Privacy Policy
Curious Inbox is a private tool operated by Doogan LLC (Joel Dehlin). It has one user: the owner of the Instagram, TikTok and YouTube accounts it is connected to. It helps that person read and reply to comments on their own posts. It is not offered to the public and nobody else can sign in.
What the tool reads from Instagram, TikTok and YouTube
Through Instagram's official API, TikTok's official API for Business and the YouTube API Services, and only for the connected accounts, the tool reads:
- The account's profile details and its posts (on YouTube, the channel and its videos).
- Comments on those posts: the text, when it was posted, and the username and the platform's identifier of the person who wrote it.
- Statistics Instagram provides about the account and its posts. TikTok and YouTube statistics are not read.
It does not read private messages, and it does not collect anything about commenters beyond their comments on the connected account's posts.
What it is used for
- Showing comments to the account owner so they can reply.
- Letting the account owner write and post replies.
- Showing the account owner how their posts are performing.
To save the operator time, the tool can draft a suggested reply to a comment. For that it sends the text of the comment, the other comments in its thread, the post's caption and the operator's earlier replies to that commenter to a service provider, with usernames removed: the provider is not told who wrote any comment. The operator reads every suggestion and decides what, if anything, is sent; nothing is posted automatically.
Comment data is not sold, not used for advertising, and not used to build profiles of commenters.
Who else handles the data
Fly.io hosts the tool and its database, on the operator's behalf and only to provide that service.
Anthropic receives comment text, post captions and thread context, without usernames, when the tool drafts a suggested reply, as described above. It processes that data on the operator's behalf under Anthropic's commercial terms, which do not allow it to be used to train Anthropic's models. No one else receives the data.
How long it is kept
- When a comment is removed from Instagram, TikTok or YouTube, its text is deleted from the tool. Stored YouTube data is refreshed from YouTube at least every 30 days, or deleted.
- Comment text is deleted after 12 months.
- If an account is disconnected, everything that came from that platform is deleted.
Security
Access to the tool requires a password and a second sign-in step. The credentials that connect it to Instagram, TikTok and YouTube are stored encrypted. The pages at /connect/tiktok/ and /connect/youtube/ only show the one-time code TikTok or Google sends back after the owner authorises the tool; they store nothing and make no network requests.
YouTube
The tool uses the YouTube API Services. By using it with YouTube, the owner agrees to the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy. The owner can remove the tool's access to the YouTube account at any time at Google's security settings page. The tool's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Your choices
If you have commented on the connected account's posts, you can delete your comment on Instagram, TikTok or YouTube at any time, and it will be removed from the tool. You can also ask for your comments to be deleted from the tool by writing to the address below.
Contact
Questions and deletion requests: hello@joeliscurious.com