Privacy policy

1. What the extension reads

The extension works with pages in your own browser, using your own logged-in Instagram session. It reads:

• Your setup and settings. Your name and company, what you offer, your website address, your goal and audience, hashtags and accounts to look at, what it should do, daily limits, active hours, your Brand Brief and your Never-interact list.
• Your business website. During setup it downloads public pages of your website (title, description, headings and text) so the AI can suggest your setup. It asks first: Chrome shows a prompt for that site, and nothing is read unless you choose Allow.
• Instagram pages you are logged in to. Public profile details shown on Instagram (username, display name, category, bio, links, follower and post counts, profile picture), posts (the caption and the image) and lists of followers. It reads these from the page in your browser. It does not use Instagram’s private APIs and never sees your Instagram password.
• Your Instagram direct messages, only if you have it reply to DMs. It reads the recent messages in the conversations it answers. To notice new messages it reads the unread count on Instagram’s Messages icon in your tab.
• Message Requests. Requests from people it never contacted are only listed in the side panel (their username, name and the short preview Instagram shows) so you can deal with them yourself. It never opens, accepts or answers them.
• Comments it answers. If it drafts a reply to a comment, it reads that comment and the post it is on.
• Files you teach it ("Teach it"). Brand guides, FAQs, decks, case studies, client lists and screenshots you upload. It extracts their text so it can learn your talking points. A client list (CSV) is used to suggest accounts for your Never-interact list.
• Your voice samples. Messages you paste to show how you write, and how you describe your tone.
• Other websites, only when you ask. If you chat with IG Pilot about a page open in your browser, it reads that page, after you allow that site in Chrome’s prompt.
• Lead websites, only for the Lead List contact lookup. If you switch on "Get email & phone from their websites" (and allow it in Chrome’s prompt), it opens each lead’s own website and looks for a business email address and phone number published there.

2. How the information is used

The information is used only to run the features you switch on:

• setting IG Pilot up for your business and learning your voice,
• deciding which accounts and posts fit the goal and audience you set,
• writing comments, direct messages and replies and sending them on your behalf, and taking the other actions you enabled (follow, like), within your daily limits,
• keeping your contact list and its memory, so nobody is contacted twice and it learns what works for your account (section 5),
• skipping people on your Never-interact list, including people who ask it to stop,
• building the lists and CSV files you export.

Sending on your behalf. IG Pilot runs in complete auto mode. While the Autopilot is on, it sends the comments, direct messages and replies it writes from your Instagram account without asking you first, within your daily limits, the hourly cap, human pacing, your active hours and your Never-interact list. Replies to people who wrote to you first wait for your OK until you choose to trust it with them, and a message that pitches your offer always waits. To approve first DMs, comments or replies before they go out, turn on "Ask me before sending" in the Autopilot (section 9). Every action it takes is listed in the History with the recipient, the exact text and the reason.

It is not used for advertising, and it is not used to decide creditworthiness or for lending.

3. The AI: our server and Anthropic

All AI in this version of IG Pilot runs through our server (igpilot-api.onrender.com) using Anthropic’s Claude models (Opus 5.5, Sonnet 5.5 and Haiku 5.5; each reply in the chat shows which model answered it). You don’t need your own AI key, and no AI model is downloaded to your browser.

• What is sent. Only what the AI needs for the task:
  • the instructions built from your setup (such as your company, what you offer, your goal, audience and Brand Brief);
  • your messages in the side panel’s chat;
  • the details of the account it is working on (username, display name, category, bio, links and follower counts), post captions, and the comments or messages it is answering;
  • post images, so a comment can mention something specific in the post;
  • files you upload in "Teach it" (their text, and images such as screenshots), when it learns from them to draft your Brand Brief;
  • your voice samples, to draft sample comments and messages in your voice;
  • your website’s text, and a page you asked it to read, when you allowed that site.
• To whom. From your browser to our server, which passes it to Anthropic (api.anthropic.com) and returns the answer. It is never sent to anyone else.
• Not stored. Our server does not store or log the text or images sent to the AI or the AI’s answers. It keeps only how many AI requests your account made each day (and their size in tokens), so it can apply your plan’s daily allowance. Those counts are deleted after 90 days or when you delete your account. Anthropic processes the requests as our service provider under its commercial terms, which may include keeping them for a limited time for abuse and safety monitoring; it does not use them to train its models.
• Videos. This version does not watch Reels or other videos. (A self-installed owner edition can send a Reel’s video, or a few frames of it, to Google’s Gemini API with the owner’s own key, to describe it. That edition isn’t distributed through the Chrome Web Store.)
• Without an account, the AI features don’t run and nothing is sent for them.

