Privacy Policy

Autoobot is operated by Youbeya LLC, a limited liability company registered in the State of Wyoming, United States.

For any question about this policy or your data, write to support@autoobot.com or message us on WhatsApp.

Our customers’ data. When a business or a person opens an Autoobot account (a «customer»), we decide how their account data is used: for it, we are the controller.

The data of the people who write to our customers. When someone messages or comments on a customer’s Facebook page, Instagram account, WhatsApp number or TikTok account, Autoobot handles that content only to provide the service to that customer, as the customer’s settings say. For this data the customer is the controller and we are their processor (service provider). If you wrote to a business that uses Autoobot, you can contact that business, or us, about your data.

• Account and sign-in: your name, email address, profile picture and language, and the way you sign in: a code sent by email, Google, Facebook, Instagram or TikTok.
• Workspace: its name, the team members you invite with their roles and permissions, and what you set up: automatic replies, keyword replies, comment campaigns, flows, reply templates, giveaways, scheduled posts and comments, and your contacts’ labels, fields and notes.
• Connected pages, accounts and numbers: the ids, names, pictures and access tokens of the Facebook pages, Instagram accounts and TikTok accounts you connect, and the session keys of the WhatsApp number you link.
• Conversations and content: messages, comments, replies, mentions, story replies and reactions sent to or by the pages, accounts and numbers you connect, with their files (pictures, videos, voice notes, documents); your posts and their figures (likes, comments, shares, views, reach) when a feature you use shows them; on WhatsApp, the groups you choose to monitor, missed calls and catalog orders.
• The people who write to our customers: the name, public profile picture and app-scoped id the platform sends with each message or comment, and what they write or send.
• Payments: what you bought, the amount, the date and whether it was paid. Card payments are made on our payment provider’s page: we never receive or keep card numbers. For a manual transfer, the receipt you upload.
• Technical data: IP address and the country it shows, browser and device, sign-in sessions and devices, and logs of how the service runs.
• Emails: the emails we send you and, for marketing emails only, whether they were opened (an approximate count).

We ask only for the permissions a feature needs, and use what a platform gives us only to provide that feature to the customer who connected the page, account or number.

Facebook (Meta):

• pages_show_list, pages_manage_metadata, business_management: list the pages you manage, connect them and receive their messages and comments.
• pages_messaging: receive and send your page’s Messenger messages: automatic replies, flows and the team’s replies from the inbox.
• pages_read_engagement, pages_read_user_content, pages_manage_engagement: read the comments on your page’s posts and reply to them, hide or delete them, as your campaigns say.
• pages_manage_posts: publish and schedule your page’s posts and stories, and its scheduled comments.
• read_insights: show a post’s views, viewers and clicks on its tools page.
• email, public_profile: your name, picture and email address, to sign you in.
• instagram_basic, instagram_manage_messages, instagram_manage_comments, instagram_content_publish, instagram_manage_insights: the same work for the Instagram account linked to your page.

Instagram (Instagram Login): instagram_business_basic (the account’s profile and posts), instagram_business_manage_messages (direct messages), instagram_business_manage_comments (comments and mentions), instagram_business_content_publish (publishing), instagram_business_manage_insights (posts’ figures).

WhatsApp: you link your own number as a linked device, the way WhatsApp Web works, with a QR code or a pairing code. Autoobot receives the number’s chats as WhatsApp Web would, keeps the session keys encrypted, and sends the replies your settings define. You can unlink it at any time in Autoobot or on your phone (WhatsApp › Linked devices).

TikTok: through TikTok’s official API: your profile (basic information, username, statistics, account type), your videos and their figures, the comments on your videos and their replies, the direct messages of TikTok Business accounts, and publishing.

Google: sign-in only: your name, email address and picture (openid, email, profile). Autoobot’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell platform data, do not use it for advertising, profiling or building audiences, do not give it to data brokers, and do not combine it with other data except to show a customer their own conversations together.

• To provide the service: receive messages and comments, send the replies your settings define, show conversations in the team inbox, publish what you schedule, run giveaways and make reports.
• AI features: when you turn on AI replies or Octo, the text of the conversation (and its pictures and voice notes, when that option is on) and the knowledge you give Octo are sent to Google’s Gemini API to write a reply, write down a voice note or answer your question about your business. We send only what the answer needs, and we do not use your content to train AI models.
• Billing: start what you pay for, send receipts, and remind you before a subscription ends.
• Support and safety: answer your questions, fix faults, prevent abuse and protect accounts.
• Emails: service emails (sign-in codes, invitations, payments, an alert when a page, account or number stops). Marketing emails carry an unsubscribe link and never go to an address that unsubscribed.
• The law: meet our legal and tax obligations.

