Effective date: September 28, 2026
AlCashBot ("we", "our") is a social media management tool operated by Humair Ahmad. It lets you connect the Facebook Pages and Instagram business/creator accounts that you administer, publish posts (text, photos, videos), view Page and Instagram insights, and manage comments on your own content — all through official Meta APIs with your explicit permission.
1. Data we collect
When you sign in with Facebook and connect your assets, we receive and store only what is needed to provide the service:
- Basic profile (via Facebook Login): your name and profile picture, used to identify your AlCashBot account.
- Pages you administer: Page IDs, names, and profile pictures, so you can choose which Page to manage.
- Page content and insights: posts published through AlCashBot, and aggregate engagement metrics (reach, impressions, likes, comments) shown back to you as analytics.
- Instagram business/creator accounts linked to your Pages: account ID, username, media you publish through AlCashBot, comments on that media, and insights.
- Access tokens: encrypted OAuth tokens that let AlCashBot act on your Pages/accounts on your behalf. Tokens are stored encrypted and are never displayed to anyone else.
- Operational data: scheduled posts you create, your app settings, and basic technical logs (used for security and debugging).
2. How we use your data
- To publish the posts, photos, and videos you create to the Pages and Instagram accounts you selected.
- To show you analytics and insights for your own Pages and accounts.
- To let you view and reply to comments on content you published through AlCashBot.
- To keep you signed in and to secure your account (e.g. detecting unauthorized access).
We do not sell your data, share it with advertisers, or use it for any purpose unrelated to operating AlCashBot.
3. Data sharing
Your data is shared only as required to operate the service:
- Meta Platforms: API calls are made to Facebook/Instagram on your behalf, using the permissions you granted (for example, publishing a post sends that post's content to Meta).
- Hosting infrastructure: data is stored on servers we operate; it is not handed to third-party analytics or advertising companies.
- Legal obligations: we may disclose data if required by law.
4. Data retention
Access tokens and connected-account data are kept only while your account is connected. If you disconnect a Page/Instagram account or delete your AlCashBot account, the associated tokens and cached data are deleted. See our Data Deletion page for how to request deletion.
5. Your rights
You may at any time: disconnect any Page or Instagram account, request a copy of the data we hold about you, or request complete deletion of your data by contacting us (details below). Removing the AlCashBot app from your Facebook settings (Settings & Privacy → Settings → Apps and Websites) also triggers our data-deletion process automatically.
6. Security
Access tokens are stored encrypted. Access to production data is restricted to the service operator. No method of transmission over the internet is 100% secure, but we apply industry-standard safeguards.
7. Children's privacy
AlCashBot is intended for people who administer Facebook Pages / Instagram business accounts (18+ or the age of digital consent in your region). We do not knowingly collect data from children.
8. Changes to this policy
If we change this policy, we will update the effective date above and, for material changes, notify users through the app or by email.
9. Contact
For privacy questions or data requests, contact: admin@alcashbot.com