# Public Data Policy

`igskill.md` is for public Instagram content only.

The MVP does not support:

- Private accounts.
- DMs.
- Stories or content that requires login unless an approved commercial provider supports it under a documented decision.
- Personal login cookies.
- Bypass guarantees.
- Customer-provided Instagram credentials.

## Provider Fragility

Instagram providers can fail, return partial data, change schemas, or lose access. Responses must include limitation metadata where known.

## Billing And Failed Reads

Paid endpoints reserve credits before provider or hosted AI spend. If an upstream provider or parser fails before usable data is returned, the reservation is refunded. If partial data is returned, callers should inspect `usage` and `limitations` before retrying or widening the request.

## Comments

Comments can be incomplete or ordered differently from what a user sees in the Instagram app. Providers may return only comments visible to not-logged-in/public access, latest comments, top comments, or a provider-specific ranking.

## Data Minimization

Cache only what is needed for response quality, billing proof, debugging, and provider spend reduction. Avoid storing unnecessary personal data beyond response cache and usage accounting.

## AI Parsing

AI parse inputs should include only requested caption/transcript/comment context in M1. Long comments must be sampled/ranked/truncated deterministically. Image OCR and visual scene understanding are deferred until explicit media fetch, cache, payload, and abuse controls exist. Raw model-provider keys must remain outside this service.