Skip to content

Privacy Policy

Last updated: [Month DD, YYYY]

[Company Legal Name] ("AutoPostBot," "we," "us") respects your privacy. This policy explains what personal data we collect through our website, web application, and browser extension (the "Service"), how we use it, who we share it with, and the choices you have.

1. Information We Collect

Information you provide

  • Account data: name, email address, password (stored in hashed form), and profile settings.
  • Billing data: subscription plan and transaction details. Card information is collected and processed by our payment provider; we do not store full card numbers.
  • Content you create: custom posts, captions, images, and other content you add.
  • Communications: messages sent through the contact form or support, and partner program applications.

Information from connected accounts

When you connect a Facebook Page, we receive, with your permission, an access token and information such as your Page name, Page ID, and granted permissions, and we may receive the publishing status of posts we send. We never receive your Facebook password.

Information collected by the browser extension

When you scrape a product with the extension, it collects product details shown on the page you select, such as title, description, images, price, shop name, and URL, and sends them to your account. The extension acts only on pages you choose. It is not designed to read your browsing history, passwords, or personal information on other sites. [Confirm and list the exact extension permissions here.]

Information collected automatically

Device and browser type, IP address, approximate location derived from IP, pages viewed, referring URLs, timestamps, and error logs, collected through cookies and similar technologies (see Section 7).

Referral and partner data

If you join the Partnership Program, we collect referral link activity, referred sign-ups, commission status, and payout details you provide.

2. How We Use Your Information

  • To provide, operate, and secure the Service, including importing products and publishing content you instruct us to publish;
  • To create and manage your account and process subscriptions and payments;
  • To provide support and respond to your requests;
  • To send service messages such as receipts, security alerts, and product or policy updates;
  • To send marketing messages where permitted, with an easy opt-out;
  • To administer the Partnership Program and calculate commissions;
  • To monitor performance, fix bugs, prevent fraud and abuse, and improve the Service;
  • To comply with legal obligations and enforce our Terms.

We do not sell your personal data. We do not use content from your connected social accounts for advertising, and we do not use Your Content to train third-party AI models. [Adjust if this changes.]

3. Legal Bases

If you are in the EEA, UK, or similar regions, we process personal data on these bases: performance of a contract (providing the Service), legitimate interests (security, analytics, improvement), consent (marketing and non-essential cookies, which you can withdraw at any time), and legal obligation.

4. How We Share Information

We share personal data only as described below:

  • Service providers that help us operate the Service, such as hosting, payment processing, email delivery, analytics, and support tools, who may use data only to serve us. Current providers include [hosting provider], [payment processor], [email provider], [analytics provider].
  • Platforms you connect, such as Meta, to which we send the content you choose to publish.
  • Legal and safety: where required by law or to protect rights, safety, and security.
  • Business transfers: in a merger, acquisition, or sale of assets, subject to this policy.
  • With your consent or at your direction.

Content you publish to Facebook becomes subject to Meta's own privacy practices.

5. International Transfers

We may process and store data in countries other than your own, including [country]. Where required, we use safeguards such as standard contractual clauses to protect transferred data.

6. Data Retention

We keep personal data while your account is active and as needed to provide the Service. After you close your account, we delete or anonymize your data within [30-90] days, except where we must keep it longer for legal, tax, accounting, fraud-prevention, or dispute purposes (for example, billing records for [number] years). Disconnecting a social account removes the stored access token. Backups are overwritten on a regular cycle.

7. Cookies and Similar Technologies

We use cookies and local storage to keep you signed in, remember preferences, protect against fraud, and understand how the Service is used. Categories include essential, preferences, and analytics cookies. You can manage cookies through your browser settings and [cookie banner/preferences tool]. Blocking essential cookies may affect the Service. We respond to "Do Not Track" signals only as required by law.

8. Security

We use reasonable technical and organizational measures to protect personal data, including encryption in transit, hashed passwords, encrypted storage of access tokens, and access controls. No system is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and tell us right away if you suspect a compromise. If a breach affects your data, we will notify you and regulators as required by law.

9. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, restrict or object to certain processing, withdraw consent, and lodge a complaint with a data protection authority. To exercise these rights, email [privacy email]. We may need to verify your identity, and we will respond within the time required by law.

You can also update account information in your settings, disconnect social accounts in the app or in your Facebook settings, uninstall the extension at any time, and unsubscribe from marketing emails using the link in each message.

Philippines. If you are in the Philippines, you have rights under the Data Privacy Act of 2012 (Republic Act No. 10173), including the rights to be informed, to access, to object, to rectify, to erase or block, to data portability, and to damages. You may contact our Data Protection Officer at [DPO name and email] or the National Privacy Commission.

California. California residents have rights under the CCPA/CPRA to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.

10. Children's Privacy

The Service is not directed to anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us data, contact [privacy email] and we will delete it.

11. Third-Party Links

The Service may link to third-party sites and shops, including Shopee and Amazon. We are not responsible for their privacy practices, so please review their policies before sharing information.

12. Changes to This Policy

We may update this policy periodically. If we make material changes, we will notify you by email or in the Service before they take effect and update the date at the top.

13. Contact Us

[Company Legal Name]
[Registered address]
Privacy inquiries: [privacy email]
Data Protection Officer: [name / email]

Questions? Contact us · Terms of Service