Privacy Policy

1. Introduction

This Privacy Policy describes how ASOP-WCC ("we", "our", or "the application") collects, uses, stores, and protects information when you use our social media integrations for automated content publishing. ASOP-WCC is a content automation system designed to help users schedule and publish content to multiple social media platforms.

This policy covers integrations with:

2. Information We Collect

2.1 Account Authentication Information

When you authorize ASOP-WCC to access your social media accounts, we collect and store the following for each connected platform:

2.2 Platform-Specific Data

Pinterest:

• Board IDs for pin destination selection
• Pin creation responses (IDs, URLs)

LinkedIn:

• Person URN (unique identifier)
• Organization IDs (if company page access granted)
• Post creation responses

Instagram/Threads (Meta):

• Instagram Business/Creator Account ID
• Connected Facebook Page ID (required by Meta)
• Media container IDs during publishing
• Post creation responses

Twitter/X:

• User ID
• Tweet IDs and URLs from published content

2.3 Content Data

We process the following content data for publishing purposes:

• Text content: Post captions, descriptions, titles you create
• Image data: Images you provide for posts (temporarily processed during upload)
• Link URLs: Destination URLs associated with your posts
• Hashtags: Tags included in your content
• Alt text: Accessibility descriptions for images

2.4 Usage and Operational Data

We may collect:

• Publishing timestamps: When posts are created or scheduled
• API response data: Success/failure status of publishing operations
• Error logs: Technical information for troubleshooting
• Schedule data: Planned posting times in schedule.json

3. How We Use Your Information

We use the collected information solely for the following purposes:

4. Data Storage and Security

4.1 Local Storage Only

All data is stored locally on your system. Specifically:

4.2 Security Measures

• Access tokens are used only for authorized API calls to official platform endpoints
• Refresh tokens are stored separately and used only for token renewal
• All API communications use HTTPS encryption
• We recommend:
  • Keeping your installation directory secure
  • Not sharing credential files
  • Not committing .env files to version control
  • Regularly rotating tokens when possible

4.3 Data Retention

• Credentials: Retained until you revoke access or delete them manually
• Publishing logs: Retained locally for troubleshooting; you may delete at any time
• Schedule data: Retained until you delete the output folders
• No automatic cloud backup: Data exists only on your local system

4.4 Data Deletion

To delete all stored data:

1. Remove .env file or clear credential values
2. Delete any .{platform}_tokens.json files
3. Delete logs/ directory contents
4. Delete output/ directory contents

5. Data Sharing and Third Parties

5.1 We Do Not Share Your Data

We do not share your data with any third parties. Specifically:

• We do not sell your data
• We do not share your data with advertisers
• We do not share your data with analytics services
• We do not share your data with data brokers
• Your credentials are never transmitted to external servers

5.2 Direct Platform Communication Only

The only data transmission occurs directly between:

6. Platform-Specific Privacy Considerations

6.1 Pinterest

• Data accessed: Boards list, pin creation
• Permissions: boards:read, boards:write, pins:read, pins:write
• Pinterest Privacy Policy: https://policy.pinterest.com/privacy-policy

6.2 LinkedIn

• Data accessed: Profile info for posting, organization pages (if authorized)
• Permissions: w_member_social, openid, email
• Token expiry: 60 days (auto-refresh implemented)
• LinkedIn Privacy Policy: https://www.linkedin.com/legal/privacy-policy

6.3 Instagram (Meta)

• Data accessed: Business/Creator account info, media publishing
• Permissions: instagram_basic, instagram_content_publish, pages_read_engagement
• Requirement: Must be Business/Creator account linked to Facebook Page
• Meta Privacy Policy: https://www.facebook.com/privacy/policy/

6.4 Threads (Meta)

• Data accessed: Threads profile, post creation
• Permissions: threads_basic, threads_content_publish
• Meta Privacy Policy: https://www.facebook.com/privacy/policy/

6.5 Twitter/X

• Data accessed: Tweet posting, media upload
• Permissions: Read and Write access
• Twitter Privacy Policy: https://twitter.com/privacy

7. Your Rights and Choices

You have the right to:

7.1 How to Revoke Platform Access

Pinterest:

1. Go to Pinterest.com → Settings → Security
2. Find ASOP-WCC in "Connected apps"
3. Click "Remove"

LinkedIn:

1. Go to LinkedIn.com → Settings → