Legal
Privacy Policy
Effective date: May 2026
1. What we collect
We collect only the information needed to deliver our service:
- Your name and email address.
- Facebook Page access tokens you grant us during connection.
- Instagram user IDs linked to your connected Facebook Page.
- Post scheduling data — captions, media references, and scheduled publish times.
2. How we use it
Your data is used solely to schedule and publish social media posts on your behalf. We do not sell, rent, or share your information for marketing or advertising purposes.
3. Facebook and Instagram OAuth
When you connect your Facebook Page, we request the following permissions through Meta's official OAuth flow:
pages_show_list— to list the Pages you manage.pages_read_engagement— to read basic Page metadata.pages_manage_posts— to publish scheduled posts to your Page.instagram_basic— to identify your linked Instagram Business account.instagram_content_publish— to publish scheduled posts to Instagram.business_management— to verify Page ownership and Business Asset access required by Meta for publishing on your behalf.
Tokens are stored securely in our backend (Supabase) and are never exposed in client-side code.
4. Data retention
Access tokens and connection details are retained until you disconnect your account or request deletion. You can revoke access at any time from your Meta Business Settings or by contacting us.
5. Third parties
We share data only with the Meta / Facebook Graph API to perform the publishing actions you authorize. We do not integrate with any other third-party advertising or analytics providers for your social connection data.
6. Contact
Questions, deletion requests, or concerns? Email us at admin@krzymedialab.com.