Privacy Policy

1. Introduction

Welcome to RMS Smile ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application that integrates with Instagram and Facebook.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Information from Instagram/Facebook

When you connect your Instagram Business Account through Facebook Login, we may collect the following information:

• Profile Information: Your Instagram username, profile picture, and account ID
• Business Account Data: Information about your Instagram Business or Creator account
• Page Information: Information about Facebook Pages connected to your Instagram account
• Content Data: Posts, stories, comments, mentions, and media you create
• Engagement Data: Likes, comments, shares, and other interactions on your content
• Insights Data: Analytics and metrics about your Instagram account performance

2.2 Information You Provide

• Account registration information (email address, name)
• Communication preferences
• Any other information you choose to provide

2.3 Automatically Collected Information

• Log Data: IP address, browser type, pages visited, time spent on pages
• Device Information: Device type, operating system, unique device identifiers
• Cookies and Similar Technologies: We use cookies to maintain sessions and improve user experience

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide Services: To deliver the core functionality of our application
• Account Management: To manage your account and provide customer support
• Analytics: To analyze Instagram content performance and provide insights
• Notifications: To send you notifications about comments, mentions, and other activities
• Improvements: To improve our service, features, and user experience
• Communication: To communicate with you about service updates and features
• Compliance: To comply with legal obligations and enforce our terms

4. Instagram Webhooks

Our application uses Instagram webhooks to receive real-time notifications about:

• New comments on your posts
• Mentions of your account
• Story insights and performance
• Media updates

These webhooks allow us to provide timely notifications and automated responses to your Instagram activities.

5. Data Sharing and Disclosure

5.1 We Do NOT Sell Your Data

5.2 We May Share Information With:

• Service Providers: Third-party companies that help us operate our service (hosting, analytics, customer support)
• Meta Platforms: We share data with Facebook/Instagram as required by their API terms
• Legal Requirements: When required by law, court order, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share information

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:

• Account information: Retained while your account is active
• Instagram data: Retained as long as you maintain the connection
• Analytics data: Aggregated data may be retained indefinitely
• Log data: Typically retained for 90 days

When you disconnect your Instagram account or delete your account with us, we will delete your data within 30 days, except where we are required to retain it for legal purposes.

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data
• Portability: Request transfer of your data to another service
• Opt-out: Unsubscribe from marketing communications
• Revoke Access: Disconnect your Instagram account at any time

7.2 How to Exercise Your Rights

To exercise any of these rights, you can:

• Access your account settings within our application
• Disconnect your Instagram account through Instagram settings
• Contact us at [email protected]

7.3 Instagram/Facebook Permissions

You can manage permissions granted to our app through your Facebook account settings:

• Go to Facebook Settings → Apps and Websites
• Find our application and remove or edit permissions

8. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure storage of access tokens

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Third-Party Services

Our service integrates with:

• Facebook/Instagram: Subject to Meta's Data Policy and Terms of Service

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

10. Children's Privacy

Our service is not intended for users under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our service, you consent to the transfer of your information to our facilities and service providers.

11.1 European Economic Area (EEA) Users

If you are located in the EEA, we ensure appropriate safeguards are in place for data transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legal mechanisms as appropriate

12. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access your personal information
• Right to request deletion of personal information
• Right to equal service and price

To exercise these rights, contact us at [email protected].

13. GDPR Compliance (European Users)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on consent, contract performance, and legitimate interests
• Data Controller: SmileFace is the data controller
• DPO Contact: [email protected]
• Right to Lodge Complaint: You can file a complaint with your local data protection authority

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)
• Displaying a prominent notice in our application

Your continued use of our service after changes constitutes acceptance of the updated policy.

15. Cookie Policy

We use cookies and similar tracking technologies. Types of cookies we use:

• Essential Cookies: Required for basic functionality
• Performance Cookies: Help us improve our service
• Functionality Cookies: Remember your preferences
• Analytics Cookies: Help us understand how you use our service

You can control cookies through your browser settings. Note that disabling cookies may affect functionality.

16. Contact Us

17. Meta Platform Policies

Our use of Instagram and Facebook APIs is subject to:

• Meta Platform Terms
• Meta Platform Policy
• Instagram Platform Policy

18. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify you within 72 hours of becoming aware of the breach
• Describe the nature of the breach and data affected
• Provide information about steps we are taking to address the breach
• Advise you on steps you can take to protect yourself
• Notify relevant authorities as required by law

19. Your Consent

By using our service, you consent to this Privacy Policy and agree to its terms.