Privacy Policy

SECTION 01Who this policy covers

This policy explains how Automate Hub LLC ("Automate Hub," "we," "us") handles personal information in connection with the Automate Hub platform, our websites, and related services (the "Service").

It covers the people whose information we handle directly: account holders, the team members they invite, prospective customers who fill in a form or start a trial, and visitors to our website.

It also explains how we handle information about your customers — the contacts, orders and conversations inside your account. Section 7 covers that, and the distinction matters, so it has its own section.

SECTION 02Two different roles we play

We handle personal information in two distinct ways, and different rules apply to each.

As a controller

For information about you, our customer — your account details, billing, support conversations, how you use the product — we decide what to collect and why. This whole policy applies.

As a processor

For information about your customers — the contacts you import, the orders they place, the messages you exchange — you decide what is collected and why. We process it on your instructions, as described in Section 7 and in our Terms of Service. Your own privacy policy, not this one, governs what you tell your customers.

SECTION 03Information we collect

What you give us

• Account details: name, business name, email address, phone number, password.
• Billing information: your billing address and the payment method on file. Card numbers are collected and stored by our payment processor, not by us — we hold only a token and the last four digits.
• Content you create: pages, funnels, workflows, templates, files you upload.
• Support conversations: what you write to us and what we write back.

What we collect automatically

• Usage data: features used, pages viewed, actions taken, timestamps.
• Device and connection data: IP address, browser type, operating system, device identifiers.
• Cookies and similar technologies — see Section 5.

What we receive from others

• Our payment processor tells us whether a charge succeeded and why one failed.
• Services you connect to your account — a calendar, an ad platform, a store — send us the data those integrations require.
• Carriers and email providers return delivery results for messages you send.

We do not ask for and do not want special categories of information — health, biometric, precise geolocation, or similar. Don't put it in the platform unless you've confirmed the platform is a suitable place for it.

SECTION 04How we use it

• To provide the Service: create and run your account, deliver features, sync your integrations.
• To bill you: process payments, handle failures, issue receipts.
• To support you: answer questions, investigate faults, restore access.
• To keep the Service working and safe: monitor performance, detect abuse and fraud, enforce our Terms.
• To improve the product: understand which features get used, find what's broken.
• To communicate with you: service notices, security alerts, billing messages, and — where you haven't opted out — product news. Service and billing messages are not marketing and can't be opted out of while your account is open.
• To comply with law and respond to lawful requests.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

SECTION 05Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the site and product are used.

• Strictly necessary — sign-in, security, load balancing. These can't be switched off.
• Analytics — how people find and use our site. We currently use [ANALYTICS TOOLS].
• Advertising — if we run ads, these measure their effect. We currently use [ADVERTISING TOOLS, or "none"].

You can control cookies through your browser and through any consent banner shown on our site. Blocking strictly necessary cookies will stop parts of the Service from working.

We honour Global Privacy Control (GPC) signals where required by law.

SECTION 06Who we share it with

We share personal information only in these situations:

Service providers

Companies that run parts of the Service for us, under contract and only for that purpose — hosting and platform infrastructure, payment processing, SMS and voice carriers, email delivery, analytics, customer support tooling, and AI providers. Our current providers include [SUBPROCESSOR LIST].

At your direction

When you connect an integration or invite a team member, information flows where you've told it to. Those third parties handle it under their own privacy policies.

Legal and safety

When we're legally required to, or where we reasonably believe disclosure is necessary to protect rights, safety, or property, or to investigate fraud or abuse.

Business transfers

If Automate Hub is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction. We'll give notice before your information becomes subject to a different privacy policy.

We do not sell personal information to data brokers or advertisers.

SECTION 07Your customers' data

When you use Automate Hub to hold contact records, process orders, or send messages, you decide what's collected and why. We process that information only:

• on your instructions, to provide the Service;
• as needed to keep the Service secure and working;
• where the law requires it.

We do not use your customers' data to market to them, and we do not use it to train AI models.

