Privacy Policy

Effective date: August 8, 2025

Welcome to DM Automation ("we", "us", "our"). This Privacy Policy explains what information we collect, how we use and store it, and your rights related to that information. By using our service you agree to the collection and use of information in accordance with this policy.

1. Information we collect

1.1 Generic account and usage data

When you create an account or use our services we collect basic information required to operate the service and provide features. This may include:

• Name or display name
• Email address
• IP address and device information
• Usage and analytics data (features used, timestamps, errors)
• Content you create, scheduling information and any media you upload

1.2 Social media account data

If you choose to connect your social media accounts (for example: Facebook, Instagram, LinkedIn, Twitter/X), we will collect and store data necessary to perform actions on your behalf and keep records. This includes:

• Provider user ID (the ID for your account on the social platform)
• Access token and refresh token (or equivalent credentials)
• Basic profile information returned by the provider (where provided and permitted)

2. Why we collect this data

We use collected information for the following purposes:

• To provide, operate, and maintain DM Automation features.
• To post and schedule content to connected social accounts on your behalf.
• To store history and audit trails of posts and actions taken through our app.
• To diagnose problems, improve the service, and provide customer support.
• To comply with legal obligations and protect our rights.

3. Retention and disconnecting social accounts

Important: Even if you disconnect a social account from DM Automation, we may retain that account's record and associated identifiers (including tokens) in our database. This is due to database constraints and because we maintain a history of posts and actions made through our application for auditing, billing, analytics and troubleshooting purposes.

When you disconnect an account we will:

• Stop using the credentials to perform actions on your behalf as soon as technically possible.
• Record the disconnection event in our logs and retain associated metadata and records of posts created through the app.
• Where feasible and permitted by the social provider, we will attempt to remove stored tokens from active use; however the record that the account existed and the history of actions will remain in our systems.

4. Security

We take reasonable administrative, technical, and physical measures designed to protect the information we collect. Access tokens and refresh tokens are stored encrypted at rest and access is limited to authorized systems and personnel that require it to perform their job.

No method of transmission over the internet or electronic storage is 100% secure — while we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

5. Sharing and disclosures

We do not sell your personal information. We may share information with third parties only as described below:

• With service providers who perform services on our behalf (hosting, analytics, email delivery, payment processors). They have access to the data needed to perform their services and are contractually required to protect it.
• When required by law or to respond to valid legal processes.
• To protect the rights, property, or safety of DM Automation, our users, or the public.

6. Cookies and similar technologies

We use cookies and similar technologies to provide, secure, and analyze our services. You can control cookie preferences through your browser settings; however disabling cookies may affect how our services function.

7. Your rights and choices

Depending on your jurisdiction, you may have rights regarding your personal information, such as the right to access, correct, or delete your data, or to restrict or object to certain processing.

Please note: because we retain disconnected social account records for historical and technical reasons, a request to "disconnect" will stop active use of tokens but may not remove every record from our database. If you request deletion of your entire account, we will respond to that request in accordance with applicable law — however certain records (for example, transactional logs or records required to comply with legal obligations) may need to be retained for a limited period.

8. International transfers

DM Automation operates in multiple jurisdictions. Data we collect may be transferred to — and processed in — countries other than your country of residence. Where required by law, we will take steps to ensure an adequate level of protection for your data.

9. Third-party links and services

Our service integrates with third-party platforms (social providers). Their privacy policies and practices are separate from ours — we encourage you to review those policies before connecting your accounts.

10. Children

Our services are not directed to children under 13 (or higher minimum age required by local law). We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us to request removal.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of the policy. Material changes will be communicated by email or through prominent notices on our site when required by law.

12. Contact us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at:

Thank you for using DM Automation. We take your privacy seriously and are committed to protecting your information.