Privacy Policy

MediaPilot helps small and medium businesses automatically reply to comments and direct messages on social media using artificial intelligence, take orders, and manage customer relationships. The Service is hosted at mediapilot.uz.

When you use the Service, we may collect the following data:

• Account data: name, email address, and password (stored encrypted) — to create your MediaPilot account.
• Connected social account data: the connected business account's identifier, username, and access token.
• Conversation data: comments and direct messages received by the connected account and the sender's platform-scoped identifier — solely to generate and deliver replies.
• Catalog and customer data: products, prices, contacts, tags, and orders you enter.
• Technical data: IP address, browser type, and usage logs — for security and troubleshooting.

When you connect your business account via Instagram or Facebook with your explicit consent, we may access the following through Meta (Instagram Graph API):

• The Instagram professional account's basic profile (account ID, username).
• Direct messages and comments received by the connected account and the sender's Instagram-scoped identifier (IGSID) — solely to prepare and send replies.
• Account statistics (follower count, reach) — to display analytics in your dashboard.

We use data obtained from the Meta platform only to provide the service you requested. We do not use it for advertising, sell it, or share it with third parties, and we comply with the Meta Platform Terms and Developer Policies.

• Reading incoming messages and comments and sending automatic replies on behalf of the connected account.
• Confirming prices strictly from your catalog and managing order creation and handover to a human.
• Operating, improving, and securing the Service.
• Providing technical support and sending important service notices.

To prepare replies, message text is processed by our AI provider (Anthropic Claude). This data is used only to draft the reply and is not used to train third-party models.

We do not sell your personal data. Data may be shared only with the following service providers and only to operate the Service:

• Meta Platforms — receiving and sending messages and comments.
• Anthropic — generating AI replies.
• Hosting and infrastructure providers — secure data storage.

We may disclose data where required by law or to protect our rights.

Conversation data is retained while the business account remains connected. When you disconnect the account, all access stops.

To delete your data:

• Instagram: revoke MediaPilot's access at any time under Settings → Apps and websites.
• Or send a deletion request to support@mediapilot.uz — we will complete it within 30 days.
• Automated deletion requests via Meta are accepted at api.mediapilot.uz/api/v1/meta/data-deletion.

Access tokens are stored encrypted. All API traffic is transmitted over HTTPS. We apply technical and organizational measures to protect your data from unauthorized access, alteration, and loss.

The Service uses only cookies necessary for sessions and authentication. We do not use advertising or third-party tracking cookies.

You may request access to, correction of, or deletion of your data at any time by contacting support@mediapilot.uz.

The Service is not intended for persons under 18. We do not knowingly collect data from children.

We may update this policy from time to time. We will announce material changes on this page and update the “Last updated” date.

For privacy or data-deletion questions: support@mediapilot.uz.