Privacy Policy

1.1 Information you provide directly. When a Business User sets up their account, we collect information about their business, including: business name, industry/niche, products or services offered, target audience description, brand tone preferences, advertising budget and performance targets, geographic service area, and reference images or materials the Business User chooses to upload for use in their marketing content.

1.2 Information from connected Meta accounts. Once a Business User connects their Facebook Page, Instagram Business Account, and/or Meta Ads account (via Facebook Login), we access and store, on the Business User’s behalf and using their granted permissions:

• Basic account information (Page name, Instagram username, account IDs, profile picture).
• Content the Business User publishes or schedules through our Service (photos, videos, captions).
• Performance metrics for that content (reach, impressions, engagement, video view metrics).
• Advertising account information (ad account ID, campaign structure, budgets, and performance metrics such as spend, results, and cost per result).
• Product catalog information synced to Meta Commerce Manager on the Business User’s behalf.

1.3 Information about End Users (people messaging or interacting with a Business User). When someone sends a direct message to a Business User’s connected Page or Instagram account, we process the content of that conversation (message text, the sender’s Instagram username and platform-assigned user ID, and the conversation status) in order to help the Business User respond. We do not use this information for any purpose other than facilitating the Business User’s communication with that person.

1.4 Advertising and website conversion data. If a Business User connects a Meta Pixel and/or Conversions API integration for their own website, we process event data (such as page views and purchases) sent from their website in order to help measure and optimize their advertising. Where this data includes personal identifiers (such as email address or phone number) used to build custom audiences for advertising, that information is cryptographically hashed (SHA-256) before it is sent to Meta, and we do not store the underlying unhashed identifiers for this purpose beyond what is required to generate the hash at the time of the request.

1.5 Aggregated and de-identified information. We may derive aggregated, statistical insights (for example, typical performance benchmarks for a given industry or region) from data across multiple Business Users, in a form that does not identify any individual Business User or End User, to improve the quality of recommendations we provide.

We use the information described above to:

• Provide the Service: publish approved content, manage advertising campaigns within Business User-configured budgets and targets, sync product catalogs, and facilitate messaging with End Users.
• Generate performance reports and recommendations for the Business User.
• Maintain and improve the Service, including troubleshooting and security.
• Communicate with Business Users about their account and the Service.
• Comply with legal obligations and enforce our terms.

We do not sell personal information to third parties.

• With Meta, as necessary to operate the Service through the Meta APIs the Business User has authorized (for example, publishing content, managing ads, or sending catalog data).
• With service providers who help us operate the Service, including cloud hosting/infrastructure providers and third-party content-processing service providers who help analyze and generate marketing content and creative assets on our behalf. These providers only receive the information necessary to perform their function and are contractually restricted from using it for any other purpose.
• As required by law, or to protect the rights, property, or safety of Metonomus, our users, or others.
• We do not share End User message content with anyone other than the Business User the message was sent to, except as described above.

We retain Business User and End User information for as long as the Business User’s account remains connected to the Service, and for a reasonable period afterward as needed to comply with legal obligations, resolve disputes, and enforce our agreements. Certain categories of aggregated competitive/market data are automatically deleted after a fixed retention period (currently 90 days) if not refreshed.

Access tokens issued by Meta are encrypted at rest before storage. We apply reasonable technical and organizational measures designed to protect information from unauthorized access, alteration, disclosure, or destruction.

Business Users can disconnect their Meta account from the Service at any time, which revokes our access to their data going forward.

Deleting your data: You may request deletion of your data by removing the Metonomus app from your Facebook/Instagram settings (Meta will automatically notify us to delete your data), or by contacting us directly at metonomus@gmail.com. You can check the status of a data deletion request at:

https://metonomus.io/webhook/facebook/data-deletion-status/{confirmation_code}

End Users who have messaged a Business User and wish to have their conversation data deleted may contact the Business User directly, or contact us at metonomus@gmail.com.

Depending on your location, you may have additional rights under applicable law (such as the EU General Data Protection Regulation), including the right to access, correct, or object to the processing of your information. To exercise these rights, contact us at metonomus@gmail.com.

The Service is intended for use by business owners and is not directed at children. We do not knowingly collect personal information from children under the age required by applicable law.

Information may be processed in countries other than your own. Where required by applicable law, we take steps to ensure appropriate safeguards are in place for such transfers.

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date.

If you have questions about this Privacy Policy or how your information is handled, contact us at: metonomus@gmail.com