Legal
Privacy policy
Last updated 30 October 2026
The short version. We keep only what we need to send your automated DMs and show you how they did. We don’t sell data and we don’t use it for ads. You can ask us to delete it at any time.
Who we are
Automations Hub is run by Automations Hub (“we”, “us”). It sends automatic Instagram and Facebook Messenger messages for creators and businesses, through Meta’s official APIs. Questions about this policy: info@automationshub.online.
Whose data this covers
- Customers: people who sign up and connect their Instagram or Facebook account.
- Their followers: people who comment on, reply to or message a customer’s account, and so receive an automated DM.
For followers’ data, the customer decides what to collect and what to send. We process it on their behalf, to run their automations.
What we collect
| Data | Why |
|---|---|
| Your email address, password (stored hashed) and language | To log you in and show the app in English or Arabic. |
| Your Facebook Page and Instagram account: ID, username, name, profile picture and access token | To read comments and send DMs from your account. Access tokens are encrypted. |
| Your automations: keywords, messages, links and settings | To run them. |
| Followers: Instagram or Facebook user ID, username and name | To send them the right message once, and to show your contacts list. |
| Followers: email address, only if they type it in reply to an email gate | To give it to the customer who asked for it. |
| Activity: messages sent, button taps, follow checks and link clicks | To show your stats and stop duplicate messages. |
| Payments: plan, amount, date, payment method type and Paymob reference numbers | To activate your plan and keep billing records. We never see or store full card numbers. |
We don’t read your other DMs or comments. We only act on events that match an automation you set up.
Meta permissions we ask for
When you connect with Facebook, we ask for these permissions and use them only for the reasons shown:
pages_show_list,business_management: list the Pages and Instagram accounts you can connect.pages_manage_metadata: subscribe your Page to comment and message notifications.pages_read_engagement,instagram_basic: read your account name, picture and the comments that trigger an automation.pages_messaging,instagram_manage_messages: send the automated DMs and check if someone follows you.pages_manage_engagement,instagram_manage_comments: post the public reply under a comment, if you turn it on.
Who we share it with
We don’t sell personal data. We share it only with the services that run Automations Hub:
- Meta (Instagram and Facebook), to receive comments and send messages.
- Supabase, our database and login provider.
- Vercel, which hosts the app and this website.
- Paymob, which processes card, wallet and Fawry payments.
- Google Fonts, which serves the fonts on this website.
Some of these providers store data outside Egypt. We may also share data if the law requires it. Customers can export their own contacts list; once exported, how they use it is up to them.
Cookies
We use only the cookies the app needs: one to keep you logged in and one to remember your language. No advertising or tracking cookies.
How long we keep it
- Your account data and automations: until you delete your account.
- Follower contacts: until the customer deletes them or their account, or until the follower asks us to delete them.
- Payment records: as long as tax and accounting law requires.
Deleting your data
Followers: email info@automationshub.online with your Instagram or Facebook username. We delete your contact records within 30 days.
Customers: remove Automations Hub in your Facebook settings under Apps and Websites and choose to delete your data. We immediately delete the Pages and Instagram accounts you connected, with their automations and contacts. To delete your Automations Hub login as well, email us from your account email and we’ll do it within 30 days. See our data deletion page.
You can also ask us for a copy of your data, or to correct it, at the same address.
How we protect it
- Access tokens are encrypted with AES-256-GCM.
- Everything travels over HTTPS.
- Each customer can only see their own accounts, automations and contacts.
- We check every message from Meta is really from Meta before acting on it.
Age
Automations Hub is for people aged 18 or over who run an Instagram or Facebook account for themselves or a business.
Changes
If we change this policy, we’ll update the date at the top. If the change is important, we’ll email customers first.