Privacy Policy

Automately.pro (referred to as “Automately”, “we” or “us”) provides an AI-assisted social media workflow service through automately.pro. You can contact the platform team through our Contact page for privacy questions, rights requests, or a complaint. Automately.pro is operated by Syscryption, India. The complete business address and dedicated privacy/grievance contact will be published once confirmed.

When we decide why and how account and website information is processed, we act as a controller or the equivalent under applicable law. Where a business customer directs us to process information from its own connected social account, the parties’ legal roles may differ; additional contractual data-processing terms may be required before those features launch.

For inquiries, we receive the name, email address and message you submit, including business or website details you choose to provide. For customer accounts, we process account name, email, password hash, email-verification status, Google or Facebook sign-in identifiers if selected, session records and security events. We never need your Google, Facebook or Instagram account password in a contact form.

Customer workflows may include brand profiles, content drafts, calendars, preferences and support requests. When a customer connects an Instagram Professional account through Meta authorization, we process authorized account identifiers, encrypted access tokens, selected profile and media data for requested scans, and limited webhook event metadata. Our webhook event table does not store private message or comment text. Where billing is enabled, order, tax and payment status information may be processed. We may record IP addresses, request timing and security logs needed to operate and protect the website.

We use information to answer inquiries, create and secure accounts, verify identity, manage user-requested workflows, provide support, prevent abuse and comply with legal obligations. In jurisdictions such as the EEA or UK, the appropriate lawful basis may be performing a contract, taking pre-contractual steps, complying with law, a carefully assessed legitimate interest in service security, or consent where required.

Marketing messages beyond a response to your inquiry will require an appropriate legal basis and an unsubscribe or equivalent choice. Optional social connections and non-essential analytics, where offered, will involve the relevant permissions and choices. We do not treat agreement to website Terms as blanket consent to unrelated personal-data processing.

Eligible app-role users can connect a supported Instagram Professional account using Meta authorization. Public customer connections require Meta Advanced Access approval. Automately does not request Instagram passwords and must respect Meta permissions, API limits and messaging restrictions. Access may be removed by the customer or Meta.

If you choose to send content or instructions to ChatGPT, Claude or another provider through an authorized integration, the relevant content and outputs may be processed by that provider under its own terms and privacy practices. Automately does not require a platform OpenAI or Anthropic API key or call their generation APIs on its own server. Customer-directed MCP responses can contain permitted account context, and the customer's chosen AI provider may independently retain data under its policies.

Authorized staff and necessary service providers may handle relevant information for hosting, security, transactional email, customer support, authentication, social-platform connectivity, AI processing and payments, but only to the extent needed for the service. A provider may process data outside your country, including outside India, the UK or the EEA.

Where international-transfer rules apply, we will assess and use appropriate safeguards, contractual protections or other lawful transfer mechanisms. Before broader public rollout, we will publish or provide the relevant service-provider list and any required transfer disclosures. We do not ask you to disclose payment-card numbers in support messages.

We keep inquiry records for the period reasonably needed to answer and administer the inquiry, review early-access interest and satisfy lawful record-keeping needs. Customer information and drafts, where those features are used, are retained while the account or requested service remains active, subject to deletion requests, operational recovery periods and legal obligations.

Short-lived email verification codes and account sessions have technical expiry periods; verification codes are designed to expire after ten minutes, and customer session cookies may last up to seven days unless revoked sooner. Security records, payment records and backup copies may have different retention requirements. Before full production launch, more exact retention schedules will be established and disclosed where law requires them.

We use access restrictions, signed or hashed authentication credentials, limited administrative access and other proportionate measures appropriate to the feature. Sensitive configuration values are intended to be stored separately from public website content. No online system can promise absolute security.

If a security incident affects personal information, we will assess it and make required notifications to affected people and relevant authorities in accordance with applicable law. Please do not submit passwords, tokens, government identity documents or payment details through the public contact form.

Depending on where you live and which laws apply, you may be entitled to access or know information we hold, request correction or deletion, withdraw consent, object to or restrict processing, obtain a portable copy, appeal or complain to a regulator, or make other statutory requests. In India, rights and duties will be observed as provisions of the Digital Personal Data Protection framework come into effect; in the EEA/UK, GDPR-style rights may apply; and qualifying US residents may have state-specific rights.

Send a request through our Contact page and include the email used for your account or inquiry. We may take reasonable steps to verify identity and the request, and we will respond within the legally applicable period. We will not discriminate against you for exercising statutory privacy rights. We do not use early-access inquiries for data-brokerage sales. If a legally defined sale or cross-context sharing activity is ever introduced, any required disclosures and opt-out mechanisms must be provided first.

Automately is designed for adults managing brands and professional social-media accounts, not for children. We do not intentionally seek personal information from children through customer registration. If you believe a child has submitted information, contact us so we can review and delete it where appropriate.

Age limits, verifiable parental authorization where applicable, and platform-specific requirements must be enforced before child-accessible services are offered.

We may update this Policy when features, providers or legal obligations change. Material changes will be communicated through the website or by suitable notice before they take effect where required. The date above identifies this version.

For privacy, access, correction, deletion and grievance requests, use the Contact page. See our Data Deletion page for the request process, and our Cookies page for browser-storage information.