In the European Economic Area and the United Kingdom, our legal bases are: the contract with you; our legitimate interest in running a secure and useful service; your consent where we ask for it; and our legal obligations.

Only with those who run the service for us, under agreements that limit them to that work, and only what each one needs:

• Meta (Facebook, Instagram, WhatsApp) and TikTok: to receive and send messages, comments and posts on your behalf.
• Google: the Gemini API for the AI features, and Google sign-in.
• Payments: Lemon Squeezy, our reseller and Merchant of Record for card payments, with the payment processors it uses (such as Stripe); banks and transfer services for manual payments.
• Infrastructure: our hosting and email delivery providers, and a service that tells the country of an IP address.
• Workspaces holding the same asset: a page, account or number linked to several workspaces has one set of settings: the admins of each one see its settings, conversations and payments.
• The law and safety: when the law, a court order or a lawful request requires it, or to protect people and the service.
• A change of owner: if Youbeya LLC is merged or sold, the data passes to the new owner under this policy.

We never sell personal data and never share it for advertising.

• Account and workspace: while the account exists.
• A page’s, account’s or number’s settings, conversations and contacts: while it is linked to a workspace, and after that until you ask us to delete them, so a page linked again finds its settings. You can ask at any time.
• The detailed log of each automatic reply, and incoming webhook events: about seven days; after that only the daily counts are kept.
• Messages of monitored WhatsApp groups: 7, 30 or 90 days, as you choose.
• Comments gathered for a giveaway: deleted one month after it ends.
• Payment records: as long as tax and accounting law requires.
• Backups are overwritten in their normal cycle.

• Disconnect: remove a page, account or number from your workspace in Autoobot at any time; Autoobot stops answering for it.
• Remove Autoobot on the platform: Facebook (Settings › Business integrations), Instagram (Settings › Apps and websites), TikTok (Settings › Security › Manage app permissions), WhatsApp (Linked devices), Google (Google Account › Security › Third-party connections).
• A deletion request through Meta: when you remove Autoobot on Facebook or Instagram and ask for your data to be deleted, Meta tells us and we delete your sign-in, tokens and profile. You get a confirmation code and can check it on our data deletion page.
• By email: write to support@autoobot.com from your account’s email address, or name the page, account or number. We confirm with you, then delete within 30 days.
• If you wrote to a business that uses Autoobot: ask that business, or write to us naming the page, account or number you wrote to.

A page, account or number belongs to the business that runs it, not to one person: when one manager’s data is deleted, its settings and history stay for its other managers.

Data travels over HTTPS. Access tokens and WhatsApp session keys are stored encrypted (AES-256-GCM). Inside Autoobot, access follows each person’s role and permissions, and only a few of our staff can reach customer data, for support and operations.

No system is perfectly secure. If a breach affects your data, we will tell you, and the authorities, as the law requires.

Depending on where you live (for example the European Economic Area, the United Kingdom, California and other US states), you may have the right to: see your data and get a copy; correct it; have it deleted; limit or object to its use; take it elsewhere; withdraw a consent; and not be treated differently for using these rights. We do not sell or share personal information as the California Consumer Privacy Act defines these words.

To use a right, write to support@autoobot.com. We may first confirm it is you, and we answer within 30 days. You may also complain to your data protection authority.

We and our providers process data in the United States and other countries. Where the law requires it, a transfer is protected by suitable safeguards, such as the European Commission’s Standard Contractual Clauses.

Autoobot is a service for businesses and is not meant for children. Customers must be at least 18. We do not knowingly collect data from children under 16; if you think a child gave us data, write to us and we will delete it.

We use only the cookies the service needs: to keep you signed in and recognise your device, to remember your language, and to protect sign-in. We use no advertising or third-party tracking cookies.

We post every change on this page with its date. When a change is significant, we tell customers by email or in the dashboard before it applies.

Youbeya LLC (Autoobot) · support@autoobot.com · WhatsApp · autoobot.com