Privacy Policy

Last updated: [date of launch]

Early-stage notice: Flowesta is a new product. This policy accurately describes what the app actually does and what data it actually collects today, grounded directly in its codebase — it has not yet been reviewed by a lawyer. Replace the bracketed placeholders below with real values, and get real legal review, before this is relied on for Meta App Review or public launch.

What Flowesta is

Flowesta automates content creation and posting to Facebook Pages on your behalf: AI-generated text, image, and video posts, plus automated scheduling, optional YouTube-based content, and optional TikTok cross-posting.

Information we collect

We collect only what's needed to run your account and post on your behalf:

Account information: your email address and a securely hashed password (we never store your password in plain text).
Facebook Page access tokens: when you connect a Page, you provide an access token (via your own Meta developer app). We store this token to publish posts to that Page on your behalf. We do not use this token for anything other than posting content and checking a Page's own basic status.
TikTok account information (optional): if you connect TikTok, we request basic profile info and video posting/upload permission (user.info.basic, video.publish, video.upload) to cross-post the same video content there. We do not request or receive any other TikTok data.
Google Drive access (optional): if you choose Google Drive as a content source for a Page, we store the credentials needed to read the media files you point us to. We only read files from folders you explicitly provide — never your broader Drive account.
Content you provide or generate: the posts, images, and videos Flowesta creates or publishes through your account.

How we use your information

To authenticate you and keep your account secure.
To generate and publish content to the Facebook Pages (and, optionally, TikTok account) you've connected, on the schedule you configure.
To send you account-related email — signup verification codes and password reset codes.
To diagnose and fix problems with your account's posting (e.g. a failed post or an expired token).

We do not sell your data. We do not use your Facebook or TikTok data for advertising, and we do not share it with third parties except the services strictly required to operate Flowesta (e.g. our email delivery provider, for the account emails above).

Data retention and deletion

We retain your account data for as long as your account is active. If you delete your account [describe the real deletion flow once built], we delete your stored access tokens and account data within [X days]. You can disconnect a Facebook Page, TikTok account, or Google Drive source at any time from your dashboard, which removes the associated stored credentials immediately.

Security

Passwords are hashed, never stored in plain text. Access tokens are stored in our database and are never logged in full. Account sessions are authenticated and time-limited.

Children's privacy

Flowesta is not directed at children under 16, and we do not knowingly collect information from them.

Changes to this policy

If this policy changes in a material way, we'll update the date at the top of this page.

Contact

Questions about this policy or your data: [support email, once set up]