Privacy Policy

Last updated: 28 May 2026

This policy explains how Auto-Magically (“we”, “us”), operator of the Autobots service at auto-bots.app, collects and uses your personal data. Questions: info@auto-magically.com.

1. What we collect

Account & brand details — your name, business name, business description, target audience, tone, website and contact email, plus the brand profile (topics, styles, language) used to generate your posts.
Connected channels — identifiers for the social accounts you ask us to post to (managed through our publishing provider). We do not store your social passwords.
Payment data — handled by Stripe. We receive your subscription status and a customer reference; we never see or store your full card details.
Usage data — privacy-friendly, aggregate analytics about visits and key actions, with no advertising cookies (see §6).

2. How we use it & our legal basis

To provide the service — generate captions and images and publish posts on your behalf (performance of our contract with you).
To bill you and manage your subscription (contract).
To send service emails — sign-in codes, onboarding, and weekly summaries (contract / legitimate interest).
To improve and secure the product via aggregate analytics (legitimate interest).

3. Who we share it with (subprocessors)

We use trusted providers to run the service. Each receives only what it needs:

Stripe — payments & subscriptions
OpenAI — generating captions and images from your brand profile
Blotato — publishing posts to your connected channels
Resend — transactional email
Vercel — hosting and privacy-friendly analytics
Neon — database
Supabase — image storage

We do not sell your personal data.

4. AI processing

To create your posts we send your brand profile and prompts to OpenAI's API. Content sent through the API is not used to train their models. Generated content is produced automatically and may be reviewed or paused by you at any time from your dashboard.

5. International transfers

Some providers are based in the United States. Where personal data is transferred outside the UK/EEA, it is protected by appropriate safeguards (such as Standard Contractual Clauses or the EU-US Data Privacy Framework).

6. Cookies

We use a single strictly-necessary cookie to keep you signed in to your dashboard. Our analytics are cookieless and we use no advertising or tracking cookies — so there is no cookie-consent banner to wade through.

7. Retention

We keep your data for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting and dispute-resolution needs. You can ask us to delete your data at any time.

8. Your rights

You can access, correct, export, restrict, object to, or delete your personal data, and withdraw consent where processing relies on it. Email info@auto-magically.com. You may also complain to your data protection authority — the ICO (UK) or the Data Protection Commission (Ireland).

9. Security

We protect your data with encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure, but we take reasonable steps to safeguard your information.

10. Children

Autobots is for businesses and is not intended for anyone under 18.

11. Changes

We may update this policy; we'll change the date above and, for material changes, let you know by email or in the dashboard.