Privacy policy

Postnook is a social media scheduling service run by William Wong, based in British Columbia, Canada. We prepare and publish Facebook and Instagram posts for the businesses we work with. This policy explains what information we collect, why, and what you can do about it. Questions go to william.nyj.wong@gmail.com.

What we collect

• Business details you give us, such as your business name and contact information.
• Facebook Page and Instagram account details when you connect through Facebook's own login: your Page's ID and name, the ID and username of the Instagram account linked to it, your Facebook user ID, and an access token that lets us publish on your behalf. We never see or store your Facebook or Instagram password.
• Post content: the images, videos, captions and scheduled times for posts we prepare for you.
• Statistics about your account and the posts we publish, such as follower counts, reach, views, likes, comments, saves and shares, as Facebook and Instagram report them. We do not collect information about the individual people who follow or interact with you.
• Basic technical records kept by our hosting provider, such as server logs, to keep the service running and secure.

Permissions we request

• pages_show_list and pages_read_engagement: to list the Pages you manage, so you can choose your business's Page, and to read its name and linked Instagram account.
• business_management: to see Pages and Instagram accounts your business manages through Meta Business Suite, so they can be connected. We do not use it to manage your business settings, ads or people.
• pages_manage_posts: to publish the posts you have agreed to on your Facebook Page.
• instagram_basic: to read your Instagram account's ID and username, so we know which account we are posting to.
• instagram_content_publish: to publish the posts you have agreed to on your Instagram account.
• instagram_manage_insights and read_insights: to read your account and post statistics (such as followers, reach, views and engagement) and show them to you on your private dashboard.

We do not read your messages or the content of comments (only how many there are), and we do not post anything that has not been approved. Your dashboard is reached through a private link that only you are given; we can replace it at any time if it is shared by mistake.

How we use it

We use this information only to provide the service: to schedule and publish your posts, to show you how they are doing on your private dashboard, to show you and us whether your accounts are connected, and to contact you about the service. We do not sell your information, use it for advertising, or share it with anyone except the service providers below.

Service providers and where data is stored

• Vercel hosts the app and stores post images and videos. Videos are deleted once they have been posted.
• Turso hosts our database.
• Meta (Facebook and Instagram) receives the posts we publish to your Page and account.

These providers store data in the United States, so your information may be processed outside Canada.

How long we keep it

• Your access token is kept while your accounts are connected and deleted when you disconnect or remove access.
• Post content is kept while you are a client, and deleted on request or within 90 days after the service ends.
• Statistics are kept while you are a client, and deleted with your other data.
• Deletion requests are completed within 30 days.

Your choices

• You can remove our access at any time in your Facebook settings, under business integrations. When you do, we stop posting and delete your access token.
• You can ask to see, correct or delete your information by emailing william.nyj.wong@gmail.com, or follow the steps on our data deletion page.

Security

Access to the app is password protected, all connections use encryption (HTTPS), and access tokens are stored only on our servers. No system is perfectly secure, but we limit what we collect to what the service needs.

Children

This service is for businesses. It is not directed at anyone under 13.

Changes

If we change this policy, we will update the date at the top and tell current clients about significant changes.

Contact

William Wong, British Columbia, Canada: william.nyj.wong@gmail.com. If you are not satisfied with our answer, you can contact the Office of the Information and Privacy Commissioner for British Columbia.