You're responsible for having a lawful basis for what you collect, for telling your customers what you do with it in your own privacy policy, and for honouring their rights. If one of your customers contacts us directly about their data, we'll refer them to you.

If you need a Data Processing Addendum, contact us at [email protected]. [CONFIRM: do you offer a DPA?]

SECTION 08Messaging and consent

When you send SMS, email or voice messages through the platform, you are the sender. You are responsible for having the consent the law requires, for honouring opt-outs, and for complying with the TCPA, CAN-SPAM, state telemarketing rules and carrier requirements. Section 8 of our Terms of Service sets this out in full.

We process message content and delivery data to transmit those messages, produce delivery reports, and meet carrier and legal obligations. Carriers and email providers receive the message and recipient details necessary to deliver it, and apply their own retention and filtering rules.

Messages we send you about your account, billing or security are part of the Service. Marketing emails from us carry an unsubscribe link.

SECTION 09AI features

Some features use artificial intelligence to draft, summarise or automate content. Where those run on a third-party AI provider, the content you submit is transmitted to that provider to generate a response. Our current provider is [AI PROVIDER].

We do not use your content or your customers' data to train AI models, and we contract with providers on terms that prohibit them from doing so. [CONFIRM this matches your provider's actual terms before publishing.]

AI output can be wrong. Review it before it reaches your customers — Section 11 of the Terms covers your responsibility for what gets sent from your account.

SECTION 10How long we keep it

We keep personal information for as long as your account is open, and afterwards only as long as we need it:

• Account and content data — deleted [RETENTION PERIOD] after your account closes. Export anything you want to keep before you cancel.
• Billing records — retained as long as tax and accounting law requires, typically several years.
• Message and delivery logs — retained [RETENTION PERIOD] for compliance and dispute handling.
• Backups — deleted data persists in routine backups for a limited period before being overwritten.

SECTION 11Security

We use commercially reasonable technical and organisational measures to protect personal information, including encryption in transit, access controls, and limiting staff access to what their role requires.

No system is perfectly secure and we can't guarantee that unauthorised access will never happen. Protecting your account also depends on you: use a strong, unique password, don't share credentials, and remove team members who no longer need access. Tell us immediately at [email protected] if you suspect a compromise.

SECTION 12Your rights and choices

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy;
• correct information that's wrong;
• delete information, subject to legal exceptions;
• opt out of marketing messages;
• opt out of the sale or sharing of personal information — we don't do either;
• not be discriminated against for exercising these rights.

Most of this you can do yourself from your account settings. For anything else, email [email protected]. We'll verify your identity before acting, and respond within the time the applicable law allows.

If your request concerns data held inside a customer's account rather than ours, we'll pass you to that customer, who controls it.

SECTION 13California privacy rights

If you're a California resident, the CCPA as amended by the CPRA gives you the rights listed in Section 12, plus the right to limit the use of sensitive personal information.

In the past twelve months we have collected the categories described in Section 3: identifiers, commercial information, internet activity, and, where you provide it, financial account information held by our payment processor. We collect it for the purposes in Section 4 and disclose it to the service providers in Section 6.

We have not sold personal information and have not shared it for cross-context behavioural advertising in the past twelve months. [CONFIRM this is true of your ad pixels before publishing — advertising pixels can count as "sharing" under the CPRA.]

You may use an authorised agent to make a request. To exercise any right, email [email protected].

SECTION 14Where data is processed

Automate Hub is operated from the United States, and personal information is processed there and in other countries where our service providers operate.

If you or your customers are in the European Economic Area, the United Kingdom, or another region with data transfer restrictions, those transfers rely on the safeguards required by applicable law. [If you serve EU or UK customers, this needs a proper lawful basis section and a named transfer mechanism — get it drafted before you market there.]

SECTION 15Children

The Service is for business use and isn't directed at children. We don't knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact [email protected] and we'll delete it.

SECTION 16Changes to this policy

We may update this policy as the Service changes or the law does. When a change is material, we'll give notice — by email, in-app, or by posting the updated policy with a new "Last updated" date — before it takes effect. Continuing to use the Service after that date means you accept the updated policy.