Privacy Policy

Codm ("we", "us") is an Instagram comment automation service operated as a crawlink.com product, available at codm.crawlink.com. This policy explains what data we collect, why we collect it, how it is stored, and how you can have it deleted. By using Codm you agree to this policy.

1. Data we collect

• Google account basics (sign-in). When you sign in with Google we receive your name, email address and profile picture. We use these only to create and identify your Codm account. We never see your Google password.
• Instagram professional account data (via Meta's Instagram API). When you connect an Instagram account we receive and store: your Instagram user ID and username, an access token authorised by you, the posts/reels you choose to automate, and — to run your automations — the comments on those posts and, if you enable DM funnels, the direct-message conversations the funnel takes part in. We request only the permissions the product needs: instagram_business_basic, instagram_business_manage_comments and instagram_business_manage_messages.
• Automation content you create. Your sections, keyword rules, reply templates, AI brand-voice prompts and DM funnel steps.
• Activity logs. A log of automatic replies and DMs sent on your behalf (the triggering comment, the reply, and when it happened), so you can audit what the automation did and we can enforce plan quotas.
• Billing data. Payments are processed by Razorpay. We store your subscription status and plan; we never see or store your card, UPI or bank details — those go directly to Razorpay.

2. How we use data

We use the data above for one purpose: running the automations you configure — matching comments against your rules, posting replies, sending the DM-funnel messages you designed, generating AI replies when you enable them, and showing you activity and quota usage. We do not sell your data, use it for advertising, or use Instagram data for anything beyond providing the service to you, in line with the Meta Platform Terms.

3. Where data is stored

Data is stored on Cloudflare's global infrastructure (Workers and the D1 database). Instagram access tokens are stored server-side and are never exposed to your browser or to other users. All traffic to and from Codm is encrypted with HTTPS.

4. Third parties we rely on

• Meta / Instagram — comment and messaging APIs, subject to their own terms and privacy policy.
• Google — sign-in only.
• Razorpay — subscription payments.
• Cloudflare — hosting, database and AI reply generation.

These providers process data only as needed to deliver their part of the service.

5. Retention

We keep your data while your account is active. Disconnecting an Instagram account removes its access token and stops all automation for it. When your account is deleted (see below), associated Instagram data, rules, logs and tokens are deleted from our systems.

6. Deleting your data

You can request deletion of your account and all associated data at any time — see the data deletion instructions. Deletion requests are honoured within 30 days.

7. Your rights

You may request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it by writing to support@crawlink.com.

8. Changes to this policy

If we make material changes we will update this page and the effective date above. Continued use of Codm after a change means you accept the updated policy.

9. Contact

Questions about privacy: support@crawlink.com