Privacy Policy

Last updated: 22 October 2026 (rev. 2)

Postlight ("we") provides automated replies to direct messages sent to businesses on Instagram and Facebook Messenger. This policy explains what we process and why.

Data we process

• Business accounts: the Facebook Page and Instagram professional account a business connects, and the access token Meta issues for them (stored encrypted).
• Messages: the text of messages customers send to a connected business, and the replies sent by the assistant or the business's staff.
• Customer identifiers: the Instagram-scoped or Page-scoped ID Meta provides, and the public name of the customer's profile.
• Lead details customers choose to share: for example a phone number, event date or guest count.

How we use it

Only to reply to the customer on behalf of the business, to show the conversation to that business, and to pass event inquiries to the business's own CRM. We do not sell data, use it for advertising, or combine it across businesses.

AI processing

Message text is sent to a language-model provider to draft replies. Phone numbers are removed before text is sent. The provider does not use this data for training and keeps it for at most 30 days.

Retention and deletion

Conversations are kept for up to 12 months, then deleted. A business can disconnect at any time, which deletes its tokens and conversations. Customers can request deletion as described on our data deletion page.

Contact

info@mihrabatkorusu.com