Privacy Policy — Meta Platform Integration

1. Data Controller

2. Scope of This Policy

This privacy policy applies specifically to data collected and processed through our integration with Meta Platforms (Facebook & Instagram). It covers any data we receive when you connect your Meta account to customrflow or interact with our services via Meta's platform (including Facebook Login, Instagram Basic Display API, and Instagram Graph API).

3. Data We Collect from Meta

When you authorize our application through Meta, we may receive the following data depending on the permissions you grant:

• Profile Information — Your name, profile picture, and email address associated with your Meta account.
• Instagram Business Account Data — Business account ID, username, profile information, media content, and insights/analytics.
• Facebook Page Data — Page ID, name, access tokens for pages you manage, and page insights.
• Ad Account Data — Ad account ID, campaign data, ad performance metrics, and audience insights.
• Messaging Data — If you use our messaging features, conversation data from Instagram Direct or Facebook Messenger (only with your explicit consent).

4. How We Use Your Data

We use the data collected from Meta for the following purposes:

• To authenticate and verify your identity via Facebook Login.
• To display and manage your Instagram and Facebook content within our platform.
• To provide analytics and performance insights for your social media accounts.
• To enable ad campaign management and tracking across Meta platforms.
• To facilitate customer communication via Instagram Direct and Messenger.
• To improve our services and provide customer support.

5. Data Storage & Security

All data received from Meta is stored securely on our servers hosted within the European Union. We implement the following security measures:

• OAuth access tokens are encrypted using AES-256-GCM encryption at rest.
• All data transmissions occur over TLS 1.2 or higher.
• Access to Meta data is restricted to authenticated and authorized users only.
• We perform regular security audits and maintain compliance with industry standards.

6. Data Sharing

We do not sell, rent, or share your Meta data with third parties, except:

• When required by law, regulation, or legal process.
• With service providers who assist in operating our platform (e.g., cloud hosting), under strict data processing agreements.
• With your explicit consent.

7. Data Retention

We retain data received from Meta only for as long as necessary to provide our services to you. When you disconnect your Meta account or delete your customrflow account, we will delete all associated Meta data within 30 days. Cached or temporary data is purged automatically within 24 hours.

8. Your Rights

You have the right to:

• Access — Request a copy of the data we hold about you from Meta.
• Rectification — Request correction of inaccurate data.
• Deletion — Request deletion of your data (see Data Deletion Request).
• Portability — Request your data in a machine-readable format.
• Withdraw Consent — Revoke access to your Meta data at any time by disconnecting the integration in your account settings or removing our app in your Facebook Business Integrations settings.

9. Data Deletion

You can request the deletion of all data associated with your Meta account at any time. We provide a dedicated data deletion request page:

Alternatively, you can remove our app from your Facebook settings to revoke all access.

10. Compliance with Meta Platform Terms

Our use of data received from Meta APIs complies with the Meta Platform Terms and Developer Policies. We only request permissions that are necessary for the functionality we provide.

11. Contact Us

If you have any questions about this privacy policy or how we handle your Meta data, please contact us:

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.