Privacy Policy

What we collect

• Instagram messages and comments that you receive on the account you connect, so we can read and respond to them on your behalf.
• Your Instagram username and account ID, used to identify the connected account and route replies correctly.
• The business profile you enter — details about your brand, voice, products, and how you like to reply.
• An encrypted access token issued by Instagram, which lets Ethos act on the account you authorized.

Why we collect it

The core service is simple: Ethos automatically replies to your Instagram DMs and comments in your voice. Everything we collect exists to make those replies accurate, timely, and authentically yours. We do not use your data to build advertising profiles or for any purpose unrelated to running this service for you.

How it is stored

Your data is stored in a Supabase Postgres database. Access tokens are encrypted at rest so that even within our systems they are never held in plain text. Access to production data is limited to what is needed to operate and support the service.

Third parties that process data

We rely on a small set of trusted providers to deliver Ethos. Each processes only the data needed for its role:

• Anthropic — generates the AI replies in your voice.
• Meta / Instagram — the platform your account lives on and the source of the messages and comments we act on.
• Supabase — our database and data storage.
• Clerk — handles your account sign-in and authentication.
• Vercel and Railway — host and run the application.
• ElevenLabs — optionally used for voice features, only if you enable them.

We do not sell your data

We do not sell, rent, or trade your personal information or your Instagram data to anyone. Data is shared only with the processors listed above, and only to operate the service.

Retention and deletion

We keep your data only while your account is active and you have an account connected. You can disconnect your Instagram account inside Ethos at any time, which immediately removes the stored access token for that account. You may also request full deletion of your data by emailing clickmarkai@gmail.com. If you remove the app from your Instagram settings, Meta notifies us automatically and we delete the associated connection.