Our Privacy Policy

BTMK Holdings LLC ("we," "our," "us"), operating under the product name Meet Alto AI ("Alto"), provides tools that help Facebook Page, Instagram Business Account, and YouTube channel administrators manage, moderate, respond to, and automate interactions across comments and direct messages, where supported by the applicable platform. Our services include inbox management, AI-assisted reply generation, moderation features, automation features, and tools for collecting contact information from audiences through authorized interactions. We are committed to protecting your privacy and ensuring the security of your data.

Last Updated: August 9, 2026

Information We Collect

a. Data from Facebook and Instagram (via Meta APIs)

When you connect your Facebook Page or Instagram Business Account to Meet Alto AI, we access and process data as provided through the official Meta APIs, including:

• Page and Account Content: Posts, comments, replies, direct messages, story interactions, and related metadata.

• Engagement Data: Reactions, likes, shares, story replies, keyword triggers, and other activity metrics.

• Public Profile Information: Limited data such as name, profile picture, and Page-scoped user IDs (PSIDs) for users who interact with your Page or account.

• End-User Supplied Data via Automations: When your followers interact with your automations, such as by commenting on a post, reacting to a post, sending a DM, replying to a story, mentioning your account, or following your account, our platform may process their responses, including email addresses voluntarily provided by those end users within a DM conversation, solely on your behalf and under your instructions.

• Account Settings & Permissions: Information required to verify permissions, maintain secure connections, and enable moderation and automation features.

We do not collect or request passwords, private user data beyond what Meta's APIs allow, or any information not necessary for the services provided.

b. Data from YouTube (via YouTube API Services)

When you connect a YouTube channel to Meet Alto AI, Alto uses YouTube API Services to access and process information necessary to provide the YouTube features you request.

Depending on the permissions you grant and the features you use, this information may include:

• Channel Identity: Your connected YouTube channel's name, handle, profile image or avatar, channel identifier, and related public channel information.

• Video Information: Video titles, thumbnails, video identifiers, and related metadata necessary to identify and display the videos associated with comments.

• Comments: Comment text, comment identifiers, timestamps, reply information, moderation-related information made available through the YouTube API Services, and other comment metadata necessary to provide Alto's inbox and moderation features.

• Public Commenter Information: Publicly available information associated with a commenter, such as their YouTube channel name, handle, avatar, or other public identity information returned through the YouTube API Services.

• Authorization Information: OAuth access and refresh tokens and information necessary to verify your authorization and maintain the connection between your YouTube account and Alto.

Alto only requests access to YouTube information and permissions that are necessary to provide the YouTube functionality you choose to use.

c. Information You Provide Directly

• Account Registration Data: When you create an account with Meet Alto AI, we may collect your name, email address, password (hashed), and company or organization details.

• Automation Configuration: Content you create within the platform, such as automation flows, message templates, keyword triggers, and campaign settings.

• Customer Support: If you contact us, we may collect your name, email, and the content of your message to assist you.

• Billing Information: If you purchase a subscription, we collect payment details through Stripe, a secure payment processor. We do not store credit card information directly.

d. Contact Data Collected via Your Automations (Subscriber Data)

When your followers voluntarily provide their email addresses or other contact details through your automation campaigns, for example by replying to a DM prompt with their email, that information is collected and stored in your Meet Alto AI account. This data belongs to you as our customer. We store and process it solely on your behalf as a data processor acting under your instructions.

You are the data controller for all Subscriber Data you collect through the platform. You are responsible for ensuring you have appropriate consent and legal basis to collect and process such data, and for informing the individuals whose data you collect. We do not use Subscriber Data for our own purposes, and we do not sell or share it with third parties except as required to operate the platform on your behalf.

e. Automatic Information

• Website & App Usage Data: We collect anonymized analytics such as IP address, browser type, operating system, pages visited, and session activity to improve performance.

• Cookies & Tracking Technologies: Used for login sessions, security, and improving user experience. When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate activities with other personal information. You may opt out of receiving related advertising by visiting https://app.retention.com/optout. You may also opt out of GDPR-covered data collection at https://www.rb2b.com/rb2b-gdpr-opt-out.

How We Use Your Information

a. For Facebook & Instagram Data

• Automation Features: To trigger and deliver automated actions, including direct messages, comment replies, and other responses, based on rules and flows you configure. Triggers include but are not limited to post comments, keyword mentions, post reactions, story replies, account mentions, new follower events, and incoming DMs.

• Moderation: To help Page and account administrators automatically detect spam, offensive, or inappropriate comments and DMs.

• Inbox Management: To allow admins to view and respond to user messages and comments in one centralized dashboard.

