Privacy Policy

Last updated: 21 October 2026

This policy explains how Postlix ("Auto Postlix", "we", "us") collects, uses and protects personal data when you use the website and service at https://auto.postlix.com. Auto Postlix is a product of AppAlbania, Tirana, Albania. Contact: info@appalbania.com.

1. Who we are

Auto Postlix helps businesses automate Facebook Messenger, Instagram direct messages, comments and page posting. For data about your own account we are the data controller. For data about the people who write to your Facebook Page or Instagram account (your customers), you are the controller and we process that data on your behalf, only to provide the service.

2. Data we collect

Account data: name, email address, password (stored hashed), language, time zone and plan.
Billing data: package, amount, date and transaction reference. Card details are entered on the payment provider's page and never reach our servers.
Content you create: bot flows, replies, templates, scheduled posts, labels and settings.
Technical data: IP address, browser type, log entries and error reports needed to run and secure the service.

3. Facebook and Instagram data

When you connect your account with Facebook Login, you choose which Pages and Instagram professional accounts Auto Postlix may manage. With the permissions you grant, we receive and store:

your Facebook user ID and name, the list of Pages and linked Instagram accounts you selected, and the access tokens needed to act for them;
messages and comments sent to those Pages and accounts, and the replies sent by your bot or your team;
basic public profile data of the people who message your Page (name, profile picture, page-scoped ID) so conversations can be shown and answered;
posts, media and schedules you publish through Auto Postlix, and Page insights you choose to view.

We use this data only to provide the features you turn on (automatic replies, comment automation, broadcasts within Meta's rules, posting and reporting). We do not sell it, do not use it for advertising and do not use it to build profiles. Our use of data received from Meta follows the Meta Platform Terms and Developer Policies.

4. How we use data

To provide, maintain and support the service (performance of the contract).
To send service emails such as activation, password reset and billing notices (performance of the contract).
To keep the service secure, prevent abuse and fix errors (legitimate interest).
To meet legal, tax and accounting duties (legal obligation).

We share data only with providers that help us run the service, under contracts that require them to protect it:

Meta Platforms (Facebook, Messenger, Instagram) to receive and send messages, comments and posts you instruct us to.
AI text providers, only when you enable AI replies: the message text and the instructions you wrote are sent to generate a reply.
Hosting, email delivery and payment providers needed to operate, notify and bill.
Authorities, when the law requires it.

6. How long we keep data

We keep account and page data while your account is active. If you disconnect a Page, its tokens stop being used and its data is removed within 30 days. After an account is closed we delete or anonymise its data within 30 days, except billing records we must keep by law. Technical logs are kept for up to 90 days.

7. Data deletion instructions

To delete the data Auto Postlix holds about you or your Pages:

In Facebook, open Settings and privacy > Settings > Business integrations, select Auto Postlix and choose Remove. This stops all access immediately.
Send an email to info@appalbania.com with the subject "Data deletion request", from the email address of your account (or, if you only wrote to a Page that uses Auto Postlix, include the Page name and your Facebook name).

We delete the data within 30 days and confirm by email. If you ask the business that runs the Page, it can also delete your conversation from its Auto Postlix account.

8. Your rights

You can ask to access, correct, delete, restrict or export your personal data, and object to processing based on legitimate interest. Write to info@appalbania.com; we reply within 30 days. You may also complain to the Albanian Information and Data Protection Commissioner or to the data protection authority in your EU country. More details are on our GDPR page.

9. Cookies

We use one necessary session cookie to keep you signed in, remember your language and protect forms. If analytics is enabled, Google Analytics loads only after you interact with the page and measures visits in aggregate. We do not use advertising cookies.

10. Security

Connections are encrypted with HTTPS, passwords are never stored in plain text, access tokens are kept on our servers only and staff access is limited to what is needed for support. No system is perfectly secure; if a breach affects your data we will inform you and the competent authority as required by law.

11. Changes and contact

If we change this policy we will update the date above and, for important changes, notify account holders by email. Auto Postlix is not intended for children under 16. Questions: info@appalbania.com — AppAlbania, Tirana, Albania.