Privacy Policy

1. Who is the data controller

The service is operated by Pamosnik. For privacy questions or requests you can contact us at privacy@pamosnik.com.

2. Data we collect

• Account data: your name, email address, and a hashed password used to create and secure your Pamosnik account.
• Instagram data (via the Meta / Instagram API):when you connect an Instagram Business account, we receive the connected account’s ID and username, the content of incoming direct messages and comments sent to your account, and the sender’s Instagram-scoped ID. We use this strictly to run the automations you configure.
• WhatsApp data (via the WhatsApp Business Platform): when you connect a WhatsApp Business number, we receive that number’s identifiers, the content of incoming messages sent to it, and the sender’s phone number and display name. We use this strictly to run the automations you configure.
• Automation configuration: the flows, triggers, messages, tags, and custom fields you create.
• Technical data: log data such as timestamps and event identifiers needed to deliver messages reliably and to debug.

3. How we use data

• To send and receive messages on behalf of your connected Instagram or WhatsApp Business account, only as instructed by your automations.
• To reply to comments on your posts when they match your configured triggers.
• To display analytics (delivery, clicks, completions) inside your dashboard.
• To generate replies with our optional AI assistant (Eva) when you enable it — see “AI-assisted replies” below.
• To operate, secure, and improve the service.

We do not sell personal data, and we do not use message content for advertising or to train third-party models.

4. AI-assisted replies

If you enable our AI assistant (the Eva plans), the content of the conversation and the business information you configure (catalog, prices, working hours) are sent to third-party AI model providers so a reply can be generated. Those providers process the data only to return that reply; we do not authorize them to use it to train their models. Audio messages may be transcribed by a speech-to-text provider for the same purpose. If you do not enable the AI assistant, no message content is sent to an AI provider.

5. Legal basis

We process data to perform our contract with you (providing the service), based on your consent (when you connect an Instagram or WhatsApp Business account, or enable the AI assistant), and based on our legitimate interest in operating and securing the platform.

6. Data sharing

We share data only with infrastructure providers that help us run the service (hosting, email delivery, and — where you enable the AI assistant — AI model providers) under appropriate confidentiality and data-processing terms, and with Meta Platforms as required to send and receive messages through the Instagram and WhatsApp Business APIs. We may disclose data if required by law.

7. Data retention

We keep account and automation data for as long as your account is active. Message and event logs are retained only as long as needed to operate your automations and analytics, and are then deleted or anonymized. When you delete your account or disconnect a connected Instagram or WhatsApp Business account, the associated data is deleted as described in our Data Deletion Policy.

8. Data security

Passwords are stored using PBKDF2 hashing. Access tokens are stored securely and are never returned in plain text through our API. Connections are served over HTTPS, and access to tenant data is isolated per account.

9. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these rights, contact privacy@pamosnik.com or follow the steps in our Data Deletion Policy.

10. Children

The service is not directed to individuals under the age of 18 and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and revise the effective date above.

12. Contact

Questions about this policy? Email privacy@pamosnik.com.