• Analytics & Insights: To show engagement metrics such as response times, message volumes, automation performance, and most active conversations.

• Admin Tools: To maintain permissions, verify connections, and allow account admins to control access to Pages and Instagram Business accounts.

b. For YouTube Data

We use information obtained through YouTube API Services only to provide the YouTube-related functionality offered through Alto and described to you.

This includes:

• Unified Inbox: To retrieve and display YouTube comments, associated video information, and public commenter information alongside conversations from other supported platforms in Alto's centralized inbox.

• Reply Assistance: To generate suggested responses to YouTube comments using Alto's AI-assisted reply features.

• Moderation Assistance: To analyze comment text and classify comments for moderation purposes, such as identifying potentially unwanted, inappropriate, or otherwise actionable content.

• Comment Management: To enable authorized users to review and, where supported and expressly initiated by the user, respond to or take permitted moderation actions relating to YouTube comments.

• Connection Management: To authenticate your YouTube account, maintain your authorized connection, verify permissions, and retrieve updated information from the YouTube API Services.

We do not use YouTube API Data for targeted advertising or sell YouTube API Data.

c. For Subscriber Data (Collected via Your Automations)

• Storage & Access: To securely store email addresses, usernames, and other contact details your end users provide through your automation campaigns, and make them accessible to you within your Meet Alto AI dashboard.

• Export: To allow you to export the Subscriber Data you have collected, for use in your own systems and marketing tools.

• No Independent Use: We do not use Subscriber Data for our own marketing, analytics, profiling, or any purpose other than storing and surfacing it to you as described.

d. For Directly Collected Data

• Account Management: To register and maintain your Meet Alto AI account, authenticate users, and provide login security.

• Customer Support: To respond to inquiries and resolve issues.

• Billing & Transactions: To process payments, manage subscriptions, and send invoices.

• Communications: To send important service-related updates such as security notices or feature changes.

e. For General Service Improvements

• Service Performance: To analyze usage patterns and improve functionality. We may use anonymized, aggregated data for product improvement or analytical purposes.

• Security: To detect fraudulent activity, abuse, or technical issues.

• Compliance: To meet legal and regulatory obligations.

We do not use collected data for targeted advertising, nor do we sell or share data with third parties for marketing purposes.

How We Share Your Information

We do not sell, rent, or trade your data or your Subscriber Data. Data is only shared in limited circumstances necessary to operate the service or comply with legal obligations.

• Service Providers: We use trusted third-party vendors that help us securely operate Meet Alto AI, such as cloud hosting providers, analytics tools, payment processors, and other infrastructure providers. These parties process data on our behalf for the services they provide to us.

• OpenAI and AI Processing: When you use Alto features that classify YouTube comments or generate AI-assisted replies, the text of the relevant YouTube comment is sent to OpenAI for processing. OpenAI acts as a third-party AI service provider used by Alto to perform comment classification and generate suggested replies. This processing is performed to provide the Alto features requested by our users.

• Legal Requirements: We may disclose information where required by law, regulation, court order, or valid governmental request.

• Fraud & Security: We may disclose information where necessary to protect against fraud, abuse, security threats, or attacks on the Service.

• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to a successor entity. You will be notified via email or a prominent notice on the Service before your data becomes subject to a different privacy policy.

Your Responsibilities as a Data Controller

When you use Meet Alto AI's automation and contact collection features, you act as the data controller for all Subscriber Data you collect from your followers. Meet Alto AI acts solely as your data processor. This means:

• You are responsible for obtaining valid consent from your followers before collecting their personal data, including email addresses, through automated DM flows, in compliance with applicable laws including the GDPR, CCPA, CAN-SPAM, and any other regulations applicable to your jurisdiction and audience.

• You are responsible for informing your followers that their data will be collected, stored, and processed, including through third-party platforms such as Meet Alto AI.

• You must honor all data subject requests, including access, correction, deletion, and portability requests, for Subscriber Data in your account.

• You are responsible for using exported Subscriber Data lawfully, including compliance with anti-spam laws and applicable email marketing regulations.

• You must not use the platform to collect sensitive personal data, such as health information, financial data, or government IDs, without appropriate safeguards.

Meet Alto AI does not verify that your automation flows comply with applicable law. We are not responsible for legal exposure arising from how you configure, operate, or use your automations or collected data.

Data Security

We use reasonable administrative, organizational, and technical safeguards designed to protect information processed by Alto against unauthorized access, disclosure, alteration, or destruction.

OAuth tokens used to connect Google and YouTube accounts are encrypted at rest. Access to integration credentials and user data is restricted to systems and personnel that require access to operate and secure the Service.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain collected data only as long as necessary to provide our services or as required by law.

