Privacy Policy
Last updated: 9 September 2026
1. Data we process
When you sign in with Facebook we process your name, profile details and email; the Instagram Business account and Facebook Page you connect; the direct messages (DMs) and post comments your account receives; the contact (CRM) records, notes and tags you create; and, if connected, your WhatsApp Business messages.
2. Why we use your data
We use data solely to provide the service: to display your messages and comments in your dashboard, to run the automations you configure, to maintain CRM records and to support you. We never sell your data or share it for advertising.
3. Meta Platform data
We access Instagram and Facebook data only within the permissions you explicitly grant, through the Meta Graph API, and in compliance with the Meta Platform Terms and Developer Policies. We do not access any data outside the scope you have authorised.
4. Storage, infrastructure and security
Your data is stored in a PostgreSQL database hosted on servers we operate ourselves. Access tokens are kept encrypted with AES-256-GCM; your session is managed with an httpOnly cookie and CSRF protection. The database is isolated per brand with row level security (RLS). Data is accessed only to the extent needed to provide the service.
5. Third-party services and international transfers
To provide the service we use: Meta Platforms (Instagram and WhatsApp Business API — message delivery), OpenAI (generating AI replies; conversation content is processed for this purpose), iyzico (payments) and our automation infrastructure (n8n). Meta and OpenAI are established outside Türkiye; transfers to them are made under KVKK art. 9 and limited to the data required to perform the service. These providers do not use the data for their own purposes and we never sell your data to any third party.
6. Your rights
You have the right to access, correct and delete your data. You can disconnect your linked Instagram/WhatsApp account from the panel at any time, and request full deletion of your account and data under Settings → Profile. See our Data Deletion Instructions page for details.
7. Cookies
We only use cookies strictly necessary to keep your session secure (session and CSRF). We do not use third-party advertising or tracking cookies.
8. Contact
For any privacy question or request, reach us at —. Data controller: — — —.