Privacy Policy

Autopilot Marketing ("we", "us") helps businesses plan, publish, and respond to social media content. This policy explains what we collect, how we use it, and the choices you have.

Information we collect

• Account details: name, email, password hash, workspace and team membership.
• Brand content you provide: brand kits, captions, images, videos, and schedules.
• Connected social accounts: when you connect Facebook or Instagram, we receive the Page and Instagram Business account IDs and names you choose, and a Page access token that lets us publish and reply on your behalf.
• When you connect LinkedIn, we receive your LinkedIn member ID and name, the IDs and names of Company Pages you administer and choose, and access (and, where LinkedIn issues them, refresh) tokens that let us publish and reply on your behalf.
• Engagement data: comments on posts published through connected Facebook Pages, Instagram accounts, and LinkedIn Company Pages (comment text, author name or username where available, and IDs), used to draft or send replies and to capture leads.
• Usage and billing records, and technical logs needed to run the service securely.

How we use Facebook and Instagram data

• Publish the posts you create or schedule to the Page or Instagram account you selected.
• Receive new comments on those posts and reply to them, automatically or after your review.
• Show connection status and errors in your dashboard.

We do not sell Meta Platform Data, use it for advertising, or share it with third parties except service providers that host our infrastructure under confidentiality obligations. Access tokens are encrypted at rest.

How we use LinkedIn data

• Publish the posts you create or schedule as the Company Page or profile you selected.
• Read new comments on posts we published to your Company Page and reply to them, automatically or after your review. We do not read comments on personal profiles.
• Refresh or flag expiring access so your scheduled posts keep publishing.

LinkedIn data is used only to provide these features for your workspace. It is never sold, used for advertising, or combined with data from other sources to profile members. Disconnecting the account in Autopilot Marketing or revoking access in LinkedIn settings stops access, and tokens are deleted on request.

AI processing

To generate captions, images, videos, and reply drafts, relevant brand content and comment text may be sent to AI providers (such as OpenAI) that process it on our behalf and do not use it to train their models under their API terms.

Retention and deletion

We keep your data while your workspace is active. Disconnecting a social account or removing our app in your Facebook settings stops access; you can request deletion of all data associated with a connected account at any time — see Data deletion. Deleting your workspace removes its content and connected accounts.

Security

Data is transmitted over HTTPS and stored in access-controlled databases. Tokens for connected Facebook, Instagram, and LinkedIn accounts are encrypted with AES-256-GCM.

Contact

Questions or requests: care@zenonco.io.