Privacy Policy

Last updated: 17 July 2026

This policy explains what data Agent Tomas collects, how we use it, and how you can have it deleted. Agent Tomas is operated by Tomer Cohen Consulting (תומר כהן ייעוץ), Israel.

1. Who this policy covers

This policy applies to two groups:

• Our clients — businesses that connect their Instagram professional account to our service.
• People who interact with our clients on Instagram — anyone who comments on a client's post or sends them a direct message.

2. What data we collect

From our clients' Instagram accounts

When a client authorizes our service through Instagram's official login, we access:

• The account's username, ID, and account type (instagram_business_basic)
• The account's media posts, including captions, timestamps, and IDs
• Comments on those posts, including the comment text, the commenter's username and Instagram-scoped ID, and the timestamp (instagram_business_manage_comments)
• Direct messages sent to the account, including message text, sender's Instagram-scoped ID, and timestamp (instagram_business_manage_messages)

We do not collect or store Instagram account passwords. Access is granted through Meta's OAuth flow and can be revoked by the client at any time.

From people who interact with our clients

If you comment on a post or send a direct message to a business that uses our service, we process the content of that comment or message, your Instagram username, and your Instagram-scoped user ID. This is necessary to generate a relevant reply on the business's behalf.

3. How we use this data

We use the data solely to operate the service our clients hired us for:

• To read incoming comments and messages
• To generate and send replies on the client's behalf, according to rules the client defines
• To like comments where the client has enabled that function
• To keep a record of actions taken, so the client can review what the agent did

Comment and message content is sent to a third-party AI language model provider to generate replies. This processing is limited to producing the reply and is not used to train models.

We do not sell data. We do not use it for advertising. We do not share it with anyone other than the service providers described below.

4. Third parties

• Meta Platforms — the source of the data, via the official Instagram API.
• Anthropic — provides the AI language model used to draft replies. Content is sent for processing and is not retained for training.

5. Where data is stored and for how long

Data is stored on infrastructure controlled by Tomer Cohen Consulting (תומר כהן ייעוץ) in Israel, with access restricted to the operator. Access tokens are stored with restricted file permissions.

We retain comment and message records for as long as the client's account remains connected to our service, so that clients can review the agent's activity. When a client disconnects, we delete their data within 30 days.

6. Your rights

You may request access to the data we hold about you, correction of that data, or its deletion. See our Data Deletion page, or email itisagenttomas@gmail.com.

If you are a client, you can also revoke our access at any time directly from your Instagram settings, under Apps and Websites.

7. Children

Our service is not directed at children. We do not knowingly collect data from anyone under 13.

8. Changes

If we change this policy, we will update the date at the top of this page.

9. Contact

Tomer Cohen Consulting (תומר כהן ייעוץ)
Israel
itisagenttomas@gmail.com