Privacy Policy

1. Who this policy covers

Automate Admits is a business messaging platform that helps organizations respond to, qualify, and manage leads who contact them through channels such as Facebook Messenger and Instagram. This policy applies to two groups of people:

• Customers — businesses and their team members who create an account and use the Service.
• End users — individuals who send messages to a Customer’s connected Facebook Page or Instagram account and whose messages are handled through the Service.

For end users, our Customer is the controller of the conversation and we act as a service provider/processor on the Customer’s behalf. If you messaged a business and have questions about your data, please contact that business directly; you may also contact us using the details below.

2. Information we collect

Information Customers provide

• Account information — name, email address, password (stored only as a salted hash), organization name, and team-member details.
• Billing information — subscription plan and payment status. Card payments are processed by our payment provider; we do not store full card numbers.
• Content you configure — AI agent persona, goals, guardrails, knowledge sources, and other settings.

Information about end users and conversations

• Message content sent to or from a connected Page or Instagram account.
• Contact profile information such as the sender’s name or username and a platform-scoped identifier (for example a Messenger page-scoped ID or Instagram-scoped ID).
• Lead details that the end user shares in conversation or that our Customer adds, which may include contact details, location, and other information the parties choose to exchange.

Information collected automatically

• Log and device data — IP address, browser type, and timestamps, used for security and to operate the Service.
• Essential cookies — we use a session cookie to keep Customers signed in. We do not use advertising cookies.

3. Information from Meta platforms

When a Customer connects a Facebook Page or Instagram account, we use Facebook Login and the Meta Graph API to receive only the information needed to operate the Service, which may include:

• Page and Instagram account identifiers, names, and access tokens that allow us to receive and send messages on the Customer’s behalf.
• Messages exchanged between the end user and the connected Page or Instagram account, delivered to us through Meta webhooks.
• The public profile name (and, for Instagram, username) of an end user who messages the connected account, used to label the conversation.

4. How we use information

• To deliver incoming messages into the Customer’s shared inbox and send the Customer’s replies back to the end user.
• To generate automated replies through the Customer’s configured AI agent (see Section 5).
• To organize contacts, conversations, lead status, and scheduling for the Customer.
• To authenticate users, provide support, process billing, and send service and transactional emails.
• To secure, maintain, troubleshoot, and improve the Service.
• To comply with legal obligations and enforce our terms.

5. AI processing of messages

To generate automated replies, conversation message content and the Customer’s configured agent instructions are sent to our AI provider (Anthropic) to produce a suggested or automatic response. This processing is performed to provide the Service. The Customer controls whether automated replies are enabled and can take over any conversation manually at any time.

6. How we share information

We do not sell personal information. We share information only as follows:

• With the Customer whose connected account received the conversation.
• With service providers (subprocessors) that help us run the Service under contractual confidentiality and security obligations, including:
  • Cloudflare — application hosting, storage, and database.
  • Anthropic — AI processing of message content to generate replies.
  • Square — payment processing for Customer subscriptions.
  • Resend — delivery of transactional and service emails.
  • Meta Platforms — to receive and send messages through Facebook and Instagram.
• For legal reasons — to comply with applicable law, respond to lawful requests, or protect the rights, safety, and security of users, the public, or Automate Admits.
• In a business transfer — in connection with a merger, acquisition, or sale of assets, subject to this policy.

7. Data retention

We retain personal information for as long as it is needed to provide the Service to the relevant Customer, and thereafter only as required for legitimate business or legal purposes (such as security, dispute resolution, and compliance). When a Customer disconnects a Page or Instagram account, we stop receiving new messages for that account. When information is no longer needed, we delete or de-identify it.

8. Data deletion & your rights

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, and to object to certain processing.

How to request deletion of your data

• End users: If you messaged a business that uses Automate Admits and want your conversation data deleted, email privacy@automateadmits.com with the connected Facebook Page or Instagram account name and the name/handle you used. We will delete the associated data, or forward your request to the relevant Customer where they are the controller, within 30 days.
• Customers: You can disconnect a channel at any time from within the app, and you can request deletion of your account and associated data by emailing privacy@automateadmits.com.
• Facebook/Instagram users: You may also remove the Automate Admits connection from your Facebook or Instagram settings under Business Integrations / Apps and Websites. Removing the connection stops further data collection; to also delete previously stored data, contact us at the address above.

We will verify requests before acting on them and will not discriminate against you for exercising your rights.

9. Security

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, hashed passwords, and signature verification of incoming platform webhooks. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to those who need it to operate the Service.

10. International data transfers

We and our service providers may process information in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

11. Children’s privacy

The Service is intended for businesses and is not directed to children under 13 (or the age required by your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.

13. Contact us

If you have questions or requests regarding this Privacy Policy or your personal information, contact us at:

• The Promise Digital LLC & H&J Legacy Holdings LLC (operators of Automate Admits)
• Email: privacy@automateadmits.com
• Web: https://automateadmits.com