Privacy Policy

Português

This policy describes what data meta-manager keeps when you connect a Facebook Page or an Instagram professional account, what for, for how long, and how to delete it.

Your meta-manager account

  • Name and email.
  • Password, stored only as a hash — we cannot read it.
  • Login sessions and password reset requests, also stored only as hashes.

Meta data we keep

When you connect an account (a Channel), we keep:

  • Profile and Pages: the id and name of the Page or Instagram account, the id of the Business Portfolio it belongs to, the permissions granted, and the app-scoped id of the person who authorised the connection.
  • The account's access token and its expiry date (see "Token custody").
  • Media and posts you create here: caption, the media link you provided (we do not store the file) and, for each account, the publishing outcome — the post id at Meta, its permalink, or an error message.
  • Automation rules: keywords, and the direct message and public reply you wrote.
  • Third-party comments that triggered a rule: comment id, the commenter's id and name, the comment text, the matched keyword, and whether the message and reply were sent.
  • Deletion requests received from Meta: confirmation code, the user id Meta sent, status and dates.

Other data — profile details, media lists, comments, third-party conversations and messages, and metrics such as follower counts — is read from Meta when you open the screen and is not written to our database.

Events Meta sends us by webhook (third-party comments and messages) are recorded, with their content, in the application logs. The retention period for these logs has not been set yet and will be stated on this page.

Purpose

We use this data only to provide the service you configure:

  • showing your Pages, accounts and conversations;
  • publishing the content you create to the accounts you choose;
  • automatically answering comments that match an automation rule you turned on;
  • making sure the same comment is never answered twice.

Retention

A Channel's data — token, automation rules, comments that triggered rules and publishing outcomes — is kept while the Channel is connected and deleted when it is removed through any of the paths below. Posts you created (caption and media link) stay with your meta-manager account. Your meta-manager account data is kept while the account exists; deleting the account is not yet available in the interface.

Token custody

  • Access tokens are encrypted at rest with AES-256-GCM; the key is kept outside the database.
  • Our API never returns the token — not even encrypted — to the browser or any other client.
  • Instagram tokens, valid for 60 days, are renewed automatically when fewer than 30 days remain.

How to delete your data

There are three paths, and each one deletes the Channel with its token, rules, recorded comments and publishing outcomes:

  1. In meta-manager: in Canais, click Excluir on the account and confirm.
  2. Removing the app on Facebook or Instagram: in the apps and websites settings of Facebook or Instagram, remove meta-manager. Meta notifies us and we remove every Channel you connected.
  3. Asking Meta to delete your data:when removing the app, also request that your data be deleted. Meta forwards the request, we remove the Channels and return a confirmation code. Follow the request's status at /exclusao-de-dados with that code.

Contact

The data controller and the contact channel will be published on this page.

See also the Terms of Use.