1. Introduction
Neoomni ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media management application.
By using Neoomni, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Personal Information
When you register for an account, we collect:
- Email address
- Name
- Encrypted password (hashed using bcrypt)
2.2 Facebook and Instagram Data
When you connect your Facebook or Instagram account, we collect and store the following data with your explicit permission:
- Facebook Page ID, name, avatar, and fan count
- Instagram Business Account ID, username, and profile information
- Page access tokens (AES-256-GCM encrypted)
- Posts, comments, and messages from your connected Pages
- Page insights and analytics data
- Conversations and messages from Page inbox
3. How We Use Your Information
We use the collected information for the following purposes:
- To provide and maintain our social media management service
- To allow you to create, edit, and delete posts on your connected Pages
- To enable you to read and respond to comments and messages
- To display analytics and insights about your Pages
- To authenticate your identity and secure your account
- To communicate with you about your account and our service
4. Data Storage and Security
We implement appropriate technical and organizational measures to protect your personal data:
- Passwords are hashed using bcrypt with a cost factor of 10
- Facebook and Instagram access tokens are encrypted using AES-256-GCM
- Authentication is handled via JWT tokens stored in httpOnly cookies
- All API requests require authentication
- Data is stored in a secure database with limited access
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With your explicit consent
- To comply with legal obligations
- To protect our rights and property
- In connection with a business transfer (merger, acquisition, or sale of assets)
6. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (see our Data Deletion page)
- Withdraw consent: Disconnect your Facebook/Instagram accounts at any time
- Data portability: Request export of your data
7. Third-Party Services
Our application integrates with the following third-party services:
- Facebook Graph API: To access and manage your Facebook Pages
- Instagram Graph API: To access and manage your Instagram accounts
- Meta Business Platform: For authentication and authorization
Your use of these third-party services is subject to their respective privacy policies and terms.
8. Data Retention
We retain your personal data for as long as your account is active. If you disconnect your Facebook or Instagram account, the associated data is marked as inactive. You may request permanent deletion of your data at any time.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us through the Facebook developer contact information associated with this application.