Privacy policy

Information we process

We process account and workspace information you provide, security and audit records needed to operate the service, and content you choose to create or store.

• For an optional Meta connection: provider account identifiers, Page and professional Instagram identifiers, encrypted access tokens, granted scopes and token expiry.
• For approved publishing: the selected content, operation status, provider receipt and official metrics returned for that content.
• On public pages only, Google Analytics starts with analytics storage denied and may send cookieless measurements such as page, device, referrer and coarse location information under Google’s terms. If you allow analytics, analytics storage and fuller measurement are enabled. Private workspaces, documents and tenant content are excluded.
• The owner may connect Google Analytics with read-only permission to display aggregated property metrics. FlexiWork360 never asks for or stores a Google, Facebook or Instagram password.

Why we process it

We use information to provide requested features, protect accounts, keep an auditable operation history, comply with legal obligations and resolve incidents. A provider connection does not publish anything by itself.

Sharing and international processing

Information is sent to Meta only when you connect the provider or explicitly approve an operation that needs its APIs. Public-page analytics is sent to Google only after consent; aggregate dashboard data is read only after the owner connects the official property. Each provider processes information under its own terms and privacy policy. We do not sell personal information.

Retention, security and choices

Provider credentials are encrypted at rest and access is limited by workspace and role. We retain connection data while active and necessary audit records. You can disconnect Meta, revoke access at Meta and request deletion or correction.

Local public visits and commercial funnel

Each successful public page request is recorded for up to 30 days as an anonymous visit, with approximate country from local GeoIP. No raw IP, exact coordinates, full URL, search terms, email or message content is stored in this log. If you allow analytics, a pseudonymous identifier links public visits, pricing clicks, institutional contact requests and provider-confirmed subscription stages. Refusing prevents that linkage; withdrawing stops new links and removes pending checkout attribution. GeoIP and browser identifiers do not prove identity. Billing records have their separate retention obligations. This retention applies to the active analytics store; infrastructure backup handling remains separately governed.