Legal
Privacy Policy
This policy explains how Auto Chat processes information when a person interacts with a social-media account connected by its owner. Contact developer@pleumperspective.com for privacy questions.
Information we process
Depending on the platform and enabled campaign, we may receive platform-scoped account or user identifiers, usernames when supplied by the platform, post or media identifiers, comment and message identifiers, comment or message text, event timestamps, campaign state, delivery state, and follow or interaction status made available by an approved API.
For protected downloads, Auto Chat stores a one-way token hash, expiry, opening and download counters, and revocation state. Plaintext access tokens and app secrets are managed as infrastructure secrets and are not stored in campaign records or published source code.
How we use information
- Match an interaction to a post, keyword, and campaign configured by the operator.
- Send an approved reply, prompt, resource, or link when campaign conditions are met.
- Prevent duplicate processing and track the minimum conversation state required for delivery.
- Protect the service, diagnose failures, and comply with platform requirements.
Platforms and service providers
Meta/Instagram and, when approved and enabled, TikTok provide interaction data through their official APIs. Cloudflare provides hosting, queues, databases, static assets, and operational infrastructure. Each provider processes data under its own terms and policies.
TikTok integration status
TikTok integration is under development and subject to platform approval. Auto Chat will not process TikTok account data or send TikTok messages unless the relevant owner authorizes the connection and the corresponding integration features are explicitly enabled.
Retention
Auto Chat does not currently run an automatic retention-deletion schedule for persisted contact, event, conversation, or download-audit records. Those records remain until the operator completes a verified manual deletion process. Expired download links do not by themselves delete their audit records.
Security and sharing
We use webhook signature checks, account guards, managed secrets, idempotency controls, and staged feature flags. We do not sell social-platform data. We disclose information only to the service providers needed to operate the product, when directed by the connected account owner, or when legally required.
Your choices
You may stop interacting with an automated campaign, manage platform permissions in the relevant social platform, or request access, correction, or deletion using our data-deletion process. Never email a password, one-time code, access token, or app secret.
Policy changes
We may update this policy as the service or platform requirements change. The current version and effective date will remain available on this page.