Privacy Policy

This Privacy Policy explains how UC Tech Private Limited ("we", "us"), the company behind Automate AI, collects, uses, shares, keeps and deletes information when businesses and their team members use Automate AI (the "Service") at user.theautomate.ai, our mobile app and related websites.

Automate AI is a software platform for businesses. It helps a business talk to its customers on WhatsApp, run campaigns and automations, use AI assistants, run Click-to-WhatsApp ads and receive leads from Facebook lead ads. Questions: admin@uctech.co.in.

1. Our role

• Account data (the business and its team members): we decide how this is used, so we are responsible for it.
• Customer data (the contacts, chats, leads and files a business manages in Automate AI): the business decides how this is used. We process it only to provide the Service to that business and on its instructions. Each business keeps its own data separate; one business cannot see another's.

2. Information we collect

Information you give us

• Name, email address, phone number, business name, address and GST details.
• Login details (passwords are stored only in hashed form) and team member details.
• Content you create: message templates, campaigns, automations, AI assistant instructions, files and notes.
• Contacts and messages that you upload, send or receive through the Service.

Information collected automatically

• Device, browser, IP address, log and usage data, used to keep the Service secure and working.
• Cookies and local storage needed to keep you logged in and remember your settings.

Payments

Payments are handled by our payment processors (for example Razorpay and Cashfree). We do not store full card numbers. We keep payment records (amount, date, status, invoice) for accounting.

3. Data from Meta (WhatsApp, Facebook and Instagram)

Automate AI uses Meta's official platforms. We only receive Meta data after a business connects its own account and approves the permissions shown by Meta, and we use it only to provide the feature that business turned on.

WhatsApp Business Platform

When a business connects its WhatsApp Business Account, we receive and store the messages, delivery and read statuses, phone numbers and profile names of the people who chat with that business, and the business's templates and phone number details. This is needed to show the chats, send the business's replies and campaigns, and run its automations. Some accounts are connected through an official WhatsApp Business Solution Provider.

Facebook Login ("Continue with Facebook")

When a team member chooses "Continue with Facebook", Meta shares their Facebook name and ID and an access token for the permissions they approved. We use the token only from our servers, never show it in the browser, and never share it with other businesses.

Meta Ads (Click-to-WhatsApp ads)

With the permissions ads_management, ads_read, business_management, pages_show_list, pages_read_engagement and pages_manage_ads, we list the ad accounts and Pages the person manages (with the business that owns each) so they can pick one, check that the ad account can run ads, create the campaign, ad set, creative and ad in the business's own ad account when the business saves or publishes an ad (ads are always created paused and go live only when the business publishes them), switch ads on, pause or remove them when asked, and show the ad results (spend, impressions, clicks and conversations started). Ads are paid from the business's own ad account.

Facebook lead ads

With the permissions leads_retrieval, pages_manage_metadata, pages_manage_ads, pages_show_list, pages_read_engagement, business_management, ads_management and ads_read, we list the Pages the person manages, subscribe only the Pages the business selects to lead notifications, and read each new lead (the answers in the lead form, the form, ad and campaign names, and the time). The lead becomes a contact in that business's Automate AI account and, if the business chose to, receives a WhatsApp message from the business. We store Page access tokens only for the Pages the business selected.

Conversions API

If a business turns on the Conversions API feature, we send the events it chooses (for example a lead or a purchase) to that business's own Meta dataset. Email addresses and phone numbers are hashed before they are sent.

What we never do with Meta data

• We do not sell it or rent it to anyone.
• We do not use it to advertise our own products or to build profiles of people.
• We do not share it with other businesses using Automate AI.
• We do not use it for anything other than the features the business turned on.

4. How we use information

• To provide, maintain and support the Service, including sending and receiving messages for businesses.
• To bill for plans and wallet top-ups and to prevent fraud and abuse.
• To send service messages (for example security alerts, invoices and important changes).
• To keep the Service secure, fix problems and understand which features are used.
• To meet legal obligations.

5. AI features

AI features (such as the AI assistant, AI replies and template writing) send the text and files needed for that task to our AI model providers (for example OpenAI and Google) to produce a result. They are used only to provide the feature, under those providers' business terms.

6. Who we share information with

• Meta and WhatsApp Business Solution Providers, to deliver WhatsApp messages and the Meta features above.
• Service providers that run the Service for us: cloud hosting, email and push notification delivery, payment processing and AI model providers.
• Authorities, when the law requires it.
• A buyer or successor, if our business is merged or sold (this policy will continue to apply).

Our service providers may only use the information to provide their service to us.

7. How long we keep information

• Account and customer data: while the business's account is active, then deleted on request.
• Facebook access tokens: until the business disconnects, removes our app on Facebook, or the token expires.
• Google access tokens: until the business disconnects Google or removes our app from its Google account.
• Invoices and payment records: as long as tax and accounting laws require.

8. Deleting your data

You can disconnect Facebook or Google from Automate AI at any time and ask us to delete your data. Step-by-step instructions for Facebook are on our Data Deletion page, and for Google in section 12 below. You can also email admin@uctech.co.in.

9. Security

Data is sent over HTTPS. Access to our servers and databases is limited to the people and systems that need it. No system is perfectly secure, so please keep your password private and tell us at once if you think your account has been misused.

10. Your rights

Depending on where you live (including under India's Digital Personal Data Protection Act, 2023), you may ask to see, correct or delete your personal data, withdraw consent, or raise a complaint. If you are a contact of a business that uses Automate AI, please contact that business first; we will help them respond. To make a request or a complaint, email admin@uctech.co.in. We reply within 30 days.

11. Children

The Service is for businesses and is not meant for anyone under 18.

12. Google user data (Google Drive and Google Sheets)

A business can connect a Google account in Settings → Google Drive to back up its contacts to Google Drive and to keep its contacts in sync with a Google Sheet. We only receive Google data after a team member signs in with Google and approves the permissions Google shows:

• Google Drive, only files this app creates: we create the backup files and folders and can find, replace and read only those. We cannot see any other file in the Drive.
• Google Sheets: we read and write the contact rows of the one spreadsheet the business creates in Automate AI or links by pasting its address, to keep contacts in sync both ways. We do not open any other spreadsheet.
• Email address: to show which Google account is connected.

We use Google data only to provide these features to the business that connected the account. Google access tokens are kept on our servers, never shown in the browser and never shared. Contacts synced from a sheet are stored in that business's Automate AI account like any other contact.

We do not sell Google data, use it for advertising, use it to build profiles of people, or use it to develop, improve or train AI or machine-learning models. People at Automate AI do not read it unless the business asks us for help, it is needed for security, or the law requires it.

A business can disconnect Google at any time in Settings → Google Drive, which deletes the stored Google tokens and stops backups and sync, or remove Automate AI from its Google account at myaccount.google.com/permissions. Files already created in Drive stay in the business's own Drive until it deletes them.

Automate AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

13. Changes to this policy

We may update this policy. We will change the date at the top and, for important changes, tell account owners by email or in the app.

14. Contact us

UC Tech Private Limited (Automate AI)
Email: admin@uctech.co.in
Phone: +91 7900003693