Privacy Policy
This policy covers Nova, our Instagram assistant, and the website at agentsuniverse.ai. It describes what actually happens in our systems, not what a generic policy template says.
1. Information we collect
When you interact with us on Instagram
If you comment on one of our posts, or send a direct message to our Instagram account, Instagram delivers that event to us. We receive and store:
- The identifier Instagram assigns to you for our account, plus the identifier of the comment or message.
- The text you wrote, and whether you tapped a button rather than typing.
- The time the comment or message happened.
- Which of our posts it related to.
We do not receive your Instagram username, your name, your profile, your photo, your email address, or your follower list. The connection Instagram gives us does not include them, and we do not ask for them. We never see your Instagram password.
We store your Instagram identifier in encrypted form, alongside a keyed pseudonym rather than the raw value. If we ever check whether you follow the account — a feature that is switched off at the time of writing — we would record only the result of that check, not your profile.
When you use the website
Browsing agentsuniverse.ai does not require an account. The site runs no advertising trackers and no third-party analytics, and it sets no marketing or tracking cookies. It stores one flag in your browser to remember that you have already seen the opening animation.
If you unlock a content bundle, we set one first-party session cookie so your device stays unlocked. If you choose to give an email address during that process, we store it, along with the IP address and browser user-agent recorded at that moment for abuse prevention.
2. How we use it
- To recognise the keyword you sent and reply with the material you asked for.
- To issue and validate one-time access codes for content bundles.
- To avoid replying twice to the same comment or message.
- To enforce daily sending limits and detect abuse.
- To keep tamper-evident records that a given action did or did not happen.
We do not sell your information. We do not share it for advertising. We do not use your messages, comments, or email to train AI models. Any drafting assistance happens on the operator's own machine, and no message content is sent to a third-party AI service.
3. Service providers
| Provider | What it handles |
|---|---|
| Meta / Instagram | Delivers your comments and messages to us and carries any reply. Your use of Instagram is governed by Meta's own privacy policy. |
| Cloudflare | Hosts the website and our API, and stores our database and downloadable files. |
| Resend | Sends email — used only if you gave us an email address on the website. |
We may also disclose information where the law requires it, or to protect our rights or the safety of others.
4. How long we keep it
- Message and comment content: automatically rendered permanently unreadable 30 days after we receive it. This runs on a schedule and does not require you to ask.
- Email address, if you gave one: kept while you have access to a bundle, until you ask us to delete it.
- Security records: kept indefinitely, but only in a form that contains no message content, no username, no Instagram identifier, and no email address.
5. Security, and its limits
Message content and stored Instagram identifiers are encrypted at rest using AES-256-GCM. Each person's data is encrypted under a key specific to them, so destroying that one key makes their content permanently unreadable. Where we need a fingerprint of content for audit purposes, we use a keyed digest rather than a plain hash, so the fingerprint cannot be worked backwards into the original text. Traffic to the site and API is served over HTTPS.
No system is completely secure, and we cannot guarantee absolute security. We are a small operation, we are not certified against any specific security standard, and we do not claim to be.
6. Your choices and requests
You can ask us to delete your information at any time. The process, what gets deleted, what necessarily remains, and how long it takes are all set out on our Data Deletion page.
You can also email [email protected] to ask what we hold about you, or to correct it. You can stop sharing new information with Nova at any time simply by not messaging or commenting, and you can block the account in Instagram.
7. Children
Agents Universe is not directed to children. You must be at least 13 years old to interact with Nova or use this site, which matches Instagram's own minimum age. If you believe a child under 13 has sent us information, email us and we will delete it.
8. Changes to this policy
If we change this policy we will update the effective date at the top of this page. Material changes will be reflected here before they take effect. We do not have your contact details unless you gave them to us, so this page is where changes are published.
9. Contact
AGENTS UNIVERSE LLC (Oregon, USA)
[email protected]