Captain Dream Privacy Policy

Captain Dream is an account-management application used to operate Instagram professional accounts that have expressly authorized the application.

Data we process

Depending on the features an account authorizes, we may process Instagram account identifiers and usernames; profile and media metadata; captions; comments and replies; direct-message conversation content and participant identifiers; publishing status; insights and performance metrics; OAuth access credentials; and limited security and audit records.

How and why we use data

We process this data only to connect authorized accounts, publish requested content, display account and media information, manage comments, receive and reply to user-initiated messages, provide analytics, prevent duplicate or unauthorized actions, troubleshoot failures, and protect the service.

Storage, service providers, and disclosure

Operational data and access credentials are primarily stored on the application operator's controlled local system. Access credentials are kept in the operating-system credential store rather than ordinary application records. Cloudflare hosts the public authorization callback and webhook relay; callback results are encrypted and expire after a short period, and queued webhook deliveries are retained only long enough for secure delivery and processing. Meta and Instagram process data under their own terms when their APIs are used.

We do not sell Instagram platform data. We do not disclose it for unrelated advertising or profiling.

Retention and deletion

Credentials are retained until the account is disconnected, access is revoked, or they expire. Operational records are retained only for as long as needed for the authorized features, security, troubleshooting, and applicable obligations. Account owners may request deletion by following the Captain Dream data-deletion instructions.

Security

We use encrypted transport, bounded callback and webhook endpoints, credential isolation, permission checks, audit records, and data-minimization controls. No method of storage or transmission is completely risk-free.

Your choices

You may disconnect the application through Instagram's Apps and Websites settings, revoke permissions, or request deletion. Never send an Instagram password, one-time code, cookie, or access token in a deletion request.

Contact

Privacy and deletion questions: k392005@126.com.

Changes

Material changes will be reflected on this page with an updated effective date.