1. Who operates CommentOS
CommentOS is operated by Tom Frazier. It is a single-user comment operations tool used to receive, organize, draft, approve, and deliver responses for connected social-media accounts.
2. Information CommentOS processes
Depending on the services connected to CommentOS and the actions people take on those services, CommentOS may process:
- Social account and profile information, including account identifiers, usernames, display names, and connection status.
- Public comments, replies, direct messages, message identifiers, timestamps, and related post or media identifiers, captions, and links.
- OAuth access tokens and other credentials needed to connect authorized accounts. Stored platform credentials are encrypted.
- CommentOS records such as keyword matches, reply drafts, approvals, delivery results, contact records, consent status, clicks, conversions, and operational audit logs.
- Basic technical and security information associated with requests to the service, such as request identifiers, timestamps, error events, and rate-limit events.
3. How information is used
CommentOS uses information to:
- Receive and display comments and messages from connected accounts.
- Match comments to registered keywords and prepare relevant responses.
- Generate, review, approve, publish, and track public or private replies.
- Maintain contact history, consent records, analytics, and service reliability.
- Authenticate the owner, protect the service, investigate failures, and prevent misuse.
Where applicable, processing is based on authorization from the connected account owner, the legitimate interest in managing communications people initiate, consent, or another lawful basis available under applicable law.
4. Automated drafting
When an optional language-model provider is configured, relevant comment or message text and limited context may be sent to that provider to prepare a draft response. CommentOS supports review and approval controls before publishing. If no model provider is configured or a request fails, CommentOS uses the registered response instead.
5. When information is shared
Information may be shared only as needed to operate CommentOS, including with:
- Connected platforms such as Meta services when receiving events or publishing authorized replies.
- Hosting and infrastructure providers that store data and run the application.
- A configured language-model provider when automated drafting is enabled.
- Authorities or other parties when required by law, necessary to protect rights or safety, or involved in a business transfer.
CommentOS does not sell personal information or use it for third-party behavioral advertising.
6. Retention and deletion
Information is retained for as long as reasonably necessary to operate CommentOS, maintain accurate communication and consent records, secure the service, resolve disputes, and meet legal obligations. Disconnecting a social account stops new collection from that connection but may not automatically remove prior operational records.
To request access, correction, or deletion, follow the CommentOS data-deletion instructions. Verified requests will be handled in accordance with applicable law. Some information may be retained when required for security, fraud prevention, legal compliance, or the establishment or defense of legal claims.
7. Security
CommentOS uses access controls, encrypted connections, encrypted stored platform credentials, scoped credentials, audit records, and other safeguards designed to protect information. No storage or transmission method is completely secure, so absolute security cannot be guaranteed.
8. Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing. You may also contact the connected social platform directly to manage information held by that platform.
9. Children
CommentOS is not directed to children under 13, and it is not intended to knowingly collect personal information from children.
10. International processing
Service providers may process information in the United States or other countries. Where required, appropriate safeguards are used for international transfers.
11. Changes to this policy
This policy may be updated as CommentOS or applicable requirements change. The effective date above will be revised when material changes are published.
12. Contact
Questions or privacy requests may be sent to tom@tomfrazier.com.