Privacy Policy

Last updated: 17 August 2026

MeAutoReply ("MeAutoReply", "we", "us" or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (the "Service"), which connect your social media accounts and use artificial intelligence to help you read and reply to comments across platforms including Threads, Instagram, Facebook, LinkedIn and YouTube.

Please read this policy carefully. By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Service.

1. Who we are

MeAutoReply is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, you can contact the site administrator using the details provided on our website.

2. Information we collect

We collect and process the following categories of information:

  • Account information: your name, email address, and a securely hashed password. We never store your password in plain text.
  • Social account connection data: when you connect a social media account, we receive and store access tokens (and, where applicable, refresh tokens) issued by that platform. These tokens are encrypted at rest and are used only to read comments and publish replies or posts on your behalf. We also store your public profile identifier, username, and profile picture URL for display purposes.
  • Content data: the comments we read from your connected accounts, the replies our AI generates, and the replies or posts published on your behalf. We may also store drafts awaiting your approval.
  • Configuration data: the persona, tone, guardrails, categories, and other settings you configure to control how the AI replies.
  • Usage and analytics data: information about how you use the Service, including reply counts, engagement metrics retrieved from the platforms, streaks, and feature usage.
  • Billing data: your subscription plan, credit balances, purchase history, and payment records. Card payments are processed by our payment provider, Stripe. We do not store your full card number or security code.
  • Technical data: IP address, browser type, device information, and cookies strictly necessary to operate the Service (see our Cookie Policy).

3. How we use your information

We use your information to:

  • provide, operate, and maintain the Service, including reading comments and generating and publishing replies;
  • authenticate you and keep your account secure;
  • process payments, manage subscriptions and credits, and administer our affiliate programme;
  • generate analytics and AI-powered insights for your connected accounts;
  • send you service-related communications, including your account activation email and important notices;
  • provide customer support and respond to your requests;
  • detect, prevent, and address technical issues, fraud, or abuse;
  • comply with our legal obligations.

4. Legal bases for processing (UK/EU users)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service you sign up for); legitimate interests (to secure, improve, and market our Service in a way that does not override your rights); consent (where you have given it, for example for optional communications, which you may withdraw at any time); and legal obligation (for example, to keep records for tax purposes).

5. How we share your information

We do not sell your personal data. We share information only as necessary to run the Service:

  • Social media platforms (Meta/Threads/Instagram/Facebook, LinkedIn, Google/YouTube) that you connect, in order to read comments and publish content on your behalf, subject to each platform's terms.
  • Payment processing with Stripe, which handles card payments and payouts under its own privacy policy.
  • AI processing with our AI provider, which processes comment text to generate replies. Only the content necessary to generate a reply is sent.
  • Infrastructure and email providers that host the Service and deliver transactional email.
  • Legal and safety disclosures where required by law, court order, or to protect our rights, users, or the public.

6. International transfers

Some of our providers may process data outside the United Kingdom or European Economic Area. Where this happens, we take steps to ensure an adequate level of protection, such as relying on adequacy decisions or standard contractual clauses.

7. Data retention

We keep your personal data for as long as your account is active and as needed to provide the Service. If you close your account, we will delete or anonymise your personal data within a reasonable period, except where we must retain certain records to comply with legal, tax, or accounting obligations, or to resolve disputes and enforce our agreements.

8. Your rights

Depending on your location, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data; object to or restrict certain processing; request data portability; and withdraw consent where processing is based on consent. You can also disconnect any social account at any time from within the Service. To exercise your rights, contact the site administrator. You have the right to lodge a complaint with a supervisory authority, such as the UK Information Commissioner's Office (ICO).

9. Security

We use industry-standard technical and organisational measures to protect your data. Access tokens and refresh tokens are encrypted at rest, passwords are hashed, and access to production systems is restricted. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Service is not intended for anyone under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Third-party links

Our Service may contain links to third-party websites or platforms. We are not responsible for the privacy practices of those third parties, and we encourage you to read their privacy policies.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "last updated" date. If we make material changes, we will take reasonable steps to notify you. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact the site administrator using the contact details on our website.