1. Who we are
This Privacy Policy explains how emilyn (“we”, “us”), operating emilyn.me and the emilyn Studio Services social media management service, collects, uses and protects personal information.
It covers (a) visitors to https://emilyn.me, (b) studios and creators who use our management services, and (c) the people who interact with the Facebook Pages and Instagram accounts we manage for clients.
emilyn is not affiliated with, endorsed by or sponsored by Meta Platforms, Inc. Facebook and Instagram are trademarks of Meta Platforms, Inc.
2. Information we collect
Website visitors. Our web servers record standard request logs: IP address, browser user agent, the page requested, referring page and time of request. If you email us or sign up for our newsletter, we receive your email address and anything you choose to include.
Information we receive from Meta when a client authorizes our app. When a client signs in with Facebook Login or shares assets with us through Meta Business Manager, we receive, depending on the permissions they grant:
- The authorizing person’s Facebook user ID, name and the access tokens Meta issues to our app.
- The list of Facebook Pages and Instagram professional accounts the client has chosen to share with us.
- Content on those accounts: posts, captions, photos, videos, Reels and their publishing status.
- Comments on client posts, including the commenter’s public name or username, profile ID and comment text.
- Aggregated performance metrics (insights) such as reach, impressions, engagement and follower counts.
Information from clients directly. Business contact details, contracts, billing information and the content and schedules clients give us to publish.
We do not collect special-category data (such as health or biometric data), and we do not access private messages unless a client separately authorizes messaging features.
3. How we use information
- To provide the services a client has asked for: publishing and scheduling content, managing comments and producing performance reports for that client.
- To keep our services and the accounts we manage secure, and to detect and prevent abuse.
- To communicate with clients and with people who contact us.
- To operate, maintain and improve our websites.
- To comply with legal obligations and enforce our agreements.
Our legal bases, where the GDPR or similar laws apply, are performance of a contract with our clients, our legitimate interest in operating and securing our services, compliance with legal obligations and, where required, consent.
4. Our commitments for Facebook and Instagram data
Data we obtain through the Facebook and Instagram APIs (“Platform Data”) is handled under Meta’s Platform Terms and Developer Policies. In particular, we:
- Use Platform Data only to provide services to the client who authorized access to that account.
- Do not sell, license or purchase Platform Data.
- Do not use Platform Data to build profiles of individual people, for advertising targeting, or to make eligibility decisions about anyone.
- Do not share Platform Data with third parties except the service providers described in section 5, who process it only on our instructions.
- Delete Platform Data when it is no longer needed, when the client revokes access, or when a person asks us to (see section 8).
6. How long we keep information
Access tokens are kept only while a client’s authorization is active and are deleted when it is revoked or expires.
Content, comments and insights obtained through the Meta APIs are kept for the duration of the client engagement and deleted within 30 days after the engagement ends or access is revoked, unless the client asks us to delete it sooner or the law requires us to keep it longer.
Web server logs are kept for up to 90 days. Business and billing records are kept as long as required for tax and accounting purposes.
7. Security
We protect information with encryption in transit (HTTPS/TLS), encryption of access tokens at rest, least-privilege access controls for our staff, and regular review of who can access client accounts. No system is perfectly secure, but we work to protect your information and will notify affected clients and authorities of a breach as required by law.
8. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email getslimai@gmail.com. We respond within 30 days.
Remove our app’s access. On Facebook, go to Settings & privacy → Settings → Business integrations and remove our app. On Instagram, go to Settings → Website permissions → Apps and websites and remove our app.
Delete your data. Follow the instructions at https://emilyn.me/data-deletion. If you comment on a Page or account we manage, the comment belongs to that client’s account; you can delete it on Facebook or Instagram, and you can ask us to delete any copy we hold.
California residents have the right to know, delete and correct personal information and to not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.
If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.
10. Children
Our websites and services are not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
11. International transfers
We and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
12. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new effective date and, for material changes, notify clients by email.
13. Contact us
emilyn
Email: getslimai@gmail.com