Privacy Policy — Meta Platform Integration

1. Data Controller

2. Scope of This Policy

This privacy policy specifically covers how Customrflow handles data obtained through Meta platform integrations, including Facebook and Instagram. This includes data from Facebook Pages, Instagram Business accounts, Meta Lead Ads, and Meta Marketing APIs. For our general privacy policy, please refer to our main privacy policy.

3. Data We Collect from Meta

When you connect your Meta accounts to Customrflow, we may collect and process the following data:

• Facebook Page information (name, ID, category, profile picture)
• Instagram Business account information (username, ID, profile data)
• Lead form submissions from Meta Lead Ads (name, email, phone, custom fields)
• Ad campaign performance metrics (impressions, clicks, spend, conversions)
• Page and post insights (reach, engagement, follower demographics)
• User access tokens for maintaining the integration connection

4. How We Use Your Data

Data obtained through Meta integrations is used exclusively for the following purposes:

• Importing and managing leads from Meta Lead Ads into your CRM
• Displaying ad campaign analytics and performance dashboards
• Providing page management and content scheduling features
• Enabling marketing attribution and conversion tracking
• Maintaining the connection between Customrflow and your Meta accounts

5. Data Storage & Security

We implement the following security measures for Meta-related data:

• All Meta access tokens are stored encrypted in our database
• Data is transmitted exclusively over TLS/SSL encrypted connections
• Access to Meta data is restricted to authenticated and authorized users only
• We follow the principle of least privilege for API permissions
• Regular security audits and monitoring of data access patterns

6. Data Sharing

We do not sell, rent, or share your Meta-related data with third parties, except:

• With infrastructure providers necessary for platform operation (hosting, database services)
• When required by law, regulation, or legal process
• With your explicit consent for specific integrations
• To protect the rights, property, or safety of Customrflow or its users

7. Data Retention

Meta-related data is retained as follows: Lead data imported from Meta is stored as part of your CRM data for the duration of your account. Campaign analytics data is retained for up to 24 months. Access tokens are stored only while the integration is active and are immediately deleted upon disconnection. You may request deletion of all Meta-related data at any time.

8. Your Rights

Regarding your Meta-related data, you have the right to:

• Access all Meta-related data we have stored about you
• Request correction of inaccurate data
• Request deletion of all Meta-related data
• Disconnect the Meta integration at any time through your account settings
• Export your Meta-related data in a machine-readable format
• Revoke Meta permissions directly through your Facebook/Instagram settings

9. Data Deletion

You can request the deletion of all your Meta-related data from Customrflow. Upon receiving your request, we will delete all Meta-related data within 30 days, including lead data, campaign analytics, page data, and stored access tokens.

Use the form below to submit a data deletion request:

10. Compliance with Meta Platform Terms

Customrflow complies with all applicable Meta Platform Terms and Policies, including:

• Meta Platform Terms
• Meta Developer Policies
• Meta Privacy Policy

We request only the minimum necessary permissions for the features our users need, and we regularly review our permission usage to ensure compliance.

11. Contact Us

For any questions or concerns regarding this privacy policy or our handling of Meta-related data, please contact us:

12. Changes to This Policy

We may update this Meta-specific privacy policy from time to time to reflect changes in our practices, Meta's platform requirements, or applicable laws. The current version will always be available on this page. We will notify affected users of material changes via email or through the platform.