Privacy Policy
Effective Date: December 2, 2025
Introduction
Welcome to Metivate ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media automation platform.
Information We Collect
Information from Facebook
When you connect your Facebook account to Metivate, we collect:
- Profile Information: Your name, email address, and Facebook User ID
- Page Information: Details about Facebook Pages you manage, including page names, IDs, categories, and access tokens
- Instagram Accounts: Information about Instagram Business accounts connected to your Facebook Pages
- Access Tokens: Long-lived access tokens to maintain your connection and perform authorized actions
Information You Provide
- Account Data: Information you provide during registration or account setup
- Usage Data: Information about how you use our platform, including scheduled posts, analytics requests, and feature usage
Automatically Collected Information
- Device Information: Browser type, operating system, IP address, and device identifiers
- Log Data: Access times, pages viewed, and other system activity
- Cookies: We use cookies and similar technologies to enhance your experience
How We Use Your Information
We use your information to:
- Provide Services: Enable social media automation, post scheduling, and analytics
- Authenticate: Verify your identity and maintain secure access to your account
- Communicate: Send you updates, notifications, and support messages
- Improve: Analyze usage patterns to enhance our platform and develop new features
- Comply: Meet legal obligations and enforce our terms of service
Data Sharing and Disclosure
We do not sell your personal information. We may share your data with:
- Service Providers: Third-party vendors who help us operate our platform (e.g., database hosting, analytics)
- Facebook/Meta: When you authorize actions on your Facebook Pages or Instagram accounts
- Legal Requirements: When required by law or to protect our rights and safety
Your Facebook Data
Permissions We Request
We request the following Facebook permissions:
emailandpublic_profile- Basic profile informationpages_show_list- View your Facebook Pagespages_manage_posts- Schedule and publish posts to your Pagespages_read_engagement- Access engagement metrics and analyticsinstagram_basic- Access connected Instagram accountsinstagram_content_publish- Publish content to Instagramads_management- Manage your Facebook ad campaigns
How We Use Facebook Data
Your Facebook data is used exclusively to:
- Display your connected Pages and accounts
- Schedule and publish posts on your behalf
- Provide analytics and insights
- Manage ad campaigns as you direct
Token Storage
We store long-lived access tokens securely in our encrypted database. These tokens are valid for approximately 60 days and are automatically refreshed when possible.
Data Security
We implement industry-standard security measures to protect your data:
- Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL
- Database Security: Access tokens and sensitive data are encrypted at rest
- Access Controls: Strict authentication and authorization controls limit data access
- Monitoring: Continuous monitoring for suspicious activity and security threats
Data Retention
- Active Accounts: We retain your data as long as your account is active
- Inactive Accounts: Data may be retained for up to 90 days after account deletion
- Legal Requirements: Some data may be retained longer to comply with legal obligations
Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and associated data
- Portability: Export your data in a machine-readable format
- Revoke Access: Disconnect your Facebook account at any time
- Opt-Out: Unsubscribe from marketing communications
To exercise these rights, please contact us at privacy@metivate.com.
Children's Privacy
Metivate is not intended for users under 18 years of age. We do not knowingly collect information from children. If we discover that a child has provided us with personal data, we will delete it immediately.
Third-Party Services
Our platform integrates with:
- Facebook/Meta: Subject to Facebook's Data Policy
- MongoDB Atlas: Subject to MongoDB's Privacy Policy
We are not responsible for the privacy practices of these third parties.
International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the new policy on this page
- Updating the "Effective Date" at the top
- Sending you an email notification (for material changes)
Your continued use of Metivate after changes indicates acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: privacy@metivate.com
Address: [Your Business Address]
Compliance
This Privacy Policy complies with:
- General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
- Facebook Platform Terms and Developer Policies
- Other applicable data protection laws
Last Updated: December 2, 2025