Privacy Policy

Last updated: August 21, 2026

VEC Comment Automation ("the app") is operated by Van Every Family Chiropractic Center, PLLC ("we", "us", "the clinic") for its own Instagram professional account, @vaneveryfamilychiropractic. The app is single-tenant: it runs only for this one clinic's own account, which holds a role on the app. It is not offered to, or used by, any other business.

What the app does

When someone comments a configured keyword on one of the clinic's own Instagram posts or reels, the app receives that comment through Instagram's comments webhook and sends the commenter a one-time private reply relevant to what they commented (for example, a link). The app does not post any public replies or content to Instagram on its own.

What data we handle

We process only what is needed to deliver that reply:

• The Instagram-scoped user ID of the person who commented or messaged.
• The comment or message metadata needed to identify which comment triggered the automation and route the reply back to the correct person (comment ID, media ID, timestamp, and the matched keyword).
• Delivery status of the outbound reply (sent, failed, retried), so the same comment is not replied to twice.

We do not collect names, phone numbers, email addresses, payment information, or any other personal profile data beyond the Instagram-scoped identifiers above. We do not use this data for advertising, do not build audience or lookalike lists from it, and do not sell or share it with data brokers or any third party outside the clinic's own operation of this app.

How long we keep it

• Raw webhook receipts are kept for up to 30 days and then pruned automatically.
• Records tied to a completed, successfully delivered reply ("released claims") are kept for up to 90 days and then pruned automatically.
• Successful send claims used to prevent duplicate replies are kept permanently in de-identified form, solely to stop the same comment from ever being replied to twice.

Message deletions

If Instagram notifies us that a message was deleted (the message_deletions webhook), we redact our retained copy of that message's content. We do not keep a readable copy of deleted message content after that notification is processed.

Deauthorizing the app

If the clinic's Instagram account disconnects or deauthorizes the app (through Instagram's own "Apps and Websites" controls), we honor Meta's deauthorize callback immediately: all outbound sends for that account stop, and stored access tokens for that account are invalidated. See Data Deletion for what happens to previously stored data after deauthorization.

Where data lives

Data is stored in a private Postgres database operated by the clinic's technical operator, not accessible to the public, and not shared with any advertising, analytics, or data-broker service.

Contact

Questions about this policy, or about your data: email [email protected], or send the clinic's Instagram account a direct message.