Privacy Policy

Last updated: 8 October 2026

This Privacy Policy explains what information SocialPilotX ("we", "us") collects when you use the SocialPilotX web application at socialpilotx.online (the "Service"), how we use it, and the choices you have. If you have questions, contact contact@socialpilotx.online.

1. Information you give us

• Account information: your name, e-mail address and password. Passwords are stored only as a one-way hash.
• Workspace information: the workspace created for your account and its members.
• Messages you write in the Service, for example replies you send to people who message your Facebook Page, replies you write to comments on your Page's posts, and the text of the optional automatic comment reply you set up.

2. Information we receive from Meta (Facebook)

When you choose to connect a Facebook account and Pages, Meta shares information with us according to the permissions you approve in the Facebook login dialog. Depending on those permissions, this can include:

• your Meta (Facebook) user identifier for our app and your name;
• the list of permissions you granted or declined;
• an access token that lets the Service act on the Pages you connect, and its expiry information;
• the Facebook Pages you manage: Page identifier, name, category, profile picture address and your role on each Page;
• Page access tokens for the Pages you explicitly connect;
• Page information and recent posts, which are loaded from Meta when you open them in the dashboard and are not stored by us, apart from the Page name, category and picture address;
• for Pages where you enable Messenger: messages people send to your Page, replies sent by your Page, delivery and read receipts, the Page-scoped identifier of the person writing, and their name and profile picture as provided by Meta.
• for connected Pages: comments people write on your Page's posts, as sent to us by Meta when a comment is added, edited or removed. This includes the comment text, the commenter's name and Facebook identifier where Meta provides them, the time of the comment and a link to the post. From these we keep a simple record of each person who commented on your Page (a "comment lead": name, number of comments, first and latest comment time, and whether your Page replied). A comment lead is not a Messenger contact and does not mean the person agreed to receive messages;
• for comments you open in SocialPilotX: the text, date, picture and link of the post the comment was written on, loaded from Meta when you view it and not stored by us;
• replies your Page publishes from SocialPilotX, including automatic replies if you turn them on, with their status and time.

3. How we use information

We use this information only to provide the features you request: signing in, connecting and showing your Pages, displaying Page information and posts, receiving Messenger messages for your Page and sending the replies you write, showing comments on your Page's posts with the post they belong to, organising the people who comment as comment leads, publishing the replies you write and, only if you turn it on, one automatic reply to new comments, keeping the Service secure, and responding to your requests. We do not use Meta Platform Data for advertising, profiling, or any purpose unrelated to the Service, and we do not sell it.

4. Meta Platform Data

Data we receive through Meta's APIs is handled according to Meta's Platform Terms and Developer Policies. It is only accessible to members of the workspace that connected the Page, it is not shared with other customers, and it is not transferred to data brokers or used to build profiles. You can stop our access at any time by disconnecting a Page in SocialPilotX or by removing SocialPilotX from your Facebook settings.

5. How we protect information

• All connections to the Service use HTTPS.
• Meta access tokens are stored encrypted and are never sent to your browser.
• Message content and comment content is stored encrypted.
• Each workspace can only access its own data.
• Security logs are designed not to record access tokens or passwords.

No method of transmission or storage is completely secure, but we work to protect your information.

6. Sharing

We do not sell personal information. We share information only:

• with Meta, when you ask the Service to act on Facebook (for example, sending a Messenger reply or publishing a reply to a comment);
• with our hosting provider, which stores and processes data on our behalf only to run the Service;
• when required by law.

7. Retention

• Account, workspace and Page connection information is kept while your account is active, or until you ask us to delete it.
• When you disconnect a Page, its stored Page access token is deleted immediately.
• Messenger conversations stored for a connected Page are kept while your account is active, or until you ask us to delete them.
• Comments received for a connected Page, and the replies sent to them, are deleted 90 days after the comment was written. Comment leads are deleted when the person has not commented for 90 days. When a comment is deleted on Facebook, we erase its content at once.
• When you disconnect a Page, all of its comments, replies, comment leads and automatic reply settings are deleted immediately.
• The content of incoming Meta webhook notifications is kept in encrypted form for up to 30 days and then erased. Their technical records (without content) are deleted after 90 days.
• Notifications for Pages that are not connected to any SocialPilotX account are not kept.

8. Cookies

We use only the cookies needed to run the Service: a session cookie that keeps you signed in and a security cookie that protects forms against cross-site request forgery. We do not use advertising or analytics cookies.

9. Your choices and deletion

You can disconnect Pages at any time in the Service. To delete your account and the data we received through Meta, follow the steps on our Data Deletion page or email contact@socialpilotx.online. You may also contact us to ask what information we hold about you or to correct it.

10. Children

The Service is intended for businesses and is not directed to children. You must be at least 18 years old, or the age of majority where you live, to use it.

11. Changes

We may update this policy. We will change the "Last updated" date above, and for significant changes we will inform account holders by e-mail or in the Service.

12. Contact

SocialPilotX — contact@socialpilotx.online