Your information
Privacy Policy
Effective October 7, 2026
GramFather uses information to provide your account, workshop access, and Instagram relationship-management tools. This policy covers our website, web portal, and Chrome extension, including the data needed for workflows you choose to use.
1. Who we are
The GramFather is provided by Vaughn Labs LLC. Contact us at jon@tier5.us or jon@vaughnlabs.io. Our business address is 240 Manor Ave, Beaumont, TX 77706, United States.
2. Information we handle
- Account and purchase information: your name, email, account identifiers, role, reseller relationship, order identifiers, fulfillment status, and purchased software entitlements. Checkout uses Stripe; payment-card information is processed by Stripe. The extension does not request payment-card numbers or bank credentials.
- Authentication: GramFather credentials and session information used to sign you in. Our server stores password hashes and hashed session records. The extension stores its GramFather session token in Chrome local storage.
- Instagram workspace data: connected account identifiers and profile information; contacts, usernames, notes, tags, pipeline stages, tasks, audience information, and workflow settings. This includes CRM deal amounts you enter or edit in the portal or extension to track the value of your business opportunities.
- Communications and content: direct-message and comment text relevant to enabled workflows, saved replies, brand instructions, drafts, captions, and uploaded media. AI features process the relevant content and instructions needed to generate their output.
- Operational information: connection status, activity history, timestamps, job progress, usage counts, errors, and information needed to enforce limits and diagnose problems. Our authentication service receives IP addresses and stores failed-login IP counters to protect accounts and enforce sign-in limits. IP addresses can indicate approximate location; the extension does not request your device's GPS location.
- Website activity: pages visited, interactions, referral and browser/device information, and cookies or similar identifiers used by our website analytics and checkout services.
The extension accesses relevant Instagram and GramFather pages to provide its displayed features. It uses your existing Instagram session and reads session-associated values locally for requests to Instagram. You do not need to provide GramFather your Instagram password. Instagram session tokens are not intended to be sent to GramFather's server or AI providers. The extension does not collect your general browsing history for advertising.
3. How we use information
We use information to provide and secure accounts, fulfill purchases, synchronize your workspace, display CRM context, operate workflows you enable, generate AI suggestions, deliver transactional messages, provide support, and understand the reliability and use of our services. You remain in control of which available workflows you enable and can pause them.
Inbox synchronization has a separate choice in the connection flow and Instagram account settings. When you enable it, relevant direct-message participants, text, and conversation history are copied into your GramFather workspace for CRM context and reply detection. Pausing automation stops automated actions; approved inbox synchronization can continue. Turning inbox synchronization off stops new synchronization; requests already sent may finish. Previously stored workspace information remains available to enabled features until deleted. AI features send the relevant context to the configured AI provider when you use or enable those features.
4. Service providers and sharing
| Provider or recipient | Purpose and relevant data |
|---|---|
| Cloudflare | Website/API hosting, database connectivity, and media storage for account, workspace, operational, and uploaded content. |
| Supabase | Postgres database hosting for account records, CRM workspace information, synchronized communications, settings, and activity history. Our API accesses the database through Cloudflare Hyperdrive. |
| Stripe | Checkout and payment processing, including payment details and purchase identifiers. |
| Mailgun | Transactional email delivery, including recipient addresses and the content of account, purchase, invitation, and password-reset emails. |
| Anthropic; OpenRouter when configured | AI-assisted features. Relevant conversation or comment text, brand instructions, and requested context are sent through our API to the configured provider. OpenRouter can route requests to its configured model provider. Provider processing is governed by the applicable service agreements and settings. |
| Chirply | Website analytics and related website/customer interactions. This website tracking is separate from the extension's handling of Instagram communications. |
| Instagram / Meta | The Instagram requests, messages, actions, and content you direct through supported workflows. |
| Authorized account managers and support personnel | Account administration and support. Reseller administrators can manage their assigned customer accounts. Access to extension data is limited to permitted purposes and the conditions described below. |
We may disclose information when necessary to comply with law, protect against security threats or abuse, or fulfill a permitted business transfer, subject to applicable requirements. We do not sell personal information or transfer extension data to advertisers or data brokers.
5. Chrome extension Limited Use
GramFather's use and transfer of information received through the Chrome extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Extension data is used to provide and maintain the disclosed relationship-management features and related necessary operations. It is not used for personalized advertising, creditworthiness, or lending decisions.
Transfers of extension data are limited to necessary service providers, legal obligations, protection against abuse and security threats, and other transfers permitted by that policy. Human access is limited to your explicit consent for specific data, permitted aggregated and anonymized internal operations, security needs, or legal requirements. A reseller or support role does not authorize unrelated use of your communications.
6. Cookies and website analytics
Our website uses services that support checkout, account access, and analytics. These may use cookies or similar technologies. You can manage browser storage and cookie settings; restricting necessary storage can affect sign-in or checkout. Website analytics data is handled separately from extension communications and is not a reason to share your Instagram messages with advertising services.
7. Retention and deletion
We retain account and workspace information while needed to provide your service, fulfill requested operations, maintain security, and meet applicable obligations. Retention depends on the type of record and purpose. Some purchase, compliance, security, and backup records may remain after an account is closed where necessary; they are not kept for unrelated use.
To request access, correction, export, or deletion, email jon@tier5.us with the subject “GramFather privacy request.” We may verify that you are authorized to make the request. We will explain any information that must be retained and respond in accordance with applicable law. This contact also accepts requests concerning information about people appearing in a customer's workspace.
Signing out stops use of that GramFather session. Removing the extension removes its extension-local storage from that Chrome profile, but does not by itself close your server account or delete content already sent to Instagram. Actions and copies held by Instagram or another recipient are subject to that service's controls. Contact us to request deletion of server-held workspace information and uploaded media.
8. Security and international processing
We use HTTPS, authentication, and account access controls to protect information. No system can guarantee absolute security. Our providers may process information in the United States and other locations. Where required, applicable safeguards govern international transfers.
9. Your choices and rights
You can pause workflows, change available account settings, sign out, remove the extension, and contact us about your data. Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, or receive a copy of your information, and to contact a relevant privacy authority. We assess requests under the law that applies to you.
10. Age and changes
GramFather is intended for adults and is not directed to children under 18. If you believe a child has provided personal information, contact us. We will update this page when our practices change and provide additional notice or obtain consent where required.
Contact
Vaughn Labs LLC
240 Manor Ave, Beaumont, TX 77706
jon@tier5.us · (409) 257-3784