Privacy Policy

Last updated: 21 September 2026

Card Radar is a personal Instagram monitoring tool operated at https://workspace-two-taupe-84.vercel.app. It is not a public social network and is not offered as a multi-customer platform.

Data we process

• The operator's Instagram professional account ID and access token, stored as hosting secrets.
• Public hashtag media returned by Meta's Hashtag Search API: media ID, caption, permalink, timestamp, and media URL when provided. This API does not return the author username.
• Seen media IDs in Upstash Redis, used only to avoid duplicate Slack alerts.
• Caption text sent to OpenAI to draft a suggested comment. OpenAI is instructed not to store the prompt beyond providing the draft.
• Slack incoming-webhook payloads containing the caption, suggested comment, and permalink.

What we do not do

• We do not scrape Instagram outside the official API.
• We do not sell data.
• We do not create advertising audiences from hashtag results.
• We do not post comments or follows through the API.

Retention

Access tokens remain until the operator rotates or deletes them. Seen media IDs are kept to cap duplicate alerts, currently the most recent 5,000 IDs. Slack copies remain under the operator's Slack workspace settings.

Contact

Privacy questions: junyafujii2016@gmail.com. To delete stored data, use the data deletion page.