At a Glance
No Data Selling
We never sell your personal or business data to third parties.
Right to Delete
You can request deletion of all your data at any time.
Encrypted Storage
All sensitive credentials are encrypted at rest using AES-256.
1. Introduction
PagesPilot ("we", "us", or "our") provides an AI-powered customer engagement and automation platform accessible at https://app.pagespilot.com.
This Privacy Policy explains how we collect, use, share, and protect information about you when you use our services, including our web application, API integrations, and connected third-party platforms such as Facebook (Meta), WhatsApp, and other messaging channels.
By using PagesPilot, you agree to the terms of this Privacy Policy.
2. Information We Collect
Account Information
- Name, email address, and password (hashed) when you register
- Business name, profile details, and contact information
- Subscription and billing tier information
Connected Platform Data
- Facebook Page access tokens (encrypted at rest)
- WhatsApp Business phone numbers and API credentials (encrypted)
- Page IDs, subscriber counts, and page metadata
Conversation & Inbox Data
- Messages exchanged between your customers and your AI agent
- Customer names, profile pictures, and identifiers (Facebook PSID, WhatsApp numbers)
- Comment content from Facebook posts processed by our automation engine
Usage & Analytics Data
- AI token consumption, response times, and automation activity logs
- Feature usage patterns to improve platform performance
- Server logs (IP addresses, browser type) for security and debugging
3. How We Use Your Information
We use collected information to:
- Provide the Service: Process incoming messages and comments, generate AI replies, and manage your connected channels
- Automate Responses: Forward messages and agentActions from Meta and WhatsApp to our AI engine to generate contextual replies on your behalf
- Billing & Subscriptions: Track token usage, enforce plan limits, and manage payment processing
- Security & Fraud Prevention: Verify webhook signatures, monitor for abuse, and protect account integrity
- Product Improvement: Analyze aggregated, anonymized usage data to improve AI performance and platform features
- Support: Respond to your support requests and diagnose technical issues
4. Facebook & Meta Platform Data
PagesPilot integrates with Meta's Graph API and Webhooks to enable Facebook Page automation. When you connect a Facebook Page to PagesPilot:
- We receive and store Page access tokens in encrypted form
- We subscribe to Facebook Webhooks (messages, postbacks, feed) on your behalf using your Page's access token
- Incoming comments and messages from your Page are processed by our AI engine and may be stored as conversation history in our database
- Customer identifiers (PSIDs) received from Meta are used solely to deliver replies within your connected Page
We comply with Meta's Platform Terms and Developer Policies. We do not use Meta platform data to serve advertisements or share it with third parties outside of delivering the service.
5. Data Sharing & Third Parties
We do not sell your personal data. We share data only in these limited circumstances:
- Service Providers: We use Neon (PostgreSQL database hosting), Cloudflare R2 (media storage), and Fly.io (cloud hosting). These providers process data solely to deliver the PagesPilot service
- AI Processing: Message content is sent to Google's Gemini API for AI reply generation. This is subject to Google's data processing policies
- Meta & WhatsApp: Replies generated by our AI are sent back to Meta's API to be delivered to end users on your behalf
- Legal Requirements: We may disclose data if required by law, court order, or to protect our legal rights
6. Data Retention
- Account data is retained for the duration of your subscription plus 30 days after account closure
- Conversation messages are retained for up to 12 months for active accounts
- You may request deletion of your data at any time by contacting us
- Facebook access tokens are automatically invalidated and deleted when you disconnect a Page from our platform
7. Security
We implement industry-standard security measures including:
- AES-256 encryption for all stored Facebook and WhatsApp access tokens
- HMAC-SHA256 signature verification for all incoming Meta agentActions
- HTTPS/TLS for all data in transit
- Rate limiting and IP-based request throttling on all API endpoints
- Regular security audits of our infrastructure
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your account and associated data
- Portability: Request your data in a machine-readable format
- Withdraw Consent: Disconnect any integrated platform at any time through your dashboard
To exercise any of these rights, contact us at support@pagespilot.com.
9. Cookies
PagesPilot uses essential cookies for authentication session management. We do not use third-party advertising or tracking cookies. You can configure your browser to reject cookies, but this may affect your ability to log in.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notification. Your continued use of PagesPilot after changes take effect constitutes acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: