1. Scope

shopinistapp is a private application used to manage ShopinistaMeta's own business assets through authorized integrations with Meta technologies, including Facebook and Instagram.

The application is not offered as a multi-client SaaS platform and is not intended to sell, rent, or commercially distribute data obtained through Meta APIs.

2. Information the Application May Receive from Meta

Depending on the permissions granted and the features enabled, shopinistapp may receive categories of information necessary to operate the integration, including:

• Technical identifiers required for authorization.
• Facebook Pages administered or authorized by the account.
• Page names and identifiers.
• Information regarding linked professional Instagram accounts.
• Instagram identifiers and usernames when available.
• Information related to posts and publication status.
• Metrics or insights when properly authorized.
• Catalog or product information.
• Granted permissions and connection status.
• Access tokens provided by Meta through OAuth.

The application requests only the permissions necessary for the features that are actually enabled.

3. How Information Is Obtained

Information is obtained after an authorized person initiates the connection process with Meta and expressly grants the permissions presented by Meta during the authorization flow.

shopinistapp does not request or store Facebook or Instagram passwords. Account authentication and two-factor authentication mechanisms are handled directly by Meta.

4. Purposes of Processing

Information obtained through Meta may be used exclusively for authorized application functions, including:

• Authenticating and maintaining the authorized Meta connection.
• Identifying administered or authorized Facebook Pages.
• Identifying linked professional Instagram accounts.
• Checking integration status.
• Managing and synchronizing authorized catalogs.
• Creating and publishing content when supported by the applicable API.
• Managing images, videos, Reels, Stories or carousels when supported by authorized APIs.
• Accessing authorized metrics and insights.
• Automating ShopinistaMeta's own business tasks.
• Maintaining security controls and technical records.
• Complying with applicable legal requirements and Meta policies.

Data obtained from Meta is not used to create commercial profiles of external users and is not sold or rented.

5. Meta Tokens and Credentials

Access tokens obtained through OAuth are treated as confidential credentials and are handled using reasonable security measures.

The App Secret and other private application credentials are not displayed to users or intentionally transmitted to the frontend.

6. Information Sharing

Information obtained through Meta may be processed by technology providers strictly necessary to operate ShopinistaMeta's infrastructure, within the purposes described in this policy.

ShopinistaMeta does not sell or rent data obtained through Meta APIs.

7. Data Retention

Integration-related data and credentials are retained only for as long as reasonably necessary to maintain the connection, provide authorized functionality, comply with legal obligations, and maintain reasonable security records.

When the Meta connection is revoked, the corresponding tokens will no longer be used and will be deleted, invalidated, or otherwise handled as applicable under the circumstances and applicable legal requirements.

8. Data Deletion

A person may request deletion of data associated with shopinistapp by contacting the privacy email listed in this policy.

After receiving a valid request, ShopinistaMeta may reasonably verify the requester's identity and delete, disconnect, or anonymize applicable data, except information that must be retained for legal obligations, fraud prevention, security, or the establishment, exercise, or defense of legal rights.

Application access may also be revoked through the Apps and Websites settings of the applicable Facebook/Meta account.

9. Revocation or Deauthorization

When Meta notifies shopinistapp of a revocation, deauthorization, or applicable deletion request, the application may:

• Locate the corresponding connection.
• Invalidate or delete associated credentials.
• Stop making requests using those credentials.
• Delete derived data that should no longer be retained.

These actions are subject to the technical capabilities of the integration, applicable Meta policies, and applicable legal requirements.

10. Security

ShopinistaMeta applies reasonable administrative and technical measures designed to protect information processed by shopinistapp against unauthorized access, modification, disclosure, or destruction.

Depending on the implementation, security controls may include:

• Administrative authentication.
• Server-side session management.
• Protection against CSRF requests.
• Use of one-time OAuth state parameters.
• Protection of server credentials and secrets.
• Separation between frontend code and private secrets.
• Restricted access to sensitive information.
• Technical records used for security and diagnostics.

11. Privacy Rights and Requests

Requests relating to access, correction, objection, cancellation, restriction, or deletion of information may be sent to the privacy email listed in this policy.

For account security, do not send passwords, access tokens, App Secrets, cookies, or authentication codes by email.

Requests may be subject to reasonable identity verification procedures and exceptions established by applicable law.

12. Changes to This Policy

This Privacy Policy may be updated when the functionality of shopinistapp, Meta APIs, permissions used, security measures, legal requirements, or applicable policies change.

The current version will remain publicly available on this website. The date shown at the beginning of the policy indicates the date of the latest substantial update.

13. Contact

For questions regarding privacy, data processing, deletion, or the operation of the integration: