CONTENT COMPASS

Privacy notice

Last updated: 13 September 2026

Who operates Content Compass

Content Compass is operated by Elina Timiryasova as an individual. Contact embria@gmail.com about privacy, your information, or this notice.

Information we handle and why

We use your email address and sign-in session information to provide and protect your account. Our email provider delivers sign-in codes. Security controls process request information, including IP-derived rate-limit identifiers.

When you connect Instagram, we receive the profile identifiers, account information, media, captions, comments and performance metrics available through the permissions you grant. We store access credentials in encrypted form to perform the features you request. Instagram handles your Instagram password; Content Compass does not ask you to provide it.

We also store drafts, edits, account preferences, schedules, approvals, publication results and usage records needed to operate your workflows. If you connect OneDrive or import content, we process the selected files, descriptions and related publishing information. Commenters' information comes from Instagram and is used to support the connected account's comment workflow.

AI-assisted features

Caption and reply generation sends relevant text and context to OpenAI, which may include captions, comments, account instructions and content descriptions. AI actions are marked with sparkles. Optional automatic workflows may also generate content when enabled. Review generated material and the workflow settings before authorising publication. Do not include sensitive information that is unnecessary for the task.

Service providers and sharing

We use OpenAI and its Sites hosting service, Cloudflare for application infrastructure and storage, Resend for sign-in email, Meta for Instagram connections, and Microsoft when you connect OneDrive. Information is shared as needed to deliver those features. Content you authorise for publication is sent to Instagram and becomes visible according to the destination and account settings. Connected services also process information under their own policies.

Purposes and legal grounds

We process account and workflow information to provide the service you request. We rely on legitimate interests in operating a secure and reliable service for proportionate security and diagnostic processing, and in supporting account owners' management of comments. Optional connections and features are controlled through your permissions and settings. Where processing relies on consent, you may withdraw it. Account owners remain responsible for their own use of other people's information.

Storage and retention

Information is retained according to the purpose for which it is needed: providing your active account and saved workflows, completing or investigating publication requests, protecting the service, and handling deletion or other requests. There is no single automatic expiry period for all saved content. Sign-in codes expire after ten minutes. Provider logs and backups may have separate retention periods. Contact us for information about a particular record or to request deletion.

International processing

Our service providers may process information outside the UK. Contact us for details about the relevant providers, processing locations and transfer arrangements for your information.

Your choices and rights

You can disconnect integrations, change workflow settings, and request access, correction, deletion or a copy of your information. Depending on the circumstances, you may also object to processing or ask for it to be restricted. Email embria@gmail.com; we may ask for enough information to verify your request. See our data-deletion instructions. Deleting data from Content Compass does not automatically remove posts already published on Instagram or your original OneDrive files.

You can raise concerns with us or complain to the UK Information Commissioner's Office. We will update this notice when the service's data handling changes.