1. Introduction
Apus AI ("Apus AI," "we," "us," or "our") operates the Apus AI platform at v1.songgram.uz and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service.
By creating an account or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
2. Information We Collect
Account information. When you register, we collect your name, email address, and password (stored in hashed form). If you sign in with Google, we receive your name, email address, and Google account identifier as permitted by your Google account settings.
Connected social accounts. When you connect Instagram, Telegram, TikTok, Facebook, or other supported platforms, we store account identifiers, display names, access tokens, token expiration dates, and connection status. We use official platform APIs and only request permissions needed to provide the features you enable.
Social interaction data. To power automation and AI replies, we may process direct messages, comments, mentions, sender identifiers, message text, media identifiers, and related metadata received through platform webhooks or APIs. This data is processed on your behalf to deliver the Service.
Chatbot and configuration data. We store chatbot names, automation rules, AI prompts, triggers, and settings you configure in the dashboard.
Usage and technical data. We automatically collect log data such as IP address, browser type, device information, pages visited, API requests, error logs, and timestamps. We use this to operate, secure, and improve the Service.
Billing information. If you subscribe to a paid plan, payment processing is handled by our payment provider. We do not store full credit card numbers on our servers.
3. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Service
- Authenticate users and manage accounts
- Connect and manage your linked social media accounts
- Send automated replies, messages, and comments as configured by you
- Process webhook events and deliver AI-generated responses
- Display analytics, logs, and dashboard metrics
- Send service-related communications (e.g., security alerts, account notices)
- Detect, prevent, and address fraud, abuse, and security issues
- Comply with legal obligations and enforce our Terms of Service
- Improve and develop new features
We do not sell your personal information. We do not use your private messages or social content to train public AI models without your explicit consent.
4. Legal Basis for Processing (EEA/UK Users)
If you are in the European Economic Area or United Kingdom, we process personal data based on:
- Contract — to provide the Service you requested
- Legitimate interests — to secure and improve the Service, prevent abuse, and support customers
- Consent — where required, such as for optional marketing communications or certain integrations
- Legal obligation — where we must comply with applicable law
5. Third-Party Services and Platform Partners
The Service integrates with third-party platforms and providers. When you connect an account or use certain features, your data is also subject to those providers' policies:
- Meta / Instagram / Facebook — Meta Privacy Policy
- Google (Sign in with Google) — Google Privacy Policy
- Telegram, TikTok, and other platforms — each platform's respective terms and privacy policies apply to data exchanged through their APIs
We share data with service providers who help us host infrastructure, process payments, send emails, or monitor system health. These providers are contractually required to protect your data and use it only to perform services on our behalf.
6. Data Retention
We retain account and configuration data for as long as your account is active. Social interaction logs and webhook event records are retained to provide history, debugging, and analytics features; you may request deletion of your account data as described below.
When you disconnect a social account, we remove or invalidate associated access tokens. Some records may be retained in backups or logs for a limited period for security, fraud prevention, or legal compliance.
7. Data Security
We implement industry-standard technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS), hashed passwords, access controls, and secure token storage. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
8. Your Rights and Choices
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your account and associated data
- Restrict or object to certain processing
- Export your data in a portable format
- Withdraw consent where processing is consent-based
- Lodge a complaint with a data protection authority
To exercise these rights, email privacy@socialbot.io. We will respond within the timeframe required by applicable law.
You can disconnect social accounts at any time from the Integrations page in your dashboard. You may also revoke Apus AI's access directly in each platform's app permissions settings (e.g., Instagram Settings → Apps and Websites).
9. Data Deletion
You may request deletion of your Apus AI account and associated personal data by contacting privacy@socialbot.io. Upon verified request, we will delete or anonymize your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing terms).
For Meta platform data deletion requirements, we provide a data deletion callback URL configured in our Meta app settings. Users may also remove app access through Meta/Instagram account settings.
10. International Data Transfers
Your information may be processed and stored in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms for cross-border transfers.
11. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
12. Cookies and Similar Technologies
We use essential cookies and local storage to maintain your login session and preferences. We may use analytics cookies to understand how the Service is used. You can control cookies through your browser settings; disabling essential cookies may affect functionality.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes will be communicated via email or an in-app notice where appropriate. Continued use of the Service after changes constitutes acceptance.
14. Contact Us
For privacy-related questions or requests, contact us at privacy@socialbot.io.