Privacy Policy
Last updated: 14 November 2026
This policy explains how AH Marketing Agency ("we", "us") handles information, including data we receive from Meta Platforms (Facebook, Instagram, Threads and WhatsApp) through our AH Marketing Social Media Automation app (Meta app name: "ahmarketing").
1. Who we are
AH Marketing Agency
Kha-81/4, Talertek, Khilkhet, Dhaka 1229, Bangladesh
Email: itisahmarketing@gmail.com · Phone/WhatsApp: +880 1644-396203
AH Marketing Agency is the entity responsible (data controller) for the data described in this policy.
2. What the app does
The app is an internal tool used by our own team to plan, review and publish posts to Facebook Pages, Instagram business accounts and other social media accounts that we own or manage, to reply to comments on those Pages, and to notify our team about approvals and results. It is not offered to the general public, and we do not ask the public to log in to it with Facebook.
3. Data we receive from Meta
| Data | Why we use it |
|---|---|
| Page IDs, Page names, Page access tokens of Pages we manage | To publish the posts our team approved to those Pages |
| Instagram business account ID and username linked to our Pages | To publish approved posts to those Instagram accounts |
| Page profile picture and cover image | To show the right logo and brand colours inside the app |
| IDs of posts we publish | To link to the post, show it in our calendar and on our website's news page |
| Comments on posts of our own Pages (text, comment ID, commenter name) | To send the automatic reply our team configured, and to find quiz answers on our own posts |
| WhatsApp Business: phone number and time of the last message a person sent to our business number | To know whether the free 24-hour reply window is open before sending a notification to our own team members |
We do not request or use friends lists, private messages of users, or any data for advertising profiling.
4. How we use and do not use the data
- We use the data only for the purposes listed above, for Pages and accounts we manage.
- We never sell Platform Data and never share it with data brokers or advertisers.
- We do not use Platform Data to build user profiles, to target ads, or to make decisions about individuals.
5. Where the data is stored and who processes it
The app runs on Google LLC services (Google Apps Script, Google Sheets and Google Drive), which act as our data processor (cloud hosting). Access tokens are stored in the app's private script settings, are never shown in the browser, and are accessible only to our administrators. The public part of our website is hosted on GitHub Pages and receives only posts we have already made public.
6. How long we keep data
- Page and account tokens: until the Page or account is disconnected from the app.
- Comment data used for automatic replies: only the IDs of comments we already answered, kept only as long as needed to avoid replying twice. Comment text is read at the time of replying and is not stored. For our own quiz posts, the names of the winners are kept with that quiz's record.
- WhatsApp last-message times: overwritten with each new message; used only to check the 24-hour window.
- Published post IDs: kept with our own content calendar for as long as the post exists.
7. Requests from public authorities
If a public authority requests personal data, we review the legality of the request, challenge it if it appears unlawful, disclose only the minimum necessary, and keep a record of the request and our response.
8. Data deletion instructions
You can ask us to delete any data we hold about you that came from Meta:
- Send an email to itisahmarketing@gmail.com with the subject "Data deletion request", and include your name and the Facebook/Instagram profile or phone number concerned.
- We will delete the data within 30 days and confirm by email.
Page owners can also disconnect the app at any time from Facebook: Settings & privacy → Settings → Business integrations (or Meta Business Suite → Settings → Integrations), then remove "ahmarketing". When a Page is disconnected, we delete its token and related data within 30 days.
9. Children
Our services are not directed to children under 13, and we do not knowingly collect their data.
10. Your rights and changes
You may ask us for access to, correction of, or deletion of your data using the contact details above. We may update this policy; the date at the top shows the latest version.