Privacy Policy
Effective Date: October 26, 2026 • Last Updated: October 26, 2026
- We never sell your personal data or Facebook content.
- We only request Meta permissions strictly necessary to manage and publish to your authorized Facebook Pages.
- Page Access Tokens are encrypted at rest using AES-256-CBC encryption.
- We do not store your raw credit card numbers or security codes.
1. Information We Collect
We collect information you provide directly to us when using GETOMATE:
- Account Information: Name, email address, password hash, and workspace association when you register.
- Meta / Facebook Information: Facebook User ID, authorized Facebook Page IDs, Page names, categories, and Page Access Tokens provided through official Meta OAuth consent.
- Content Data: Campaign briefs, marketing topics, Brand Profile settings, generated drafts, revision histories, and scheduled post dates.
- Technical & Log Data: IP address, browser type, and timestamps recorded during HTTP requests and AI generation attempts.
2. How We Use Your Information
Your information is used strictly to provide and secure GETOMATE services:
- Authenticating your account and enforcing multi-tenant workspace isolation.
- Communicating with Meta Graph API to discover Pages and publish scheduled posts you have approved.
- Sending campaign prompts to configured AI providers (Google Gemini, OpenAI) to generate marketing copy.
- Managing subscription entitlements, invoices, and server-side plan limit enforcement.
- Responding to support requests submitted through our contact form.
3. Security & Token Encryption
All external credentials connected to your workspace—specifically Facebook Page Access Tokens and AI provider API keys—are encrypted at rest using AES-256-CBC encryption via Laravel's cryptographic architecture. Tokens are decrypted in memory only when executing authorized API requests and are purged immediately when a Page is disconnected.
4. Third-Party Service Providers
We work with trusted third-party providers to deliver core platform functionality:
- Meta Platforms, Inc. (Graph API): For authorized Facebook Page connection and post publishing.
- Stripe, Inc.: For secure payment processing, subscription management, and webhook reconciliation. Zero raw cardholder data touches our servers.
- Google / OpenAI: For natural language text generation requests.
5. Data Retention & Deletion Rights
You retain ownership of your data at all times. You can delete content drafts, brand profiles, or disconnect Facebook Pages from your workspace whenever you wish. Workspace owners may delete their workspace entirely, triggering automated cascade deletion of all associated drafts, schedules, tokens, and records.
6. Legal Entity & Contact Information
For privacy inquiries or to exercise data protection rights, contact us at privacy@getomate.com.