Privacy Policy

Last updated: 16 July 2026

This Privacy Policy explains what data the social-linker integration ("the app", "we") accesses, why, and how you can revoke access or delete your data.

Who we are

The data controller for this integration is Rovisual, operator of the Rendrr platform. You can reach us at info@robinwessels.com for any questions about your data, or to access or delete it.

What the app does

The app lets you connect your Facebook Pages and Instagram Business accounts so you can schedule and publish posts (images and videos/Reels) to them from one place. It acts only on the accounts you explicitly connect, and only to publish the content you create or schedule.

What data we access and store

Identifiers and display names of the Facebook Pages and Instagram Business accounts you connect.
The OAuth access tokens issued by Meta for those accounts. Tokens are encrypted at rest (envelope encryption) and are used only to publish on your behalf.
The app-scoped user id of the account that connected, used solely to link a later deauthorize or data-deletion request back to your workspace.
The content you schedule: caption text, an optional first comment, the scheduled time, and a reference to the media you selected.

What we do NOT do

We do not sell, rent, or share your data with third parties.
We do not use your data for advertising or profiling.
We do not access anything beyond the permissions (scopes) you granted.

Permissions we request and why

`pages_show_list`	List the Facebook Pages you manage so you can choose which to connect.
`pages_manage_posts`	Create and publish the posts you schedule to your connected Pages.
`pages_read_engagement`	Read basic Page metadata (name, id) needed to publish and to show which Page is connected.
`instagram_basic`	Read the connected Instagram Business account’s id and username.
`instagram_content_publish`	Publish photos and videos (Reels) to your connected Instagram Business account.
`business_management`	Enumerate the Pages and Instagram accounts under your Business so they can be connected.

How long we keep your data

We keep the connected-account records, encrypted tokens, and scheduled content until you disconnect the account or request deletion. When you disconnect, or remove the app in your Facebook settings, we delete the connection and its stored tokens. When you request deletion, we delete all of your data as described below.

Your rights and how to revoke access

Revoke access: remove the app from your Facebook settings (Settings → Security & Login / Business Integrations → remove this app). Meta then notifies our deauthorize endpoint and we disconnect your accounts and delete their tokens.
Delete your data: use Facebook’s "Send Request" data-deletion flow for this app, or contact us at the address above. Our data-deletion endpoint wipes your connected accounts, tokens, scheduled posts, and related records, and returns a confirmation code you can check.

Technical endpoints (called by Meta, not meant to be opened directly):
Deauthorize callback: https://social.robinwessels.com/oauth/deauthorize/meta
Data deletion request: https://social.robinwessels.com/oauth/data-deletion/meta
Deletion status: https://social.robinwessels.com/oauth/data-deletion/status?code=<code>

This policy applies to the social-linker integration operated by Rovisual (Rendrr).