Privacy Policy

Last updated: April 25, 2026

Minifarm is operated by Codeiku ("we," "our," or "us"), which is the data controller responsible for personal data processed through Minifarm. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketing suite, including the Instagram and Facebook integrations that connect your business accounts to Minifarm.

1. Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Name (optional)
  • Profile picture (optional)
  • Authentication credentials

Content You Create

When using our AI tools to generate content, we process and temporarily store:

  • Product images you upload
  • Text prompts and descriptions
  • Generated videos, slideshows, and images
  • Project settings and preferences

Usage Data

We automatically collect information about how you use our platform:

  • Pages visited and features used
  • Time spent on the platform
  • Device and browser information
  • IP address and general location

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our AI services
  • Process your content generation requests
  • Communicate with you about your account and our services
  • Detect and prevent fraud or abuse
  • Analyze usage patterns to improve user experience
  • Comply with legal obligations

3. AI Processing

When you use our AI features to generate content, your uploaded images and prompts are sent to AI service providers for processing. These providers are bound by confidentiality agreements and do not use your data to train their models without your consent.

4. Data Storage and Security

We store your data on secure cloud infrastructure. Your uploaded media and generated content are stored in encrypted cloud storage. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or destruction.

5. Data Retention

We retain your account information for as long as your account is active. Generated content and uploaded media are retained until you delete them or your account is deleted. We may retain certain information as required by law or for legitimate business purposes.

6. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Export your data in a portable format
  • Object to or restrict certain processing
  • Withdraw consent where applicable

7. Instagram and Facebook Data

When you connect an Instagram professional account or Facebook Page to Minifarm via Facebook Login for Business, we collect and store data that is necessary to deliver the Instagram management features described on /features/instagram.

Data we collect from Meta

  • Account identity: Instagram account ID, @username, profile picture, account type, follower count (scope: instagram_basic).
  • Linked Facebook Page: Page ID and name, plus confirmation that the Page is linked to the Instagram professional account (scopes: pages_show_list, pages_read_engagement).
  • Posts and per-post insights: media content you already published on Instagram, plus per-post likes, comments, reach, views, engagement, saves, and shares (scopes: instagram_basic, instagram_manage_insights).
  • Account-level insights: followers, reach, profile link taps, accounts engaged, total interactions (28-day snapshots) (scope: instagram_manage_insights).
  • Direct messages: inbound and outbound Instagram Direct messages and conversation metadata, used to power the inbox and automation replies (scopes: instagram_manage_messages, pages_messaging).
  • Comments: inbound comments on your posts and outbound replies, used to power Comment Automation (scope: instagram_manage_comments).
  • Content you submit through Minifarm: media, captions, schedule times, and automation rules you create inside Minifarm and submit for publishing (scope: instagram_content_publish).

How we use this data

Strictly to provide the Instagram management features inside Minifarm: showing your inbox, posts, and analytics; running the automation rules you configure; and publishing or scheduling content you explicitly submit. We do not sell Instagram or Facebook data, do not use it to train AI models, and do not share it with third parties beyond the technical processors required to host the Service (cloud infrastructure and database hosting).

Data deletion and revocation

You can delete this data at any time:

  • In-app: Go to the Instagram workspace in your account, disconnect the connected account, then delete the connection data. Disconnect schedules deletion within 30 days, with an immediate-purge button afterward.
  • From Meta: Go to your Facebook or Instagram Apps and Websites settings, remove Minifarm, and click Send Request to delete your data. Our app listens for the permissions webhook and triggers the same deletion path automatically.

You can check the status of your deletion request at: app.minifarm.ai/data-deletion-status

Public Instagram post preview

The public Instagram post preview at /tools/instagram-embed is separate from connected-account management and app imports. It does not require a Minifarm account. Visiting the tool or selecting an example does not request Instagram content. You must explicitly select consent to load Instagram content and submit the form before the preview requests content from Meta or loads Instagram's embed script.

Minifarm sends the submitted post URL to Meta to request the embed. Your browser then contacts Instagram directly to display it. Instagram receives your IP address and browser information and may use cookies. Instagram handles this information under Instagram's Privacy Policy.

Minifarm processes the post URL and returned embed HTML only for the active request and current browser preview. This tool does not keep a durable content cache, import or download source media, create recipes, discover accounts or hashtags, or start AI analysis. Minifarm does not put submitted URLs or embed HTML in browser persistence or page query strings.

To limit abuse, Minifarm derives a network identifier from your IP address using a keyed hash (HMAC) that changes each UTC day. Cloudflare uses this identifier for short-window rate limiting. It identifies a network, not a verified person; people on a shared network may share a limit. The preview handler does not log the raw IP address or the derived identifier.

The tool's persistent SQLite quota record contains only aggregate admitted-attempt counters and their current UTC hour/day identifiers. Expired windows are replaced in place rather than kept as a history. This record stores no raw IP addresses, network identifiers, submitted URLs, or embed HTML. The preview handler's operational logs contain only an opaque request ID, a fixed outcome category, and request duration.

Minifarm excludes this tool from its website analytics events, autocapture, and session replay. It excludes the preview API from network recording and protects the input, embed, and source link from capture. These exclusions do not prevent Instagram's own processing after you consent and submit.

Minifarm does not persist your preview consent choice. Clear preview cancels Minifarm's active preview work, removes the embed, and clears the choice. Clearing cannot undo information already sent to Instagram or unload third-party JavaScript that has executed. A pending Instagram script may still finish loading and execute after clearing.

These preview limits do not apply to separate import and analysis features in the Minifarm app. App imports store source media, and app analysis stores analysis results. Viewing a public preview does not start those workflows.

8. Cookies and Tracking

We use cookies and similar tracking technologies to analyze platform usage and improve our services. You can control cookie preferences through your browser settings.

9. Third-Party Services

We use third-party services for analytics, authentication, and AI processing. These services have their own privacy policies, and we encourage you to review them.

10. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact the data controller:

Controller: Codeiku — operator of Minifarm
Email: info@codeiku.agency
Web: codeiku.agency