urieljsc Privacy Policy
Last updated:
Uriel JSC operates urieljsc (the “App”). This policy explains how we collect, use, share, and retain personal information when you use the App to manage authorized Facebook Pages and Instagram professional accounts, including their messages, content, and interactions.
1. Information we collect
- Connected accounts: Facebook Page and Instagram professional account identifiers, names, usernames, profile pictures, connected account details, and authorization tokens needed to provide the features you enable.
- Messages and chat participants: Conversations, message text, attachments made available by Meta, timestamps, sender and recipient identifiers, and available participant names, usernames, and profile pictures. We receive only the profile fields Meta permits for the relevant interaction. Messaging access does not automatically give us a person's email address, phone number, or full profile.
- Posts and interactions: Post and media content, captions, publication identifiers and timestamps, comments, replies, available reaction or like counts, and identifiers or profile details of people interacting with content where Meta makes those details available. Contact details are processed if a person voluntarily includes them in a message or comment.
- Information you provide: Name, email address, phone number, and information you submit when registering, purchasing, or contacting support.
- Technical information: Connection and request information, such as IP address, browser information, request time, and error or access logs, may be processed by the App and its hosting providers to deliver and secure the service.
2. How we use information
We use information to operate and improve our services, handle transactions, send service-related updates, and answer support requests.
- Connect the Facebook Pages and Instagram professional accounts you are authorized to manage.
- Display Page messages and Instagram direct messages with available participant information so authorized business users can review conversations and identify the context of customer inquiries.
- Create and publish Facebook Page posts and Instagram content that you submit or authorize.
- Display comments, replies, and available engagement information so you can understand interactions with your content.
- Keep connected inboxes and content views up to date using permitted API requests and event notifications.
Access is limited to connected business assets and data available through Meta's APIs. We do not gain access to unrelated private conversations or unrestricted personal profiles. Meta may provide only aggregate interaction counts rather than the identities of everyone who liked, reacted to, or viewed a post.
Meta permissions and their purposes
The permissions requested depend on the features you enable, the account connection method, and Meta's approval. We request access for the purposes below only when needed. Listing a permission here does not grant access; you authorize access through Meta.
| Permission | Purpose |
|---|---|
pages_show_list | Show the Pages you manage so you can choose which to connect. |
pages_messaging | Access Page conversations and messages, including participant details made available for those conversations. |
pages_read_engagement | Read Page content and available engagement information and Page metadata needed by connected features. |
pages_read_user_content | Read user-generated content on the Page, including comments and available author details. |
pages_manage_posts | Create and publish posts on your selected Page at your direction. |
pages_manage_metadata | Subscribe the connected Page to webhook notifications to keep messages and supported activity up to date. |
| Facebook Login | Instagram Login alternative | Purpose |
|---|---|---|
instagram_basic | instagram_business_basic | Read connected professional account profile information and media available to the App. |
instagram_manage_messages | instagram_business_manage_messages | Read professional account conversations and messages with available participant information. |
instagram_content_publish | instagram_business_content_publish | Publish supported Instagram content that you submit or authorize. |
instagram_manage_comments | instagram_business_manage_comments | Read comments and available commenter information associated with the connected account's content. |
Instagram access is for eligible professional accounts. Facebook Login uses the linked Facebook Page where required; Instagram Login uses its own permission set. Some permissions support more actions than this App uses. Access remains limited by Meta's API rules, account authorization, and the enabled features.
4. Retention and security
We keep connected account data, messages, participant details, and interaction records only while needed to provide the connected features. After an account is disconnected, we delete its stored Meta-derived data from active systems within 90 days, or sooner following a verified deletion request. Access tokens are removed or invalidated when a connection is ended. Routine technical logs are kept for up to 90 days. Residual backup copies expire within a further 90 days after deletion from active systems and are not used for ordinary operations. If a backup is restored, applicable deletions are reapplied. Limited records may be retained longer where legally required or necessary to address a specific security incident or legal dispute, with access restricted to that purpose.
We take reasonable steps to protect personal information against loss, misuse, and unauthorized access, changes, or disclosure. No method of transmission or storage is completely secure.
5. Your choices and requests
You can contact us using the details below to ask about your information or request access, correction, or deletion. Available rights depend on applicable law.
You can review or revoke the App's permissions in your Facebook or Instagram account settings. Disconnecting the App stops future access through those permissions; it does not itself request deletion of information already stored by us.
You may withdraw authorization by removing the App through Meta settings. Page and Instagram account managers, as well as people whose messages or interactions are processed, can contact us to request access, correction, deletion, or restriction, or to object to processing where applicable. Depending on your location, you may also have rights to data portability and to complain to your local data protection authority.
6. How to request data deletion
Full instructions are also available on our Data Deletion Instructions page.
- Send an email to contact@urieljsc.com with the subject “Data deletion request — urieljsc”.
- Include the relevant Page or Instagram account name and your account email or platform-scoped user ID, if known, so we can locate your records. If you contacted a business through messaging, include that business account and an approximate conversation date. Do not send your Facebook password or access tokens.
- We may request information reasonably needed to verify that the account belongs to you before acting on the request.
We respond to deletion requests and delete the relevant data from active systems within 30 days after verifying the request, unless applicable law requires a shorter period. We confirm completion by email. If the law permits an extension or requires us to retain specific records, we explain the reason and applicable timeframe. Backup expiry and restricted retention exceptions are described in section 4. Deletion from the App does not itself remove posts, messages, or other records held independently by Meta or the business account; those must be managed through the relevant account or service.
8. Where information is processed
Uriel JSC is headquartered in Vietnam. Information may be processed in Vietnam and other countries where Meta, Cloudflare, or our infrastructure providers operate. Those countries may have different data protection laws. Where applicable law requires safeguards for an international transfer, we use the required contractual or other lawful safeguards. Contact us for information about the processing locations and safeguards relevant to your account.
9. Children's privacy
The App is intended for business account managers aged 18 or older and is not directed to children. Messages and public interactions sent to connected business accounts may nevertheless contain information about minors; we use that information only for the business communication purposes described here. If you believe a child's information has been provided inappropriately, contact us so we can review it and delete it where appropriate.
10. Changes to this policy
We will publish updates on this page and revise the last updated date. Where required by applicable law, we will provide additional notice or obtain consent.