Privacy Notice
Effective July 14, 2026
This notice covers the optionOS Instagram comment-to-private-message beta invitation and the waitlist form reached from that message.
Controller and contact
The data controller is Yunus Emre Ak, operating optionOS. Privacy requests can be sent to hello@optionos.app.
Data processed
- For an Instagram comment containing beta, link, or optionOS (case-insensitive): comment ID, media ID, Instagram user ID and username, comment text, matched keyword, reply-delivery status, and timestamp.
- If the person submits the waitlist form: email address, optional form answer, referral source, hashed IP address, user-agent, language, waitlist state, and related event timestamps.
Comments without one of the listed trigger words are not stored by this Instagram invitation flow.
Purpose, method, and basis
Instagram comment data arrives through a Meta webhook. Waitlist data is submitted by the person through the optionOS form. The data is used only to respond to the person's request, prevent duplicate or abusive requests, send the requested private invitation link, verify the submitted email, and manage the beta invitation.
Where applicable, processing is based on taking steps requested by the person and on the operator's legitimate interest in providing and securing that requested flow.
Service providers
Meta and Instagram deliver the event and private reply. Cloudflare hosts the endpoint and stored records. Resend delivers verification and invitation emails when an email address is submitted.
Retention and choices
Matching Instagram-interaction records are kept for no more than 90 days; expired records are automatically deleted by a daily scheduled process. Non-personal deletion-operation receipts are kept for three years. Waitlist records currently have no automatic time limit.
A person may request access, correction, or deletion without waiting for the automatic period. Other rights may apply under applicable data-protection law.
Deletion instructions are available at optionos.app/legal/data-deletion.
Security
optionOS limits this flow to the data and providers described above. No internet transmission or storage system can be guaranteed completely secure.