• Active Accounts: Account information and associated data is retained for the duration of your subscription.

• Subscriber Data: Email addresses, usernames, and other contact data collected through your automation campaigns are retained in your account until you delete them or close your account.

• Facebook and Instagram Integrations: If you disconnect your Facebook Page or Instagram account from Meet Alto AI, associated data will be deleted within 180 days.

• YouTube OAuth Tokens: OAuth tokens are retained only while necessary to maintain an authorized YouTube connection and provide the features you have requested. Tokens are encrypted at rest.

• YouTube API Data: Comment text, commenter information, video titles, thumbnails, and other applicable YouTube API Data are retained for no longer than 30 days from the most recent refresh unless a different retention period is expressly permitted by applicable YouTube API Services policies. Data that continues to be required is refreshed from the YouTube API Services rather than retained indefinitely without verification.

• YouTube Disconnection: When you disconnect your YouTube integration through Alto, we revoke the applicable authorization and initiate deletion of YouTube data associated with that connection immediately. Our normal practice is to purge this data immediately, and in all cases we complete deletion of associated YouTube Authorized Data within 7 calendar days of an in-app disconnection.

• Google Revocation: If you revoke Alto's access through your Google Account rather than through Alto, Google prevents Alto from continuing to access your account using that authorization. When our systems detect that the authorization is no longer valid, we delete YouTube API Data associated with that authorization in accordance with applicable YouTube API Services requirements.

• User Deletion Requests for YouTube Data: You may request deletion of stored YouTube data by disconnecting the applicable YouTube integration or contacting us at hey@meetalto.ai. We delete applicable stored YouTube data as soon as possible and no later than 7 calendar days after a valid deletion request made directly to Alto. Deleting information stored by Alto does not delete the corresponding information stored on YouTube itself.

• Deleted Accounts: When you delete your Alto account, we will delete or anonymize your personal information within 90 days, except where a shorter period applies to YouTube API Data or where retention is required for legal, accounting, or security purposes.

• Log Data: Server logs and usage data are typically retained for up to 12 months, subject to any shorter retention requirements applicable to YouTube API Data contained in those logs.

Meta Platform Compliance

Meet Alto AI accesses Facebook and Instagram data exclusively through Meta's official Graph API and operates in compliance with Meta's Platform Terms and Developer Policies. We only request API permissions necessary to deliver the features you use. You can revoke our access to your Facebook or Instagram account at any time through Meta's settings.

Your use of Facebook and Instagram through our platform remains subject to Meta's Terms of Service, Privacy Policy, and Community Guidelines.

YouTube API Services and Google

Meet Alto AI ("Alto") uses YouTube API Services.

Information obtained through the YouTube API Services is handled as described in this Privacy Policy. Our access to and use of information received from Google and YouTube is also subject to applicable Google and YouTube API policies.

Your use of YouTube and YouTube-related functionality is subject to the YouTube Terms of Service: https://www.youtube.com/t/terms

Google's handling of information is described in the Google Privacy Policy: https://policies.google.com/privacy

You may revoke Alto's access to your Google or YouTube account at any time in either of the following ways:

• Disconnect your YouTube channel from within Meet Alto AI. When you disconnect through Alto, we revoke the applicable authorization and initiate deletion of associated YouTube Authorized Data immediately.

• Remove Alto's access through your Google security settings: https://security.google.com/settings/security/permissions

Revoking Alto's access prevents Alto from retrieving additional authorized YouTube data through that connection. Removing information stored by Alto does not itself remove or alter information stored directly by YouTube.

If you have questions or complaints regarding Alto's access to, use of, storage of, sharing of, or deletion of YouTube or Google data, contact us at hey@meetalto.ai.

Security

We use industry-standard security practices to protect your data, including encryption, secure servers, and limited employee access. However, no system is completely secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have rights under privacy laws such as the GDPR or CCPA, including the right to:

• Access your data

• Request correction or deletion of your data

• Restrict or object to certain processing

• Request a copy of your data

You may also disconnect platform integrations at any time to stop Alto from obtaining additional data through those integrations.

To exercise these rights, contact us at hey@meetalto.ai.

Children’s Privacy

Meet Alto AI is not directed to children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at hey@meetalto.ai and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above.

If we materially change how we access, use, store, or share Google or YouTube user data, we will provide appropriate notice and obtain any consent required before applying the new use to previously authorized Google or YouTube data.

Continued use of Meet Alto AI after other changes indicates your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, you can contact us at:

BTMK Holdings LLC
8 The Green, Suite R, Dover, Delaware, United States, 19901
hey@meetalto.ai