Privacy Policy

Last updated: 30 October 2026

This Privacy Policy explains how Martin Moments (“we”, “us”, “our”) collects, uses, stores and protects personal information when you visit martinmoments.com and when you connect an Instagram account to our application, Comment Automation, which uses Meta’s official APIs to help manage Instagram content and scheduled publishing.

1. Who we are and how to contact us

The website and the Comment Automation application are operated by Martin Moments, a photography and videography service based in Kenya.

Please contact us using the details above for any question or request about this policy or your personal information.

2. Information we collect from website visitors

  • Information you give us: details you send when you contact us (for example by email, phone or WhatsApp), and the email address you enter if you subscribe to our newsletter.
  • Technical information: like most websites, our hosting provider may automatically process information such as your IP address, browser type and the pages you request, in order to deliver and secure the website.

3. Instagram account information accessed through Meta

When you choose to connect an Instagram account to Comment Automation, you sign in and grant permissions through Meta’s official authorization (OAuth) process. We never see or store your Instagram or Facebook password. Depending on the permissions you approve, we may receive:

  • Your Instagram account ID, username and basic profile information;
  • An access token issued by Meta that allows the application to act on your account within the permissions you granted;
  • Information about your media and posts, such as images, videos, captions and publishing status;
  • Comments on your content and related information, where you use the application’s comment features.

We only request the permissions needed for the features you use, and you can review or remove these permissions at any time in your Instagram or Meta account settings.

4. Content, captions, media and scheduled publishing data

If you use the application to prepare or schedule posts, we process the media, captions, scheduled dates and times, and related settings that you provide, so that the content can be published to your connected Instagram account at the time you choose.

5. How we use information

  • To provide the features you request, including connecting your account, managing content and comments, and publishing scheduled posts;
  • To respond to your enquiries and provide our photography and videography services;
  • To send newsletters you have subscribed to (you can unsubscribe at any time);
  • To operate, secure and maintain the website and application, and to meet legal obligations.

We do not sell your personal information, and we do not use Instagram data for advertising or share it with data brokers. Data obtained through Meta’s APIs is used only to provide the application’s functions to you, in line with Meta’s Platform Terms and Developer Policies.

6. Third-party service providers

  • Meta Platforms (Instagram): provides account authorization and the APIs used to read and publish content. Meta’s handling of your data is governed by its own privacy policy, available at privacycenter.instagram.com/policy.
  • Hostinger: hosts this website and provides the newsletter service used by our subscription form.
  • WordPress and Elementor: software used to build and run this website.

These providers process information only as needed to provide their services to us.

7. Security and protection of access tokens

We treat Instagram access tokens as confidential. They are used only to perform the actions you request through the application, are not shared with or sold to third parties, and are not displayed publicly. We take reasonable steps to protect personal information from unauthorised access, loss or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data retention and deletion

We keep personal information only for as long as it is needed for the purposes described in this policy, or as required by law. When you disconnect your Instagram account or ask us to delete your data, we will delete the access token and the Instagram information associated with your account, except where we must keep certain information to meet a legal obligation.

For instructions on how to request deletion, please see our User Data Deletion page.

9. Your rights and privacy requests

Under Kenya’s Data Protection Act, 2019, and other applicable laws, you may have the right to:

  • Be informed of how your personal data is used;
  • Access the personal data we hold about you;
  • Object to the processing of your personal data;
  • Request correction of inaccurate or misleading data;
  • Request deletion of data that is no longer needed or was unlawfully obtained;
  • Withdraw consent you have given, including by removing the application’s access to your Instagram account.

To make a request, email moments.co.ke@gmail.com. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

10. Cookies and analytics

This website uses cookies and similar technologies that are necessary for it to function, such as those set by WordPress and our hosting and newsletter services. You can control or delete cookies through your browser settings; blocking some cookies may affect how the website works. If we introduce analytics or advertising tools in the future, we will update this policy accordingly.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes will be highlighted on this page.