Commentline Privacy Policy

Effective date: September 24, 2026

This Privacy Policy explains how Commentline (the “App”) collects, uses, stores, and deletes information when it is connected to Facebook and Instagram through Meta’s official APIs. The App is operated by Fieldcraft Home (“we,” “us,” or “our”).

Who We Are and How to Contact Us

Commentline is a small comment-automation tool operated by Fieldcraft Home, Franklin, Tennessee, USA. It lets a business that manages a Facebook Page and linked Instagram professional account automatically reply to comments that contain chosen keywords, and send the commenter a private message (for example, a link they asked for).

For questions about this policy or your data, or to ask us to delete your data, contact us at [email protected].

Who Uses the App

The App is used by Fieldcraft Home to manage its own Facebook Page(s) and Instagram professional account(s). It is not offered as a public service, and members of the public do not log in to it. If you comment on, or send a message to, one of our connected Facebook Pages or Instagram accounts, the App may process information about you as described below.

Information We Collect Through Meta APIs

The App only receives information that Meta makes available to it through the Facebook Graph API and Meta webhooks for accounts we have connected. We do not scrape websites, and we do not ask for or store anyone’s Facebook or Instagram password.

From the account owner who connects the App

  • Facebook Page IDs and names, and the ID, username, and name of any linked Instagram professional account.
  • Access tokens issued by Meta that allow the App to act on those Pages and accounts, and when those tokens expire.

From people who comment on or message our connected accounts

  • The text of comments left on our Facebook Page posts and Instagram posts or reels, along with the comment ID and the ID of the post it was left on.
  • The commenter’s Facebook or Instagram user ID (which Meta scopes to our App or Page) and their username or display name as provided by Meta.
  • The text of direct messages (Instagram Direct or Facebook Messenger) that people send to our connected accounts, and the sender’s ID.
  • Records of the public replies and private messages the App sends in response, including the time sent.
  • If someone comments a keyword to join a waitlist for an item we are selling, a waitlist entry containing their username, user ID, position in line, status (for example, offered, paid, expired), and relevant timestamps.

The App does not request or receive your email address, phone number, friends list, photos, location, or payment card information.

Meta permissions used

To provide these features, the App requests the following Meta permissions from the account owner: pages_show_list, pages_manage_metadata, pages_read_engagement, pages_messaging, instagram_basic, instagram_manage_comments, instagram_manage_messages, and business_management. It also subscribes our connected Pages to Meta webhooks for comments/feed activity and messages.

How We Use Information

  • To detect when a comment contains a keyword we have set up, and to post a public reply to that comment.
  • To send the commenter one private reply through Instagram Direct or Messenger (for example, a link or details they asked for), as permitted by Meta’s private-reply rules.
  • To show us incoming comments and message threads so we can read them and respond manually, including follow-up messages within Meta’s 24-hour messaging window.
  • To run a simple first-come, first-served waitlist for items we sell, and to send the next person in line a message with a payment link. Payments are made outside the App (for example, through Venmo); the App does not process or store payment details.
  • To keep the App working securely, including verifying that webhook notifications really come from Meta.

We do not sell your information, use it for advertising, or use it to build profiles about you. We only send private messages in response to your comment or message; we do not send unsolicited messages.

Legal Basis and Consent

The account owner authorizes the App through Facebook Login and can revoke that access at any time. For people who comment on or message our accounts, we process information based on our legitimate interest in responding to comments and messages directed to our business, and to take steps you request (such as sending you a link you asked for or holding your place in a waitlist). Where the law requires consent, we rely on the action you take by commenting a keyword or messaging us, and you can ask us to stop at any time.

Sharing and Third-Party Processors

We do not sell or rent personal information. Information is shared only as follows:

  • Meta Platforms: the App sends replies and messages through Meta’s APIs, so the content of those replies is delivered to and by Meta. Your use of Facebook and Instagram is also governed by Meta’s Privacy Policy.
  • Hosting and network providers: the App runs on a cloud server we control (hosted with Amazon Web Services), and web traffic to it passes through Cloudflare for security and delivery. These providers process data only to provide their services to us.
  • Legal reasons: we may disclose information if required by law, or to protect our rights, users, or the public.

The App does not send your comments or messages to any artificial intelligence or large language model service, analytics service, or advertising network.

Storage, Security, and Retention

Data collected by the App is stored in a private data store on our own server, which is not publicly accessible. Connections to the App use HTTPS, and webhook notifications from Meta are verified with a cryptographic signature. Access to the App’s administration tools is limited to us. No method of storage or transmission is completely secure, but we take reasonable steps to protect the information we hold.

The App does not currently delete records automatically on a fixed schedule. We keep comment, message, and waitlist records only as long as we need them to respond to you, run our waitlists, and keep reasonable business records, and we delete them when they are no longer needed or when you ask us to. Meta access tokens are kept only while the App is connected and are removed when the connection is reset or revoked. If you ask us to delete your data, we will do so as described below.

Data Deletion Instructions

You can ask us to delete information the App holds about you at any time:

  • Email [email protected] with the subject “Commentline data deletion request.”
  • Include your Instagram username or Facebook name, and if possible the post you commented on or the account you messaged, so we can find your records.
  • We will delete the comments, messages, IDs, usernames, and waitlist records associated with you from the App’s data store, and confirm by email, within 30 days of receiving your request.

If you connected your own Facebook Page or Instagram account to the App, you can also remove the App’s access at any time:

  • Facebook: go to Settings & privacy > Settings > Apps and Websites (Business Integrations for Pages), find Commentline, and select Remove.
  • Instagram: go to Settings > Apps and Websites (or Website permissions), find Commentline, and select Remove.

Removing the App stops it from receiving new data. To have data it already collected deleted, send us an email as described above.

Please note that public replies posted on Facebook or Instagram, and messages delivered to your inbox, are stored by Meta. You can delete your own comments and messages in the Facebook or Instagram apps.

Children’s Privacy

The App is not directed to children, and we do not knowingly collect information from children under 13 (or the minimum age required in your country to use Facebook or Instagram). If you believe a child’s information has been processed by the App, contact us and we will delete it.

Your Rights

Depending on where you live, you may have the right to:

  • Ask what personal information we hold about you and get a copy of it.
  • Ask us to correct information that is inaccurate.
  • Ask us to delete your information.
  • Object to or ask us to restrict how we use your information, or withdraw consent where we rely on it.
  • Ask for your information in a portable format.
  • Complain to a data protection authority where you live.

Residents of the European Economic Area, the United Kingdom, California, and other places with privacy laws (such as the GDPR or the CCPA/CPRA) can use these rights by contacting us at [email protected]. We do not sell or share personal information for cross-context behavioral advertising, and we will not treat you differently for using your rights. We may need to verify your identity before acting on a request.

Changes to This Policy

We may update this Privacy Policy if the App or the law changes. When we do, we will post the new version on this page and update the effective date above. If a change significantly affects how we use your information, we will take reasonable steps to let affected users know.

Contact

Fieldcraft Home, Franklin, Tennessee, USA

Email: [email protected]

Website: fieldcrafthome.com