data. You can confirm deletion at app.commentfor.com/data-deletion/status.

See Data Deletion for step-by-step instructions.

Cookies and analytics

The app uses session and CSRF-protection cookies only — the minimum needed to keep you logged in securely. The app sets no tracking or advertising cookies; this website sets them only if you accept analytics cookies on the consent bar, as described below.

This website uses Cloudflare Web Analytics, a privacy-first, cookieless service, to understand aggregate traffic: page views, referrers, and performance. It sets no cookies, stores no personal profile, and does not track you across sites. Your theme choice and your analytics consent decision are remembered locally in your browser (localStorage), not in cookies, and never leave your device.

Google's tag in consent mode. This website loads Google's measurement tag with all consent signals set to "denied" by default (Google Consent Mode). In that state it sets no cookies and stores nothing on your device; your browser sends cookieless pings that carry no persistent identifier, which Google uses for aggregate modeling.

Optional analytics cookies — only with your consent. If you press "Accept" on our consent bar, the consent signals switch to "granted": Google Analytics then sets first-party cookies (such as _ga) to measure visits, traffic sources, and page performance, under Google's privacy policy, and the Meta Pixel loads and sets cookies (such as _fbp) to measure how well our Instagram and Facebook posts and ads bring visitors here, under Meta's privacy policy. Neither sets any cookie before you accept, and declining changes nothing about how the site works. Change your cookie choice — this clears your stored decision and shows the consent bar again.

Changes

If this policy changes, we will update this page and the date above. Material changes affecting connected accounts will be announced in the dashboard.