Privacy policy
Last updated 28 September 2026
Lexigram is a small tool that lets the owner of an Instagram Business or Creator account publish posts, answer comments and direct messages, and see how their own posts performed, without Instagram's feeds. This policy explains what Lexigram stores and why.
What we collect
- From your Instagram account, with your permission (via Meta's official Instagram API): your username, account ID and type, your posts and their captions, comments on your posts, direct messages people send to your account, and your posts' statistics (views, likes, comments, reach, saves, shares).
- What you create in Lexigram: captions, uploaded photos and videos you publish, replies, and private notes on conversations.
- An access token from Instagram, stored encrypted, so Lexigram can act on your behalf.
How we use it
Only to provide the service to you: show your posts, comments, messages and statistics, and send the posts and replies you ask it to send. We don't sell data, show ads, build profiles, or use your data for anything else. Nothing is posted or sent without your explicit action.
Where it's stored
In a Postgres database (Supabase, EU – Frankfurt) and, for media you publish, Vercel Blob storage (EU – Frankfurt). The app runs on Vercel. Access is restricted to the service itself.
How long we keep it
For as long as your account is connected. Raw technical event logs are deleted after 30 days. You can delete everything at any time; see data deletion.
People who message or comment on your account
Lexigram processes their comments and messages only so the account owner can read and answer them, the same way Instagram shows them to the owner.
Your rights
You can access, export or delete your data, or withdraw Lexigram's access in Instagram (Settings → Website permissions → Apps and websites). Questions: yannik@pvlse.io.