Privacy

The short version

Your business data stays in your own workspace. We do not sell it, we do not use it to train anything, and we do not look at it except when you ask us for help — and every one of those occasions is recorded.

What we hold about you

To run your account, we store:

• Your name and email address
• An encrypted form of your password, never the password itself
• Which company you belong to, and when you joined
• Failed sign-in attempts, so an account can be locked after too many

We do not use analytics or advertising trackers, and there is nothing on the site that follows you elsewhere.

What lives in your workspace

Everything you do with Autosham happens inside a workspace that belongs to you: your conversations, the reports and files it produces, anything you upload, and the credentials you add for the systems you connect.

Each company runs in its own container, and each person within it has their own private area inside that. Those boundaries are enforced by the operating system, not by a setting.

Credentials you add for a connected system are stored in your workspace so the assistant can use them. They are not copied anywhere else, and nobody else's workspace can read them.

The systems you connect

When you connect something — your ERP, your helpdesk, your ad accounts — the assistant reads from it directly using the credentials you supplied, at the moment you ask a question. We do not copy your business data into a database of our own.

Give it the least access that will answer your questions. If a service offers read-only credentials, use those.

Google services (Analytics, Search Console and Google Ads)

If you choose to connect a Google service, Autosham requests access to that Google account for the sole purpose of reading the data needed to answer your questions and produce reports:

• Google Analytics (analytics.readonly) — so the assistant can answer questions and produce reports about your website traffic, sources and top pages.
• Search Console (webmasters.readonly) — so the assistant can report on your search performance, indexing status and the queries people use to find you.
• Google Ads (adwords) — so the assistant can retrieve your advertising performance, such as spend, clicks, impressions, conversions and return on ad spend, and present it as reports in your workspace. Autosham uses this connection only to read your own campaign data; it does not create, edit, pause or delete anything in your Google Ads account.

We use this access only to read the data needed to answer what you ask, at the moment you ask it. We do not modify anything in your Google account, we do not sell or share this data, and we do not use it to train any model. We do not use it for our own advertising. You can disconnect at any time from Connections, or revoke access in your Google account, and our access stops immediately.

Autosham's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Meta services (Facebook & Instagram Ads)

If you choose to connect a Meta ad account, Autosham uses the Meta Marketing API to work with your own advertising data. You sign in with Facebook and grant access; the access token we receive is stored encrypted and is never written into the workspace where the assistant runs.

• ads_read — so the assistant can retrieve your own ad performance from Facebook and Instagram, such as spend, reach, impressions, clicks, conversions and return on ad spend, and present it as reports in your workspace.
• ads_management — permits creating, editing, pausing and budgeting campaigns in your own ad account. This is off by default: every connection is read-only until a company administrator explicitly switches it on. While read-only, no change is ever made to your Meta account. When it is enabled, the assistant only acts on your explicit instruction, new campaigns are created paused so nothing begins spending on its own, and it shows you what it is about to change before it does it.

We use this access only to read your own advertising data, and — when you have enabled it — to make the changes you ask for, in your own ad account. We do not access anyone else's ad accounts, we do not sell or share this data, we do not use it to train any model, and we do not use it for our own advertising. You can disconnect at any time from Connections, or remove Autosham from your Meta account's Business Integrations, and our access stops immediately.

Autosham's use of information received from the Meta Platform adheres to the Meta Platform Terms and Developer Policies.

How we protect your data

We treat the credentials and data you connect — including sensitive data such as Google OAuth tokens and the tokens or keys for any other service — with specific safeguards:

• Encryption in transit. All traffic to and from Autosham, and every request we make to Google's APIs, is sent over HTTPS (TLS).
• Encryption at rest. Access tokens, refresh tokens and connection secrets are encrypted before they are stored, using authenticated AES-256-GCM with envelope encryption. The keys that protect them are held separately from the database, so the stored data is not usable on its own.
• Secrets stay out of your workspace. Your credentials are never written into the workspace where the assistant runs. When the assistant needs data, a separate, isolated broker fetches a short-lived, read-only token, uses it for that one request, and returns only the result — so the assistant never holds your long-lived secret.
• Isolation between customers. Each company runs in its own isolated environment and each person has their own private space; one customer's data and connections are never reachable from another's.
• Least privilege. We request the narrowest, read-only scopes needed for the features you use, and we access your data only at the moment you ask a question — not on an ongoing basis.
• Revocation. You can disconnect a service at any time, which removes the stored credential; you can also revoke access from your Google account, and our access stops immediately.

If you believe your account or data has been compromised, contact us at [email protected].

Who else is involved

The assistant is powered by a third-party AI provider. What you type, and what it reads from your systems in order to answer, is sent to that provider to produce a reply, and their terms govern that processing. It is used only to generate your answer — it is not used to train any model.

Beyond that: our servers are hosted with a cloud provider, our application runs on a hosting platform, and email is sent through a delivery service. Each of those handles data only to provide that service.

Support access

If you report a problem we cannot diagnose from outside, someone from our team can open your workspace to see what you are seeing. Every occasion is recorded with who did it, whose workspace, and when.

We would rather be asked first, and generally will ask. Tell us if you would prefer that we never do it without permission.

How long we keep things

Your workspace exists while your company does. If your company stops using Autosham, we suspend the workspace rather than deleting it — the data stays, and nothing is destroyed on a timer.

Deletion happens only after we have told you and given you a chance to export what you need. When it happens it is permanent: the workspace and everything in it are removed and cannot be recovered.

Deleting your data (including connected Meta and Google data)

You are in control of the data we hold from any service you connect, and you can have it removed at any time:

• Disconnect a service — go to Connections in your dashboard and disconnect the service (for example Meta Ads or a Google service). This immediately deletes the stored access token and connection secret for it. No ad or analytics data is retained by us after you disconnect, because we do not copy your business data into a database of our own — we read it live at the moment you ask.
• Revoke at the source — you can also remove Autosham from the provider directly. For Meta, open your Facebook Settings & Privacy → Settings → Business Integrations and remove Autosham. For Google, use your Google account's Security → Third-party access. Our access stops immediately.
• Delete everything — to have all data associated with your account and workspace removed, email [email protected] from the address on your account, or write to our data-deletion contact below. We confirm the request, remove the data, and tell you when it is done. Deletion is permanent and cannot be reversed.

Data deletion requests: [email protected]. We respond to every request and complete deletion promptly.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete your account. Anything in your workspace you can already download yourself.

Deleting your account removes you from your company. Whether the company's workspace goes with it depends on whether anyone else is using it.

Changes

If we change how any of this works, we will update this page and tell anyone affected. We will not quietly start doing something this page says we do not.