Privacy Policy

Autrix AI provides CRM, automation, AI agent, and messaging tools for businesses. When a business connects Meta products such as Facebook Pages, Instagram accounts, WhatsApp Business Accounts, or Meta webhooks, we process data only to provide the services requested by that business.

For most business customer data, the business using Autrix AI is the controller or owner of the data, and Autrix AI acts as a service provider or processor.

Account and organization data: name, email, password hash, team roles, organization profile, billing information, subscription status, and settings.

CRM and business data: contacts, messages, notes, catalog items, reservations, orders, files, automations, prompts, templates, and activity history created or imported by users.

Meta integration data: connected Page, Instagram, WhatsApp Business Account, phone number, business identifiers, webhook event identifiers, message IDs, sender IDs, profile names, message content, media metadata, template status, and encrypted access tokens needed to operate the integration.

Google Workspace and Gmail integration data: connected Google account email address, account identifiers, Gmail message IDs, thread IDs, headers, sender and recipient addresses, subject lines, message body content, attachment metadata and attachment files where the user chooses to view, sync, send, reply, or attach them in Autrix AI, and encrypted OAuth access and refresh tokens needed to operate the integration.

Google Calendar integration data: the connected account email, the dedicated Citas Autrix calendar identifier, event identifiers, titles, descriptions, start and end times, all-day and availability settings, synchronization versions, and encrypted OAuth tokens. Calendar events are copied to CRM activities and booking availability when the organization connects this feature.

Technical data: IP address, browser information, device information, logs, security events, and usage analytics needed to protect and operate the platform.

We use data to provide the product: CRM records, conversations, AI replies, automations, WhatsApp template sending, Instagram and WhatsApp channel operations, notifications, billing, support, security, and audit logs.

We do not sell Meta Platform Data. We do not use Meta Platform Data for surveillance, profiling unrelated to the business service, or advertising outside the business workflow requested by our customer.

If you connect Google Workspace or Gmail, we use Google user data only to provide and improve user-facing email features requested in Autrix AI, including connecting the mailbox, sending email from the connected account, displaying and syncing inbound email conversations in the CRM inbox, threading replies, downloading attachments when requested, diagnostics, security, and support.

If you connect Google Calendar, we use calendar data to create and synchronize the dedicated Citas Autrix calendar with CRM appointments and meetings, reflect changes and cancellations in both directions, detect editing conflicts, and avoid booking over busy events. This connection requests access to calendars created by the app and the account email address.

We do not sell Google user data, do not use Google user data for advertising, retargeting, personalized ads, credit-worthiness, lending, or any unrelated profiling, and do not transfer Google user data except as needed to provide or improve the visible email and calendar features, comply with law, protect security, or complete a business transfer with appropriate consent and safeguards.

AI features may process conversation context, CRM records, organization settings, catalog data, and prompts to generate replies or structured actions. Customers control whether to activate agents and channels.

Autrix AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We request Google OAuth permissions only for features visible in the product. For Gmail, this currently includes sending email on the user's behalf and reading Gmail messages needed to show and manage the user's email conversations inside Autrix AI.

Autrix AI personnel do not access Google user data except when necessary to provide support requested by the customer, investigate security or abuse issues, comply with applicable law, or handle aggregated internal operations under appropriate privacy safeguards.

We share data only with service providers needed to operate Autrix AI, such as hosting, database, email, payments, analytics, Meta APIs, and AI model providers.

For Google user data, subprocessors may process data only as needed to provide or improve the requested email and calendar features, security, support, storage, infrastructure, or legal compliance. We require service providers to protect data and use it only for the services we request.

We may disclose information if required by law, to protect rights and security, or to complete a business transfer under appropriate safeguards.

We use access controls, encryption in transit, encrypted sensitive credentials and OAuth tokens, audit logs, backups, and operational monitoring. No internet service is perfectly secure, but we design Autrix AI to protect business and customer data.

Access to production systems and sensitive integration data is limited to authorized personnel and protected by operational security controls.

We retain account, CRM, conversation, billing, and integration data while an organization uses Autrix AI and as needed for legal, security, fraud prevention, tax, accounting, and dispute-resolution obligations.

Gmail message data synced into Autrix AI is retained while the connected organization uses the email inbox feature or until the organization deletes the data, disconnects the mailbox and requests deletion, or closes the account, subject to legal and security retention exceptions.

Disconnecting Calendar removes its stored OAuth tokens and stops synchronization. Existing CRM activities, event identifiers used for reconnection, and the Google calendar remain until deleted through the corresponding product or a data deletion request. You may request deletion of stored Google Calendar data at privacy@autrixagents.com.

Plan limits may define product retention windows. When data is deleted, backup copies may remain for a limited period until backups rotate, unless we must retain data for legal reasons.

You may request access, correction, export, or deletion of data by contacting us at privacy@autrixagents.com. Businesses can also remove users, delete CRM records, disconnect channels, and revoke Meta or Google app access.

For Meta data deletion instructions, use our Data Deletion page at /data-deletion. You can also remove connected Meta access from Facebook Apps and Websites settings.

For Google or Gmail data, you can disconnect the mailbox in Autrix AI, revoke Autrix AI access from your Google Account permissions page, and request deletion by emailing privacy@autrixagents.com.

The organization owner can disconnect Calendar from the Autrix Calendar page. Revoking Autrix access in Google Account settings affects other Google integrations authorized under the same Google project as well.

Autrix AI is a business software platform and is not directed to children. We do not knowingly collect personal data from children.

We may update this policy as the product, law, or platform requirements change. We will update the date above and, when appropriate, notify customers through the product or email.