Privacy Policy

1. Who We Are (Data Controller)

2. The Permissions We Request and Why

When you connect your Meta account, n8n_access2 asks for only the permissions it needs to deliver the features you use. We follow Meta's principle of least-privilege access and request permissions incrementally, explaining each one in plain language before you grant it.

You are always in control. We only publish content that you create, schedule, or explicitly approve within the App. We never post on your behalf without an action you have authorized. You can revoke any permission at any time (see Section 9).

3. Information We Collect

3.1 Information from Meta (with your permission)

• Account identifiers (user ID, Page ID, Instagram account ID)
• Name, username, and profile picture
• Email address
• List of Pages and accounts you manage
• Engagement and insights data (likes, comments, reach, impressions) for content you manage

3.2 Content You Provide

• Text, images, videos, links, and other media you create or upload to publish
• Scheduling, captions, hashtags, and publishing preferences

3.3 Information We Collect Automatically

• Log and device data (IP address, browser type, device type, timestamps)
• Usage data (features used, posts published, errors encountered)
• Cookies and similar technologies (see Section 11)

3.4 Information We Do Not Collect

• We do not collect your Meta password — authentication is handled entirely by Meta's OAuth login.
• We do not access private messages, friends' private data, or content unrelated to the features you use.

4. How We Publish to Your Profile

This is the central function of the App, so we describe it explicitly:

1. You create or import content within the App.
2. You select the destination (which Page, profile, or account) and review the content.
3. You approve, publish, or schedule the post.
4. The App uses the Meta Graph API and the permissions you granted to post the content on your behalf at the time you chose.
5. Published content is subject to Meta's own terms and policies once it appears on the platform.

We will never:

• Publish content you have not created or approved.
• Modify your content beyond formatting required by the platform.
• Use your publishing access for our own marketing without your separate, explicit consent.

5. How We Use Your Information

We use the information we collect to:

• Authenticate you and maintain your account
• Publish, schedule, and manage content on your connected profiles at your direction
• Provide analytics and insights on your published content
• Operate, maintain, and improve the App
• Provide customer support and respond to your requests
• Detect, prevent, and address technical issues, fraud, or abuse
• Comply with legal obligations and Meta Platform requirements

We do not sell your personal data. We do not use your data to train AI models without your explicit consent. We do not use the data obtained through Meta permissions for any purpose other than providing the features you use.

6. Legal Bases for Processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

7. How We Share Information

We share information only as needed and never sell it. Categories of recipients:

• Meta Platforms, Inc. — to publish content and retrieve data via the Graph API.
• Service providers / sub-processors — hosting, storage, analytics, and email delivery vendors bound by data protection agreements (e.g., [AWS], [Google Cloud], [SendGrid]).
• Legal and safety — when required by law, court order, or to protect rights and safety.
• Business transfers — in connection with a merger, acquisition, or asset sale, with notice to you.

A current list of sub-processors is available at https://www.kd-technology.com/sub-processors or on request.

8. Data Retention

• We retain your account and content data only as long as your account is active or as needed to provide the Service.
• When you disconnect your Meta account or delete your account, we delete the associated access tokens immediately and remove your personal data within [30] days, except where retention is required by law.
• Aggregated, anonymized data that cannot identify you may be retained for analytics.

9. Your Choices and Controls

• Revoke permissions at any time via your Meta settings:
  • Facebook: Settings & Privacy → Settings → Apps and Websites
  • Instagram: Settings → Apps and Websites
• Disconnect within the App: [App settings path].
• Revoking access stops all publishing and data access immediately.

10. Your Privacy Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict or object to processing
• Port your data to another service
• Withdraw consent at any time

To exercise these rights, contact privacy@kd-technology.com. We will respond within the timeframe required by law (typically 30 days).

Data Deletion Requests (Meta Requirement)

You can request deletion of all your data at any time:

• In-app: [App settings → Delete my data]
• Email: privacy@kd-technology.com
• Data Deletion Callback URL: https://www.kd-technology.com/data-deletion

Upon a valid request, we permanently delete your personal data and confirm completion.

11. Cookies and Tracking

We use cookies and similar technologies to keep you logged in, remember preferences, and measure usage. You can control cookies through your browser settings. See our [Cookie Policy] for details.

12. Data Security

We protect your information using:

• Encryption in transit (TLS) and at rest
• Secure, time-limited OAuth access tokens (never your password)
• Access controls and least-privilege internal policies
• Regular security reviews and monitoring

No method of transmission is 100% secure, but we work to protect your data and will notify you and regulators of any breach as required by law.

13. International Data Transfers

Your data may be processed in countries outside your own, including [United States]. Where required, we use safeguards such as the EU Standard Contractual Clauses to protect your data during transfer.

14. Children's Privacy

n8n_access2 is not intended for anyone under [13 / 16] years of age, consistent with Meta's minimum age requirements. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

15. Changes to This Policy

We may update this Policy from time to time. We will post the new version at https://www.kd-technology.com/ with an updated "Last updated" date and, for material changes, notify you in-app or by email before the change takes effect.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

• Email: privacy@kd-technology.com
• Website: https://www.kd-technology.com/
• Address: [Company Address]
• Data Deletion: https://www.kd-technology.com/data-deletion