1.About the Service
ManyChat.uz is a software platform that helps businesses and creators manage their presence on Meta platforms. With your explicit permission, the Service can:
- Generate message drafts, captions, and replies using artificial intelligence (AI);
- Automatically reply to direct messages (DMs) sent to your connected Facebook Page or Instagram professional account;
- Automatically reply to comments on your posts;
- Create and publish posts to your connected accounts, only when you have authorized this feature.
The Service is operated by "MANYCHAT" YTT (sole proprietor), Tashkent, Republic of Uzbekistan. By creating an account or connecting a Meta account to the Service, you agree to this Privacy Policy.
2.Information We Collect
2.1. Account information you provide
- Name and email address (when you register or sign in with Google or Facebook Login);
- Business or brand name, profile details, and preferences you enter in the Service;
- Billing information, if you purchase a paid plan (processed by our payment providers — we do not store full card numbers).
2.2. Data received from Meta platforms (with your permission)
When you connect a Facebook Page or Instagram professional account through Meta's official authorization flow, we receive only the data covered by the permissions you approve. Depending on the features you enable, this may include:
- Basic profile information of your connected Page or Instagram account (account ID, username, name, profile picture);
- Direct messages sent to your connected account, so the Service can display them and send automated replies on your behalf;
- Comments on your posts and the content of those posts, so the Service can display them and post automated replies;
- Content publishing access, so the Service can publish posts you have created or approved;
- Page and account metadata needed to operate webhooks and automation (e.g., page access tokens, which are stored encrypted).
We never receive your Facebook or Instagram password. Authorization is handled entirely by Meta, and you can revoke our access at any time from your Facebook or Instagram settings.
2.3. Content you create in the Service
- Prompts, topics, and instructions you give to the AI;
- Drafts, templates, automation rules, and reply scenarios you configure;
- Media files you upload for publishing.
2.4. Technical and usage data
- IP address, browser type, device type, and operating system;
- Log data: pages viewed, actions taken, timestamps, and error reports;
- Cookies and similar technologies used for authentication, security, and product analytics.
3.How We Use Information
We use the information described above strictly for the following purposes:
| Purpose | Examples |
|---|---|
| Provide the Service | Connecting your Meta accounts, displaying messages and comments, sending automated replies, publishing approved posts. |
| AI content generation | Sending your prompts and relevant conversation context to our AI providers to generate message drafts, captions, and replies. |
| Account & billing | Creating your account, authenticating you, processing subscription payments, sending service notifications. |
| Security & abuse prevention | Detecting unauthorized access, preventing spam and misuse, enforcing our Terms of Service and Meta's Platform Terms. |
| Service improvement | Analyzing aggregated, de-identified usage statistics to improve features and reliability. |
| Legal compliance | Responding to lawful requests from authorities and meeting our legal obligations. |
4.AI Processing
The Service uses third-party large language model (LLM) providers (such as Anthropic and/or OpenAI) to generate text. When you use AI features:
- Your prompt and the minimum necessary context (for example, the incoming message that needs a reply) are transmitted to the AI provider via an encrypted API connection;
- We use API configurations under which providers do not use submitted data to train their models, in accordance with their enterprise/API data policies;
- AI-generated content is returned to you for review, or — if you have enabled automatic replies or publishing — sent or published according to the rules you configured;
- You remain responsible for content published from your accounts. We recommend reviewing automation rules regularly.
5.Use of Meta Platform Data
Our use of data received from Meta APIs (including the Facebook Graph API, Instagram API, and Messenger Platform) complies with Meta Platform Terms and Meta Developer Policies. In particular:
- We request only the permissions necessary for the features you enable, and we use the data solely to provide those features to you;
- We do not transfer, sell, or license Meta platform data to data brokers, advertising networks, or any other third party, except to service providers acting on our behalf as described in Section 7;
- Access tokens are stored encrypted and are used only to perform actions you have authorized;
- If you revoke the Service's access in your Facebook or Instagram settings, we stop receiving data from Meta immediately, and stored Meta platform data is deleted in accordance with Sections 8 and 9;
- If Meta requests that we delete platform data, we comply within the timeframes required by Meta's policies.
