Legal

Privacy Policy

Effective date: May 2026

1. What we collect

We collect only the information needed to deliver our service:

  • Your name and email address.
  • Facebook Page access tokens you grant us during connection.
  • Instagram user IDs linked to your connected Facebook Page.
  • Post scheduling data — captions, media references, and scheduled publish times.

2. How we use it

Your data is used solely to schedule and publish social media posts on your behalf. We do not sell, rent, or share your information for marketing or advertising purposes.

3. Facebook and Instagram OAuth

When you connect your Facebook Page, we request the following permissions through Meta's official OAuth flow:

  • pages_show_list — to list the Pages you manage.
  • pages_read_engagement — to read basic Page metadata.
  • pages_manage_posts — to publish scheduled posts to your Page.
  • instagram_basic — to identify your linked Instagram Business account.
  • instagram_content_publish — to publish scheduled posts to Instagram.
  • business_management — to verify Page ownership and Business Asset access required by Meta for publishing on your behalf.

Tokens are stored securely in our backend (Supabase) and are never exposed in client-side code.

4. Data retention

Access tokens and connection details are retained until you disconnect your account or request deletion. You can revoke access at any time from your Meta Business Settings or by contacting us.

5. Third parties

We share data only with the Meta / Facebook Graph API to perform the publishing actions you authorize. We do not integrate with any other third-party advertising or analytics providers for your social connection data.

6. Contact

Questions, deletion requests, or concerns? Email us at admin@krzymedialab.com.