Privacy Policy

1. Who is responsible

Customers are the businesses and creators who sign up for AUTODMs. For their account data, AUTODMs is the controller.

Contacts are people who message a customer on Instagram, WhatsApp, Messenger or TikTok. For contact data, the customer is the controller and AUTODMs processes the data on the customer’s behalf, following their instructions and our Terms of Service.

2. Data we collect

• Account data: name, email, password hash, company name, billing details (handled by our payment provider) and team members you invite.
• Connected channel data: when you connect a Facebook Page, Instagram professional account, WhatsApp Business account or TikTok account, we receive the access tokens and account details the platform provides, such as page or account ID, name and profile picture. We never ask for or store your platform passwords.
• Messaging data: messages, comments and story replies sent to your connected accounts. We process them to run your automations and then discard them. We do not store Instagram or Messenger conversations: Live Chat loads them live from Meta when you open them. WhatsApp offers no way to load past messages, so WhatsApp conversations are stored encrypted for at most 7 days, then deleted.
• Contact records: for each contact we keep only the ID the platform gives us, the tags and automation progress you set up, and opt-in records (for example, consent to receive WhatsApp messages, which includes their WhatsApp number). Names and profile pictures are loaded live from the platform, not stored.
• Leads: when a contact shares an email or phone number in a conversation, we send it to the destination you choose (such as Google Sheets, Shopify, Klaviyo or a webhook) and do not keep a copy, unless you turn on lead storage in AUTODMs.
• Sales data: if you connect Shopify or Stripe for revenue tracking, we keep the order ID, amount and the automation that led to it, not the buyer’s name or details.
• Usage data: log data, device and browser information, and how you use the app, so we can keep it secure and improve it.
• Website data: basic analytics and the information you send us through forms or email.

3. How we use data

• To provide the service: run your automations, show conversations in Live Chat, send the replies you configure, and sync data to tools you connect.
• To generate AI replies and detect intent (for example, a price question) when you turn on AUTODMs AI, using the content you provide as its knowledge source. Before a message is sent to the AI, we replace emails, phone numbers and card or bank numbers in it, so the AI provider does not receive them. Our AI provider (Anthropic, or Anthropic’s models on Amazon Web Services in the EU) does not use this data to train models and keeps it only for a short time, if at all. We do not store what was sent to the AI or its answers.
• To keep accounts secure, prevent abuse and enforce platform policies.
• To provide support, send service notices, and, if you agree, product news.
• To bill you and meet legal obligations.

4. Data from Meta and TikTok

We use data received through Meta (Facebook, Instagram, Messenger, WhatsApp) and TikTok APIs only to provide the features the customer has enabled. We do not sell this data, use it for advertising, or use it to build profiles of contacts across customers. We follow the Meta Platform Terms, the WhatsApp Business policies and the TikTok developer terms.

Customers can disconnect a channel at any time from Settings in the app. When they do, we stop receiving new data from that channel.

5. Who we share data with

We share data only with service providers who help us run AUTODMs (such as cloud hosting, email delivery, payment processing, error monitoring and AI model providers), under contracts that require them to protect it and use it only for our instructions. We share data with integrations only when a customer connects them, for example Google Sheets or a webhook.

We may disclose data if the law requires it, or in connection with a merger or acquisition, in which case this policy continues to apply.

6. How long we keep data

We keep account data, contact records and connected-account keys while the workspace is active. Messages are discarded after processing, except WhatsApp conversations, which are deleted after 7 days at most. Logs never contain message content and are deleted after 14 days. When a customer deletes their workspace, or a deletion request is confirmed, we delete the related data from our live systems within 30 days and from backups within 90 days, except where we must keep limited records by law (for example, invoices). See our Data Deletion page.

7. Security

Data is encrypted in transit and at rest. Access tokens, contact IDs (on WhatsApp, the phone number), WhatsApp numbers, collected answers and any stored conversations are encrypted with a separate key for each workspace, and staff access is limited to what is needed to provide support. No system is perfectly secure, but we work to protect your data and will notify affected customers of a breach as the law requires.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To use these rights, email privacy@autodms.com.

If you are a contact of one of our customers, we will pass your request to that customer, or help them handle it. You can also ask the business directly.

9. International transfers

We host AUTODMs on servers in the European Union. Some service providers, such as AI model providers, may process data in other countries. When we transfer personal data outside the EU, we use appropriate safeguards such as standard contractual clauses. We also follow Morocco’s Law 09-08 on the protection of personal data. Customers can ask for our Data Processing Agreement by writing to privacy@autodms.com. See Security & Data for a plain-language summary.

10. Children

AUTODMs is for businesses and is not directed at children under 16. We do not knowingly collect personal data from children through the website or app.

11. Changes to this policy

We will post any changes on this page and update the date above. If a change is significant, we will tell customers by email or in the app before it takes effect.

12. Contact

AUTODMs, Casablanca, Morocco. Email: privacy@autodms.com.