6.Legal Bases for Processing
We process personal data on the following legal bases:
- Consent — when you connect your Meta accounts, grant API permissions, or enable optional features such as automatic publishing;
- Performance of a contract — to provide the Service you signed up for under our Terms of Service;
- Legitimate interests — for security, fraud prevention, and service improvement, balanced against your rights;
- Legal obligation — where processing is required by applicable law, including the Law of the Republic of Uzbekistan "On Personal Data" (No. ZRU-547).
8.Data Retention
| Data type | Retention period |
|---|---|
| Account information | While your account is active, plus up to 30 days after deletion. |
| Meta platform data (messages, comments) | While the related account connection is active; deleted within 30 days after you disconnect the account or delete your ManyChat.uz account. |
| Access tokens | Deleted immediately upon disconnection or revocation. |
| AI prompts and generated drafts | While your account is active, or until you delete them manually. |
| Billing records | As required by Uzbek accounting and tax law. |
| Server logs | Up to 90 days, then deleted or anonymized. |
9.Data Deletion
You can delete your data through any of the following channels:
- Self-service: in the Service, open Settings → Account → Delete account. This permanently deletes your account, connected-account data, automation rules, and stored Meta platform data within 30 days;
- Disconnect a single account: in Settings → Connected accounts, remove a Facebook Page or Instagram account to delete the data associated with that connection;
- Via Meta: remove ManyChat.uz from your Facebook settings (Settings → Apps and Websites) or Instagram settings (Settings → Website permissions → Apps and websites). Meta sends us a data deletion request, and we delete the related data automatically;
- By email: send a request to privacy@manychat.uz from the email address linked to your account. We will confirm completion within 30 days.
https://manychat.uz/privacy-policy#deletion
10.Data Security
- All data in transit is protected with TLS encryption (HTTPS);
- Access tokens and other sensitive credentials are encrypted at rest;
- Access to production systems is restricted to authorized personnel and protected with multi-factor authentication;
- We maintain logging, monitoring, and incident response procedures. If a data breach affecting your personal data occurs, we will notify you and the relevant authorities as required by applicable law.
11.Your Rights
Depending on your jurisdiction (including under the Uzbek Law "On Personal Data" and, where applicable, the GDPR), you have the right to:
- Access the personal data we hold about you and receive a copy;
- Correct inaccurate or incomplete data;
- Delete your data ("right to be forgotten") — see Section 9;
- Restrict or object to certain processing;
- Withdraw consent at any time (for example, by revoking Meta permissions), without affecting the lawfulness of processing before withdrawal;
- Receive your data in a portable, machine-readable format;
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at privacy@manychat.uz. We respond to verified requests within 30 days.
12.Children's Privacy
The Service is intended for businesses and individuals aged 18 or older. We do not knowingly collect personal data from children under 13 (or the higher minimum age required in your jurisdiction). If we learn that we have collected such data, we will delete it promptly. If you believe a child has provided us personal data, contact us at privacy@manychat.uz.
13.International Data Transfers
Our infrastructure and service providers (including Meta and AI providers) may process data in countries outside the Republic of Uzbekistan, including the United States and the European Union. When we transfer data internationally, we ensure appropriate safeguards are in place, such as contractual data protection commitments with our providers, and we comply with the cross-border transfer requirements of the Uzbek Law "On Personal Data".
14.Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through an in-app notice before the changes take effect, and we will update the "Last updated" date at the top of this page. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
15.Contact Us
If you have questions about this Privacy Policy or our data practices:
- Email: privacy@manychat.uz
- Operator: "MANYCHAT" YTT (sole proprietor)
- Address: Building 47, Yashnobod district, Tashkent city, Republic of Uzbekistan
- Website: https://manychat.uz