Opt Relayby Opt Asia
Back to Home
Meta Compliance Verified
Privacy & Data Security

Privacy Policy

Last Updated: September 19, 2026 • Effective immediately for all Opt Relay users and connected Facebook Pages.

1. Overview & Scope

Opt Relay (“we”, “our”, or “us”), a software product of Opt Asia, operates a multi-tenant Facebook Page automation platform that enables verified Facebook Page owners to automate public comment replies and private Messenger direct messages (DMs). This Privacy Policy explains how we collect, use, store, and protect information when you use our website, APIs, and services.

2. Information We Collect

To provide automated comment replies and Messenger messaging services, we collect and process only the minimum necessary data authorized by you via Meta Graph API:

  • Account Information: Name, email address, password hash (salted via PBKDF2), and organization/tenant workspace name.
  • Connected Facebook Page Data: Page ID, Page Name, Category, and Page Access Tokens authorized by your administrator account.
  • Public Comment & Interaction Data: Post IDs, Comment IDs, comment text, and timestamps received via official Meta Webhooks to evaluate keyword triggers.
  • Delivery & Analytics Logs: Status of automated replies (Pending, Sent, Skipped, Failed), attempt counts, and anonymized error codes.

3. Enterprise Cryptographic Security (AES-256-GCM)

We prioritize the security of your Facebook credentials with bank-grade cryptography:

🛡️ Zero Plaintext Storage Policy:

All Facebook Page Access Tokens are encrypted at rest using AES-256-GCM authenticated encryption with unique 12-byte random initialization vectors (IV) and 16-byte authentication tags. Tokens are decrypted in-memory exclusively for the momentary execution of Graph API requests and are never sent to browser clients or third parties.

4. How We Use Your Data

We use collected data solely to:

  • Match incoming Facebook comments against your configured automation rules.
  • Dispatch requested Messenger private replies and public comment responses via Meta Graph API.
  • Enforce subscription plan quotas and track monthly interaction volume.
  • Provide audit logs and interaction history in your tenant dashboard.