4. Your IG Pilot account

The Autopilot and the AI come with an IG Pilot account. You sign in with your email address (we email you a 6-digit code to type into the side panel; there is no password), or with Google where that option is shown.

• What our server keeps: your email address; if you sign in with Google, Google’s account id for you; your plan and trial dates; if you pay, your Stripe customer ID and a copy of your subscription status (plan, billing period, renewal date); a sign-in session (stored only as a hash); the daily AI request counts above; and, for each Instagram account you use with your plan, a keyed hash of a hash of its username (so we can count the accounts on your plan without knowing them; the username itself never leaves your browser). Short-lived sign-in records (hashes only) are deleted after a day.
• Trying it before you sign in. If you choose “Try it first”, the extension makes a random secret on your device and our server creates a temporary guest account for it, with no email address. Our server keeps a hash of that secret (one guest per device), a keyed hash of your IP address (only to limit how many new guests one network can start per day), the trial dates and the daily AI request counts. Saving your account with your email or Google is an ordinary sign-in; the guest account stops working when its trial ends.
• Connecting another AI app (if your plan includes it). If you create an access token so an AI app such as Claude can give IG Pilot instructions, those instructions pass through our server to your browser. An instruction’s details are kept only while it waits for your browser to come online, and are removed when it is delivered. A record of the instruction (its name, status and a result of at most 80 characters) is deleted after 30 days.
• Payments are handled by Stripe on its own pages (Checkout and the billing portal). We never see your card number.
• Email for sign-in is sent through our email provider (Resend).
• In your browser the extension keeps your sign-in session, your account details and a signed copy of your plan (so it keeps working for up to 7 days if our server can’t be reached).
• Deleting your account: Settings → Account → Delete my account cancels any subscription, deletes your account, sessions, AI usage counts and Instagram account hashes from our server and your customer record at Stripe (Stripe keeps the payment records it is legally required to keep), and then deletes the settings, drafts and history IG Pilot keeps in this browser (section 9 covers the rest). We keep only an anonymous note that an account was deleted, and a keyed hash of your email address so the free trial stays once per email address.

5. People you work with and what IG Pilot learns

To keep your outreach organized and avoid contacting the same person twice, IG Pilot keeps a contact list (CRM) and a short memory of what has worked for your account. The contact list holds only what is publicly visible on a profile or its linked website (name, bio, category, links, public phone and email, follower counts), plus your own interactions and conversations with that person. For private accounts only the visible header is kept. This data is stored locally in your browser (IndexedDB). If you use the desktop companion it is also stored in ~/.igpilot/brain/ on your computer, readable only by your user account. It is not sent to IG Pilot servers. You can remove a person with "Forget this person", which deletes them from both the contact list and the memory. You can delete a single memory, download everything with "Export all", or delete it all by removing that folder or uninstalling the extension.

Profile pictures. Profile pictures of people the Autopilot engaged are saved locally on this computer, as small images next to their entry in the contact list. They are downloaded once from Instagram’s image servers (.cdninstagram.com, .fbcdn.net) without your Instagram cookies, and are never sent to our server. "Forget this person" deletes the picture too.

6. Desktop notifications

When a draft is waiting for your approval (you asked to see it first, or it is a reply to someone who wrote to you first), Chrome shows a desktop notification. It is created on your computer, contains only the person’s @username and that a draft is ready, and is not sent anywhere. Clicking it opens the side panel. To avoid repeats, the extension remembers the IDs of the last 200 drafts it notified you about. You can turn notifications off for IG Pilot in Chrome’s or your computer’s notification settings.

