Privacy Policy

1. Introduction

AIworX ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS platform for Instagram Business account automation.

By using AIworX, you agree to the collection and use of information in accordance with this policy. We will not use or share your information with anyone except as described in this Privacy Policy.

We adhere to the Meta Platform Terms, the Instagram Platform Policy, the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the UK GDPR.

2. Information We Collect

We collect information that you provide directly to us and information collected automatically when you use our service.

Account Information

• Email address
• Name
• Password (stored as a one-way hash)
• Billing information (processed by our payment processor)

Automatically Collected Information

• IP address
• Browser type and version
• Operating system
• Usage data and analytics
• Session timestamps

3. Facebook Login Data

When you use Facebook Login to sign in to AIworX, we receive the following information from Meta, strictly limited to the permissions you grant:

• Your Facebook User ID
• Your name and email address
• Your profile picture

We use this data solely to authenticate your account and provide the service. We do not access any Facebook data beyond what is explicitly requested through our permissions. We never post to Facebook on your behalf without your explicit permission.

4. Instagram Account Data

When you connect your Instagram Professional account to AIworX, we access the following data through the Instagram Graph API, limited to the permissions you grant:

Profile Information

• Instagram Business Account ID
• Account username
• Profile picture URL
• Account type and category

Content and Engagement Data

• Media posts (for comment management)
• Comments on your posts
• Direct Messages sent to and from your account
• Story mentions (when applicable)

We only access and process Instagram data that is strictly necessary to provide the features you have enabled. We never post content to Instagram on your behalf without your explicit permission.

5. Messages and Conversation Data

AIworX processes Instagram Direct Messages to provide the following features:

• Reading incoming messages to trigger automated responses
• Sending messages on your behalf when you configure auto-reply rules
• Storing conversation history for your review in the team inbox
• Providing AI-generated message suggestions

Message data is encrypted at rest using AES-256 encryption. Messages are retained only for as long as necessary to provide the service and are deleted upon account deletion or upon your request.

We do not sell, rent, or share your message content with any third party for marketing purposes.

6. AI Processing

AIworX uses artificial intelligence to provide message suggestions and auto-reply features. When AI processing is enabled:

• Your conversation data may be processed by our AI service to generate contextual responses
• AI processing is performed only on data from accounts you have connected
• AI-generated suggestions are presented to you for review before being sent
• You can disable AI features at any time from your dashboard
• We do not use your data to train third-party AI models

AI processing is performed through vetted third-party providers who maintain their own compliance with applicable data protection regulations.

7. Cookies

We use cookies to maintain your session, remember your preferences, and analyze service usage. For full details, please see our Cookie Policy.

• Necessary cookies: Required for the service to function, including authentication and session management
• Analytics cookies: Help us understand how users interact with our service
• Preference cookies: Remember your settings and choices

You can control cookie settings through your browser. Disabling necessary cookies may impair the functionality of the service.

8. Legal Basis for Processing

We process your data under the following legal bases:

• Consent: You have given explicit consent for us to process your data for the purposes described in this policy, including connecting your Instagram and Facebook accounts
• Contract: Processing is necessary for the performance of our service agreement with you
• Legitimate Interest: Processing is necessary for our legitimate interests in providing and improving the service, provided these interests do not override your fundamental rights
• Legal Obligation: Processing is required to comply with applicable laws

9. Data Retention

We retain your personal data only for as long as necessary to provide the service and fulfill the purposes described in this policy:

• Account data: Retained while your account is active and deleted within 30 days of account closure
• Instagram data: Retained while your Instagram account is connected and deleted within 30 days of disconnection
• Message data: Retained while your account is active and deleted within 30 days of account closure
• Access tokens: Retained while your Instagram account is connected and securely deleted upon disconnection
• Usage analytics: Retained for up to 12 months in aggregated, anonymized form

You may request deletion of your data at any time through the settings page or by contacting us directly.

10. Security

We implement industry-standard security measures to protect your data:

• All data transmitted over HTTPS with TLS 1.2+ encryption
• Access tokens encrypted using AES-256 before storage
• Passwords hashed using bcrypt with automatic salting
• Database encryption at rest
• Regular security audits and penetration testing
• Role-based access control for internal systems
• Automated monitoring for suspicious activity

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Third-Party Services

We use the following third-party services to provide and improve our platform:

• Meta Platforms: For Facebook Login and Instagram Graph API access
• Payment processor: For subscription billing (we do not store payment card details)
• Cloud infrastructure provider: For hosting and data storage
• AI service provider: For message suggestion generation
• Analytics provider: For service usage analysis

These third-party services have their own privacy policies. We encourage you to review them. We only share data with third parties as necessary to provide the service and in accordance with this policy.

We do not sell your personal information to any third party.

12. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data
• Restriction: Request restriction of processing of your personal data
• Portability: Request transfer of your personal data to another service
• Objection: Object to processing of your personal data
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

You can exercise these rights through your account settings or by contacting us at privacy@aiworx.io.

13. GDPR Rights (European Economic Area and United Kingdom)

If you are located in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• The right to be informed about the collection and use of your personal data
• The right to access your personal data
• The right to have inaccurate personal data rectified
• The right to have personal data erased ("right to be forgotten")
• The right to restrict processing in certain circumstances
• The right to data portability
• The right to object to processing, including profiling
• Rights related to automated decision-making and profiling

If you believe we have not handled your data in accordance with GDPR or UK GDPR, you have the right to lodge a complaint with your local supervisory authority.

14. CCPA Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know: The right to know what personal information we collect, use, disclose, and sell
• Right to Delete: The right to request deletion of your personal information
• Right to Opt-Out: The right to opt out of the sale of your personal information. We do not sell personal information.
• Right to Non-Discrimination: The right not to be discriminated against for exercising your CCPA rights

To exercise your CCPA rights, please contact us at privacy@aiworx.io. We will respond to verifiable requests within 45 days.

15. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. When we transfer data outside the European Economic Area or the United Kingdom, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Binding Corporate Rules where applicable

By using AIworX, you consent to the transfer of your data to countries that may have different data protection rules than your country of residence.

16. Children's Privacy

AIworX is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@aiworx.io.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date at the top. We may also notify you by email of significant changes.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of AIworX after changes are posted constitutes acceptance of the updated policy.

18. Contact Information

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: