Security

Security & Data Handling

Controls designed for token protection, least-privilege access, auditability, and a documented deletion mechanism.

Cybersecurity themed image showing encryption and access control concepts

Infrastructure Security

  • TLS encryption in transit
  • Encrypted storage of API tokens
  • Restricted server access
  • Access logging and monitoring

Token Handling

System user tokens and OAuth tokens are encrypted at rest. Permissions are limited to scopes granted by the client.

Tokens may be revoked by the client at any time via Meta Business Manager.

Data Scope

We may process
  • Business Page identifiers
  • Instagram Professional account identifiers
  • Media asset metadata
  • Publishing timestamps
  • Access tokens issued via Meta authorization
We do not collect
  • User passwords
  • Private messages
  • Personal profile data beyond granted scopes
  • Scraped platform data

Data Deletion

Clients may request deletion of stored publishing logs or related operational data. Requests are processed within 30 days of verification.

View Data Deletion Policy