7. Where it is stored

• On your computer, in Chrome’s extension storage (chrome.storage.local). Your settings, setup, Brand Brief and voice samples; your IG Pilot sign-in session, account details and signed plan (section 4); your chats with IG Pilot; the drafts waiting for your approval (recipient, text, the AI’s reason and a short snippet of the post, bio or message it answers; drafts expire after 3 days); the action history (date, time, action, username, the text sent and the reason; the newest 5,000 entries are kept); today’s action counters; the accounts already handled; your Never-interact list; the Message Requests list (newest 100); and the IDs of comments and posts it already looked at, so nothing is answered twice. This storage is not synced to your other devices.
• On your computer, in the extension’s IndexedDB. The contact list and memory, and the saved profile pictures (section 5); the files you uploaded in "Teach it" and their extracted text; and, only if you turn on step screenshots, small screenshots of the Instagram tab at each step (at most 60 per chat, the oldest removed first; they are never sent to the AI or anywhere else).
• On our server: only your account information and AI request counts (section 4). None of your contacts, drafts, history, Instagram usernames, messages, files or settings.
• In your Downloads folder. CSV exports are saved there as normal files. They stay on your computer until you delete them.

The message text people send you isn’t stored, except in the conversations kept with your contact list (section 5), the message a reply draft answers (kept with that draft so you can see what you’re approving, and deleted at most 3 days after the draft is sent, skipped or expires), and the short preview of each listed Message Request.

8. What is shared

Nothing is sold, and there is no analytics or tracking. The only things that leave your browser are:

• what the AI needs, sent to our server and Anthropic only to decide and write (section 3);
• your account requests to our server: sign-in, your plan, the hashed Instagram account check, and starting Checkout or the billing portal (section 4);
• payments, which you make on Stripe’s pages, and the sign-in email we send through Resend;
• hooks you set up yourself (Settings → Advanced → Hooks): event details (your account, the other account, the action, its text and the time) are sent to the web address you enter, and nowhere else.

Like normal browsing, your browser also talks directly to the sites involved: Instagram (in your Instagram tab, and its image servers for post images and profile pictures), your own website and pages you asked it to read, and lead websites (for the contact lookup). Those sites see these visits the same way they would see you visiting them, under their own privacy policies.

Actions the extension takes on Instagram for you, such as follows, likes, comments, messages and replies, are public or visible to the people involved, just as they would be if you did them yourself.

9. Your choices and deleting your data

• Send on its own, or ask you first. By default IG Pilot sends the comments, direct messages and replies it writes on its own, within your limits (section 2). Turn on "Ask me before sending" in the Autopilot for first DMs, comments or replies, and each one waits in the side panel with the recipient and the exact text until you approve, edit or decline it. Likes and follows run on their own, within your limits. Every action is listed in the History.
• One Autopilot switch. Turn it off at any time. You choose what it does, the days and hours it works and its daily limits.
• Site access. IG Pilot reads a website other than Instagram only after you allow that site in Chrome’s prompt. You can remove a site’s access in chrome://extensions → IG Pilot → Details → Site access.
• Your contact list and memory (section 5): "Forget this person", delete a single memory, or "Export all".
• Files you taught it can be removed one by one in "Teach it".
• Sign out (Settings → Account) removes your session from this browser. Delete my account deletes your account from our server too (section 4).
• Notifications can be switched off for IG Pilot in Chrome’s or your computer’s notification settings.
• Delete all my data (Settings) permanently removes everything IG Pilot keeps in this browser: your settings, sign-in session, drafts, history, daily counts and lists kept in Chrome’s extension storage, and the contact list, memory, profile pictures, uploaded files and step screenshots kept in the extension’s IndexedDB. (Your IG Pilot account stays until you delete it.)
• Removing the extension (chrome://extensions → IG Pilot → Remove) also deletes everything it stores: Chrome deletes the extension’s storage.
• Exported CSV files are yours. Delete them from your Downloads folder whenever you like.

10. Information about other people

Your contact list and exports can contain other people’s and businesses’ public information, such as names, usernames, bios, profile pictures and business contact details. You decide how to use it. You are responsible for following the laws that apply to you, including privacy and anti-spam laws, and Instagram’s terms.

11. Children

The extension is a business tool. It is not directed at children, and we do not knowingly process children’s information.

12. Changes to this policy

If this policy changes, we will update the effective date above and publish the new version at the same address. Material changes will also be noted in the extension’s store listing.

13. Contact

Questions or requests: hello@igpilot.io

IG Pilot is an independent product. It is not affiliated with, endorsed by, or sponsored by Instagram or Meta. Instagram is a trademark of Instagram, LLC.