Privacy Policy

LMInsta (“we”, “our”, or “us”) operates the LMInsta desktop application and this website. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

LMInsta is designed with privacy in mind. The desktop application processes all AI workloads locally on your machine using LM Studio. Your Instagram content, captions, and generated images never leave your device.

2.1 Account Information

When you sign in to this website with Google, we receive your name, email address, and profile picture from Google. We store this information to manage your account, licenses, and purchase history.

2.2 Purchase Information

Payment processing is handled by iyzico or Gumroad. We do not store your credit card details. We receive confirmation of completed payments and record the plan type and transaction reference for license issuance.

2.3 License & Device Activation

When the desktop app validates your license, we record a device fingerprint (a hash derived from your hardware), the app version, and the timestamp of last validation. This is used solely to enforce the two-device activation limit.

2.4 Usage Data

We do not collect telemetry, analytics, or usage data from the desktop application. The desktop app communicates with our servers only for license validation and Instagram OAuth.

• To create and manage your account and licenses.
• To fulfill purchases and issue license keys via email.
• To enforce the device activation limit and detect abuse.
• To communicate important product updates or policy changes to your registered email.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

The desktop app connects to Instagram via the official Instagram API with Instagram Login. Your Instagram access token is stored locally on your machine in a .env file. We store only your Instagram User ID on our servers, linked to your license, for account management purposes.

All content operations (reading posts, publishing media, managing comments) are performed directly between your desktop app and Instagram’s servers. Your Instagram content is never routed through or stored on our servers.

We retain your account data for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days, except where we are legally required to retain it (e.g., transaction records for tax compliance).

This website uses a single session cookie set by NextAuth to maintain your sign-in state. We do not use advertising cookies or third-party tracking scripts.

License keys are stored encrypted using AES-256-GCM. All communication between the desktop app and our servers uses HTTPS. We use X25519 envelope encryption for sensitive API responses.

Depending on your jurisdiction, you may have the right to access, correct, or delete the personal data we hold about you. To exercise any of these rights, email us at support@lminsta.com.

BY USING LMINSTA OR THIS WEBSITE, YOU ACKNOWLEDGE AND AGREE THAT LMINSTA IS PROVIDED “AS IS” WITHOUT ANY WARRANTY, EXPRESS OR IMPLIED. WE EXPRESSLY DISCLAIM ALL LIABILITY FOR ANY DAMAGES, LOSSES, OR ISSUES — DIRECT, INDIRECT, OR CONSEQUENTIAL — ARISING FROM YOUR USE OF THE SERVICE, YOUR INSTAGRAM ACCOUNT ACTIVITY, OR RELIANCE ON ANY CONTENT GENERATED BY THE APPLICATION.

We are not responsible for any action taken by Instagram or Meta in relation to your account as a result of using LMInsta. For full details, please review the Terms of Service.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the service after changes are posted constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy, please contact us at support@lminsta.com.