We keep as little as possible, and lock the rest
Your customers trust you with their messages. This page explains, in plain words, what AUTODMs keeps, what it never keeps, and how the AI is kept safe.
What we don’t keep
The safest data is data we never have.
Instagram and Messenger chats
They load live from Meta when you open the inbox. We never save a copy.
The text of messages
A message passes through AUTODMs to run your automation, then it is gone (WhatsApp is the one exception, see below). Our tests check that message text never reaches the database.
Names and profile pictures
We ask Meta for them when your screen shows them and keep them in memory for a short time only.
Your social media passwords
You log in with Meta. We get a key from Meta, never your password.
What we keep, and how
Only what your automations need to work.
Your login
Email and a scrambled (hashed) password. We cannot read your password.
Keys to your connected accounts
Encrypted with your workspace’s own key.
Contacts
The Instagram, Messenger or WhatsApp ID is encrypted. On WhatsApp this ID is the phone number. We find a contact with a one-way code, not the real number.
Tags, opt-outs and dates
Plain data with no message text, so your automations know who is who.
WhatsApp opt-ins
The number and the date the person said yes, encrypted. We keep it to prove consent.
WhatsApp chats
WhatsApp has no way to load old messages, so chats are kept encrypted for 7 days at most, then deleted.
Answers you collect (emails, phones)
Sent to your own Google Sheet, Shopify, Klaviyo or webhook. We keep a copy only if you turn on “Keep leads”, and then it is encrypted.
How your data is protected
A separate key for each workspace
Everything sensitive is encrypted with AES-256. Each workspace has its own key, and that key is locked by a master key that is not in the database.
Delete means gone
Delete your workspace and we delete its key. Even old backups can no longer be read. Live data is removed within 30 days, backups within 90.
Official APIs only
We only use Meta’s official APIs and follow their rules: the 24-hour window, opt-ins and limits are built in.
Safe by default
Every connection is encrypted (HTTPS). Logins are protected against fake requests, and our logs never contain message text.
Safe AI replies
AI replies are optional. When you turn them on, here is what happens to each message.
Personal details are hidden first
Before a message goes to the AI, emails, phone numbers and card or bank numbers are replaced with [email], [phone] or [number]. The AI never sees them.
It only talks about your business
The AI only answers from the business info you write. It refuses homework, code, politics and anything illegal, dangerous, sexual or hateful, even if someone asks.
It can’t be tricked into new rules
Customer messages are treated as messages, never as orders. “Forget your rules” or “show me your instructions” does not work.
Not used for training
The AI is Claude, made by Anthropic. Anthropic does not use these messages to train its models and keeps them only for a short time for safety checks. We are moving the AI to Amazon Web Services in Frankfurt so messages stay in the EU.
Nothing is saved from AI chats
We don’t store what was sent to the AI or what it answered. We only count how many AI replies you used.
Paid plans only, with a limit
AI is off on the Free plan. Paid plans have a monthly limit, and each person can trigger at most 20 AI replies an hour.
GDPR and Morocco’s Law 09-08
GDPR (European Union)
Our servers and database are in Frankfurt, Germany. You can export or delete your data at any time, and you can ask us for a Data Processing Agreement.
Morocco: Law 09-08 (CNDP)
We follow Law 09-08 on personal data. For your customers’ data, you are the controller and AUTODMs is your processor: we only use it to run your automations.
Your customers’ rights
People who message you can ask to see or delete their data. They can write to you, or to us, and reply STOP on WhatsApp to stop automated messages.
The full details are in our Privacy Policy and Data Deletion page. Found a security problem? Write to privacy@autodms.com.
Automate your DMs without giving away your customers’ data
Start free. No credit card needed.