1. Who we are
AutoGP (the "Service") is operated by Shirman LLC ("we," "us"), the data controller for the personal data described below. Contact: support@autogp.ai.
2. What we collect
2.1 Account data. When you sign up: your email address, a hashed password (we never store your password in plain text), and account status (free/Pro, post count remaining).
2.2 Billing data. If you subscribe to Pro, payment is handled entirely by our payment processor, Stripe — we never see or store your card number. We keep a record of your subscription status, plan, and billing history as provided back to us by Stripe.
2.3 Facebook data — what we do NOT collect. AutoGP runs inside your own browser using your own already-logged-in Facebook session. We never ask for, see, or store your Facebook password. The extension reads and interacts with the Facebook pages you have open, on your device, to identify your groups and submit the posts you write — this happens locally in your browser. We do not scrape, store, or transmit your Facebook friends list, private messages, or content from groups you haven't chosen to post to.
2.4 Product usage data. To enforce the free-tier post allowance and Pro billing, we store a count of posts made per account, and basic device-pairing information linking your browser extension to your account (so the extension knows which account's allowance to check). We may also log basic diagnostic/error information to keep the Service working.
2.5 Cookies. The dashboard uses essential cookies for authentication/session management. We don't use third-party advertising or tracking cookies. If we add analytics in the future, we'll disclose it here and request consent where required (see Section 6).
3. Why we collect it, and our legal basis (GDPR)
For users in the EEA, UK, or Switzerland, we rely on the following legal bases under the GDPR for each purpose:
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating and running your account | Email, hashed password | Performance of a contract (Art. 6(1)(b)) |
| Processing subscription payments | Billing status (via Stripe) | Performance of a contract (Art. 6(1)(b)) |
| Enforcing the free/Pro post allowance | Post count, device pairing | Performance of a contract (Art. 6(1)(b)) |
| Keeping the Service secure and working | Diagnostic/error logs | Legitimate interests (Art. 6(1)(f)) — keeping the Service reliable and secure |
| Sending you service emails (billing, renewal reminders, security) | Email address | Performance of a contract / legitimate interests |
| Sending optional marketing emails, if you opt in | Email address | Consent (Art. 6(1)(a)) — withdrawable anytime |
4. Who we share data with
We share data only with the service providers ("processors") needed to run AutoGP, under data processing agreements:
- Stripe, Inc. — payment processing and billing.
- Vercel Inc. — application hosting and infrastructure.
- Turso (Chiselstrike, Inc.) — database hosting (libSQL/SQLite-compatible), account data storage.
We do not sell your data, and we do not share it with advertisers or data brokers. We only disclose data beyond the above if required by law (e.g., a valid legal request) or to protect our rights, users, or the public from harm.
5. International data transfers
AutoGP serves customers internationally. If your data is processed in a country outside the EEA/UK (for example, if a processor above is US-based), we rely on Standard Contractual Clauses or another lawful transfer mechanism recognized under GDPR Chapter V to protect it. Contact us at support@autogp.ai for details on the specific safeguards in place for a given processor.
6. Cookie consent
Where required by law (EU/UK/EEA visitors), we will show a cookie banner before setting any non-essential cookie and let you accept or decline. Essential cookies (needed to keep you logged in and the Service functioning) don't require consent under the ePrivacy Directive and are used regardless.
7. Data retention
We keep your account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we're required to keep billing records for tax/accounting purposes (typically several years under applicable law) or need to retain limited data to prevent free-tier abuse (e.g., recognizing a previously-used free allowance tied to a deleted account).
8. Your rights
If GDPR applies to you, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion ("right to be forgotten"); restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time where processing is based on consent. To exercise any of these, email support@autogp.ai. You also have the right to lodge a complaint with your local data protection authority.
If you're a California resident, you have similar rights under the CCPA (know what's collected, delete it, opt out of sale — noting again that we don't sell personal data) to the extent CCPA applies to us.
9. EU representative
(To confirm before publishing: as a non-EU business serving EU customers on an ongoing subscription basis, AutoGP likely needs to designate an EU representative under GDPR Article 27, since the "occasional processing only" exemption likely doesn't apply to a regular SaaS subscription with an ongoing EU customer base. This is an open action item, not yet appointed — see the Status Log / launch checklist.)
10. Children
AutoGP is not directed at, and we don't knowingly collect data from, anyone under 18. If we learn we've collected data from a minor, we'll delete it.
11. Security
We use industry-standard measures to protect your data — hashed passwords, secure session handling, and standard protections against common web attacks (CSRF, XSS). No system is 100% secure, and we can't guarantee absolute security.
12. Chrome Web Store "Limited Use" compliance statement
AutoGP's Chrome extension accesses Facebook page content solely to identify your groups and submit the posts you author, strictly to provide and improve the single, disclosed purpose of the extension — automating Facebook group posting for your own account. Consistent with Google's Chrome Web Store User Data Policy (Limited Use requirements):
- We do not use data accessed via the extension for any purpose other than operating and improving that single disclosed feature.
- We do not sell user data collected through the extension.
- We do not use or transfer such data for personalized advertising.
- We do not allow humans to read this data except with your affirmative consent (e.g., for support), for security purposes (e.g., investigating abuse), or to comply with applicable law.
- If our data practices materially change, we will notify you and, where required, seek renewed consent before the change takes effect.
13. Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email or an in-product notice before they take effect.
14. Contact
Questions about this policy or your data: support@autogp.ai.