Privacy Policy

Privacy Policy — Last updated: 2026-10-18

GP MAX ("we", "us"), a marketing agency, operates the website https://gpmax.vercel.app, the Facebook Page GP MAX, and the linked Instagram business account GP MAX. This policy explains what data we collect through these channels, why, and how you can delete it.

1. Data we collect

A. When you comment on our Facebook or Instagram posts (via our automation app "GP MAX Tools"):

• Your public name/profile name as shown on the comment
• The comment text
• The comment ID and post ID (platform identifiers)
• Platform user identifier (Page-scoped ID / Instagram-scoped ID) — used only to reply to you
• Timestamp of the comment
• The keyword your comment matched (for example "Dashboard"), used to send you the tool you asked for

B. When you message us on Messenger or Instagram DM:

• Your messages to us and our replies (kept to continue the conversation within Meta's 24-hour messaging window)

C. When you use one of our free tools at gpmax.vercel.app/tools/:

• Name, WhatsApp number, business type, and the answer to the tool's input question — submitted by you voluntarily

D. Technical data: standard server logs (IP, timestamps) kept for security and abuse prevention.

2. What we do NOT collect

We do not collect your friends list, your browsing history, your location, your email from Meta, or any data about people who do not interact with us. We never post or message on your behalf.

3. Why we process this data (legal bases)

• To respond to you: you commented or messaged us first; we reply once to your comment with the free tool link you requested (Meta Private Replies — one message per comment, within 7 days), and we continue conversations only within Meta's 24-hour window. We do not send promotional messages outside that window and do not bulk-message users.
• Legitimate interest / consent: the free tool form is voluntary; we use it to send you the tool result and, if you opt in, follow-ups you can stop at any time.
• Security: server logs to prevent abuse of our systems.

4. Where your data lives and who sees it

• n8n workflow (self-hosted by us at gpmax.oph.st) — processes comment events and sends replies. Its storage tables ("Data Tables") hold: leads (name, platform ID, post_id, comment_id, keyword, tool, timestamp), reply_queue (pending reply drafts), fb_comments_seen (comment IDs, to prevent duplicate replies), errors (technical failure logs).
• Neon Postgres (our database) — reply state and dedupe records (comment IDs, post IDs, template rotation index).
• Meta Platforms, Inc. — the comments, messages and identifiers themselves remain governed by Meta's own Data Policy (https://www.facebook.com/privacy/policy).
• Our team only. We do not sell, rent, or share your data with advertisers or third parties, and we do not transfer it outside the systems above.

5. Retention

Comment/message interaction records are kept for up to 24 months for service quality and follow-up, then deleted. Tool-form submissions are kept as long as you remain reachable for the follow-up you opted into. Server logs are rotated within 90 days.

6. Your rights and how to delete your data

• Delete everything: email hello@gpmax.agency from the account you used, or use our page at https://gpmax.vercel.app/data-deletion. We delete your records within 30 days and confirm by email.
• Access / correct / export: same contact — we will show you everything we hold about you.
• Opt out of follow-ups: reply "STOP" on WhatsApp/Instagram or email us; we stop immediately.
• Removing our app from your Facebook account (Facebook → Settings → Apps and Websites → GP MAX Tools → Remove) also triggers a deletion request to us.

7. Children

Our services are for business users; we do not knowingly collect data from anyone under 13 (or under 16 where local law requires).

8. Changes

We post changes on this page with a new "Last updated" date.

Contact: GP MAX — hello@gpmax.agency