Privacy Policy

Last updated: August 6, 2026

Opsight Social Listener ("Opsight," "we," "us") lets you connect your Instagram, YouTube, and Facebook accounts so that an AI assistant you control (via the Model Context Protocol, or MCP) can read and manage comments on your behalf. This page explains what information we collect, why, and how you can remove it.

Information we collect

• Your Google identity. When you sign in with Google, we receive your name, email address, and profile picture (scope: openid email profile). We use this only to identify you and associate you with your own connected accounts — we never request access to your Google data beyond your basic profile.
• Platform credentials you provide or connect. When you paste in or use "Connect" to link Instagram, YouTube, or Facebook, we store the resulting access token(s) and the identifiers needed to act on that account (e.g. your YouTube channel ID, Facebook Page ID, or Instagram business account ID). These are the credentials your AI assistant uses, through our connector, to read and reply to comments on the accounts you explicitly connected.
• Session cookie. After signing in, we set a signed, httpOnly session cookie that expires automatically after 24 hours, or immediately if you sign out.

Platform permissions we request

• YouTube: https://www.googleapis.com/auth/youtube.force-ssl — lets your assistant read and manage videos and comments on the channel you connect.
• Instagram: instagram_business_basic, instagram_business_manage_comments — read your business account's media and manage comments on it.
• Facebook: Page-level permissions needed to read and manage comments and engagement on the Page you select during the connect flow.

How we use this information

We use the information above solely to create and operate your personal connector: a private URL that your MCP-compatible AI client (for example, Claude) calls to act on the social accounts you connected. We do not use your data for advertising, do not sell it, and do not share it with third parties, other than the backend service that reads the same secure database to fulfill the actions you request through your own AI client.

How long we keep it

Your platform credentials and profile information are kept until you delete your connection. You can remove everything at any time from your dashboard, which permanently deletes your stored credentials. Session cookies expire automatically after 24 hours.

How we protect it

All traffic to this service is encrypted over HTTPS. Each connection is identified by an opaque, randomly generated key, and every OAuth "Connect" flow uses a signed, time-limited request token to prevent forged requests.

Your choices

• Disconnect any platform or delete your entire tenant record at any time from the dashboard.
• Sign out to immediately end your session.
• Contact us at opsightpro@gmail.com with any privacy question or deletion request.

Children's privacy

Opsight Social Listener is not directed at children and is not intended for use by anyone under 16.

Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions about this policy? Email opsightpro@gmail.com.