Privacy Policy
Last updated 14 September 2026
This page explains what information noddra collects, why, and how you can control it — including through our Instagram automation on @noddradotcom. It covers this website and our Instagram activity together, since they're part of the same small operation.
noddra is operated by Luka Kraljević. If anything here is unclear, or you want to ask about your data directly, email lukakraljevic@noddra.com.
Instagram comments and messages
When you comment on one of our Instagram posts or reels, or send our account (@noddradotcom) a direct message, an automated system may respond. Here's exactly what that involves:
- What we receive from Instagram: your Instagram-scoped sender ID, your username (when Instagram provides it), the text of your comment or message, which post/reel a comment was on, and the time it was sent. We do not receive your email, phone number, or anything else from your Instagram profile beyond what Instagram includes in that event.
- Why: to recognize a specific keyword (like "AVATAR") and send you a relevant reply, to answer questions about the Noddra Academy waitlist, and to avoid replying twice to the same comment or message.
- Automated, not human, in the first instance: replies to Academy questions are drafted by an AI model (OpenAI) using only publicly stated facts about the Academy waitlist — it's instructed never to invent pricing, dates, or guarantees that haven't been published.
Services involved in processing this
No single system holds everything. Each piece has a narrow job:
- Meta / Instagram — the platform your comment or message originates from and is delivered through. Meta's own Instagram Privacy Policy covers what Meta itself does with your data as the platform.
- Cloudflare — receives the raw event from Meta, checks it's genuinely from Meta (a cryptographic signature check), and forwards it onward. It also keeps a short per-sender conversation record (roughly the last message and a short rolling history, truncated) so the system knows if you've already opted out or asked for a human, and doesn't reply twice to the same message.
- n8n — our workflow automation tool. It receives the forwarded event, decides what should happen (send the guide, ask the AI model for an Academy answer, etc.), and calls Instagram's API to actually send the reply.
- OpenAI — receives the text of your Academy-related question (not your Instagram ID or username) to draft a reply. OpenAI's own privacy policy and API data usage terms govern how they handle that.
- Google Sheets — keeps an internal, private log for our own reporting: your Instagram ID, which campaign/keyword triggered a reply, timestamps, and whether a send succeeded. It does not store the text of your messages, and it is not publicly accessible.
- Google Drive — hosts the one PDF guide we send (the "first AI avatar" guide). The file itself contains no personal data and the link is publicly viewable by design, since it's the same guide sent to everyone who asks.
The Noddra Academy waitlist
If you sign up for the Academy waitlist on noddra.com/academy, we store your first name, last name, and email address to notify you when enrollment opens. We do not sell this information, and we don't use it for anything beyond that waitlist notification unless you tell us otherwise.
How long we keep this
We're a small, early-stage operation and don't yet have a fixed retention schedule with specific day-counts to publish here — we'd rather say that plainly than invent one. In practice: we keep enough to answer your enquiry, avoid double-replying, and see whether our replies are useful, and no longer than that. If you ask us to delete your data (see below), we will, and we won't invent a policy reason to refuse.
Your choices
- Opt out any time: reply
STOPto any of our Instagram messages and the automated system will stop replying to you. - Ask for a person: tell us you'd like to speak with a human and the conversation is flagged for manual follow-up instead of automated replies.
- Request deletion or a copy of your data: email lukakraljevic@noddra.com with the Instagram username you contacted us from. We'll locate and delete (or send you) what we hold under that identifier across the systems listed above.
Data deletion instructions
To request deletion of any data associated with your Instagram account that our system has collected through comments or messages to @noddradotcom, email lukakraljevic@noddra.com with the Instagram username involved. We will confirm once the associated records have been removed from our systems (Cloudflare's stored conversation state and our internal Google Sheets log).
Children
Noddra's services are intended for business owners and professionals. We don't knowingly direct any of this at children.
Changes to this policy
We'll update this page if what we collect or how we use it changes, and update the date at the top when we do.
Questions about this policy or your data: lukakraljevic@noddra.com.