Privacy Policy

Last Updated: June 1, 2026

Welcome to Gapex. Your privacy is important to us. This Privacy Policy explains how Gapex (“we”, “our”, or “us”), operated by MULTIBROKER MChJ, collects, uses, stores, and protects your information when you use our services.

This policy applies to our website and platform available at: https://gapex.ai/privacy

By using Gapex, you agree to the practices described in this Privacy Policy.

1. Information We Collect

When you use Gapex, we may collect the following types of information.

1.1 Account Information

When you create an account using social login, we may collect: your name, email address, social media username, account ID from connected platforms. This information is used to identify your account and provide our services.

1.2 Social Media Data

If you connect your social media accounts to Gapex (including Facebook and Instagram via the Meta APIs, and YouTube via the YouTube API Services), we may access and store the following data depending on permissions granted: posts and videos, comments on posts and videos, replies you author, username and profile information. This data is used to enable comment management, content analysis, and AI-assisted responses. For platform-specific details, see Section 12 (YouTube) and Section 13 (Facebook and Instagram).

1.3 Usage Data

We may automatically collect certain technical information when you use our service, including: device type, browser type, IP address, access time and usage patterns, platform interactions. This information helps us improve the service and maintain system security.

2. How We Use Your Information

We use the collected data to provide and improve our services, including: managing and organizing social media messages and comments; providing AI-powered message analysis; generating AI-assisted replies to comments or messages; improving system performance; providing customer support; maintaining platform security.

3. AI Processing of Data

Gapex uses artificial intelligence technologies to analyze social media interactions and generate suggested responses. For this purpose: content such as messages and comments may be processed by third-party AI providers; when possible, we send anonymized or minimized versions of the data to these AI services; AI providers process the information solely to generate responses or perform analysis.

4. Data Storage and Retention

Gapex stores user data including videos, posts, comments, and replies connected to your account. We also store authentication tokens (including OAuth refresh tokens) for as long as your account remains active and consent is granted. Gapex uses cookies and similar technologies in users’ browsers and devices to operate the service and maintain sessions. If you delete your account, disconnect a social media account, or revoke access via the relevant provider’s security settings, we begin processing your deletion request — typically reviewed within 7–14 business days — and the associated data and tokens are fully removed from our systems within 30 days. For platform-specific deletion and revocation procedures, see Section 12 (YouTube) and Section 13 (Facebook and Instagram).

5. Third-Party Services

Gapex may use third-party services to operate the platform and may transfer limited data to trusted processors as necessary to provide the service, including: social media platform APIs (Meta — Facebook and Instagram, Google/YouTube, Telegram, Apple App Store, Google Play); AI providers for response generation (such as OpenAI and Anthropic); cloud hosting and storage providers; and error-tracking, security, and analytics tools. These providers process data only on Gapex’s behalf and solely to deliver their services, and do not sell it. We require third-party providers to handle data securely and in accordance with applicable privacy standards.

6. Data Security

We take reasonable technical and organizational measures to protect your information, including: secure servers and encrypted connections; access control systems; monitoring and security practices designed to protect user data. However, no online service can guarantee absolute security.

7. User Rights and Data Control

Gapex users have the right to: access their stored data; request correction of inaccurate data; delete their account and associated information; and disconnect connected social media accounts. To request data deletion or assistance, contact us at sokhib@jett.uz. For step-by-step instructions, see our Data Deletion Instructions. If you have connected a Google account (including YouTube), you can also revoke Gapex’s access at any time via the Google security settings page: https://myaccount.google.com/connections?filters=3,4&hl=en. If you have connected a Facebook Page or Instagram account, you can remove Gapex’s access at any time in your Facebook Settings → Business Integrations.

8. Business Accounts

Gapex is designed for users who operate business or professional social media accounts. The platform is intended to help businesses manage communication with their audiences.

9. Subscription Services

Gapex operates under a subscription-based pricing model. Payment information may be processed by third-party payment providers. Gapex does not store full payment card details.

10. Children’s Privacy

Gapex is not intended for children. Our services are designed for business account holders. We do not knowingly collect personal information from individuals under the age of 13. If we become aware that such data has been collected, we will take steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or security practices. Updated versions will be posted at: https://gapex.ai/privacy. Your continued use of the service after updates indicates acceptance of the revised policy.

12. YouTube API Services

Gapex uses YouTube API Services to provide its YouTube comment management and AI-assisted reply features. By connecting your YouTube channel and using these features, you also agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (http://www.google.com/policies/privacy).

12.1 Data accessed via YouTube API Services

When you connect your YouTube channel via Google OAuth, Gapex accesses: your channel ID and basic channel information, the list of videos uploaded to your channel, comment threads on your videos, and the replies you choose to post. Gapex posts replies to YouTube only after you approve them.

12.2 Storage, cookies, and similar technologies

Gapex stores OAuth access and refresh tokens, channel metadata, your videos and comment data, and the AI-suggested and approved replies, in our secure database. Gapex also uses cookies and similar technologies in users’ browsers and devices to maintain sessions, remember preferences, and operate the platform. Third-party services we use (authentication, analytics, infrastructure providers) may also place cookies on your device.

12.3 How to delete your YouTube data and revoke access

You may delete your stored YouTube data and/or revoke Gapex’s access to your Google Account at any time: In-app: Open Gapex → Settings → Connected Accounts → YouTube → Disconnect & Delete Data. This calls Google’s token revocation endpoint and deletes your stored YouTube-derived data within 30 days. Via Google: Visit https://myaccount.google.com/connections?filters=3,4&hl=en and revoke Gapex’s access. Once revoked, our stored authorization tokens become invalid and we will delete your YouTube-derived data within 30 days. For data deletion requests, contact us at sokhib@jett.uz.

13. Facebook and Instagram Data

When you connect your Facebook Page or Instagram business account to Gapex (operated by MULTIBROKER MChJ), we access and process the following data through the Meta (Facebook/Instagram) APIs — only for the pages/accounts you have explicitly connected and authorized:

• Page/account information: ID, name, profile picture, category.
• Content and activity: posts on your page, comments left by users, comment metadata (author name/ID, timestamp), and reaction/like counts.
• Access tokens required to call the Meta APIs on your behalf.

13.1 How we use it

We display this content in the Gapex dashboard so you can monitor and manage customer engagement from one place; we let you reply to comments and hide or delete them; and we use webhooks to sync new comments in real time.

13.2 How we store and protect it

Data is stored in a secure database and object storage; access tokens are protected; and access is limited to the organization of the connected account.

13.3 Retention and deletion

Data is retained for as long as the account/connection remains active. You may disconnect a page/account at any time and request deletion of your data. Once a request is reviewed (typically within 7–14 business days), we delete the stored Meta data within 30 days. You can also revoke Gapex’s access directly in your Facebook/Instagram settings.

We do not sell this data and use it solely to provide the Gapex service, in accordance with the Meta Platform Terms and Developer Policies.

14. Contact Information

If you have questions or concerns regarding this Privacy Policy or your personal data, please contact us at:

• Email: sokhib@jett.uz
• Company: Gapex (operated by MULTIBROKER MChJ)