Privacy Policy

Speedy Text is a software service, operated by CrevoX in Cairo, Egypt, that lets businesses automate replies to comments and direct messages on Instagram business accounts and Facebook Pages they own. In this policy “we” means CrevoX. It covers both our customers (people with a Speedy Text account) and the people who interact with our customers' posts. You can reach us any time through our Contact page.

For customer account data (your email, password, plan and billing records) CrevoX is the data controller. For audience data — the comments and messages sent to a customer's connected accounts — our customer is the controller and we act as their processor, handling that data only to deliver the automation they configured. A data processing agreement is available on request at support@speedytext.app.

• Account: email address, hashed password, display name, and the date you accepted our terms.
• Subscription: plan, billing cycle, renewal date, and payment records (amount, currency, status, gateway reference).
• Connected accounts: Meta access tokens plus the page/account id, username, display name and profile picture.
• Automation config: the rules, keywords, messages and links you create.
• Interactions: the text of comments and direct messages received through Meta webhooks, and the sender's Meta-scoped id and username.

We do not collect payment card details. Card payments are handled entirely by Stripe; we only receive the outcome of a transaction. Payments by InstaPay are made directly to our bank and pass through no card processor at all.

Solely to operate the service: matching incoming messages against your rules, sending the replies you configured, showing you your activity, enforcing plan limits, taking payment, and keeping the service secure. We do not sell or rent data, and we do not use message content to train models or for advertising.

Interaction records (comment and message text, sender identifiers) are automatically deleted after 90 days by a scheduled job. Account, subscription and payment records are kept while your account is open and for as long as tax and accounting rules require afterwards. Deleting your account removes your connected accounts, rules and interaction history.

Passwords are hashed with scrypt and per-user salts and are never stored or transmitted in readable form. Meta access tokens are encrypted at rest and are never sent to the browser. All traffic is served over HTTPS, the database connection is TLS-encrypted, and every incoming Meta webhook is cryptographically verified before it is processed. Each customer's data is isolated and access is enforced on every request.

You may request access to, correction of, export of, or deletion of your personal data, and you may object to or restrict certain processing. Write to support@speedytext.app and we will respond within 30 days. If someone interacted with a customer's account and wants their data removed, they can contact us or use the deletion flow below and we will pass the request to the relevant customer.

You can revoke this app at any time from your Facebook settings under Settings & Privacy → Settings → Business Integrations. Meta then notifies us and we delete the associated records. You can check the status of a deletion request at /data-deletion.

The service is not directed at anyone under 18 and we do not knowingly collect their data.

We will announce material changes in the app before they take effect. Questions or requests: support@speedytext.app. See also our Terms of Service.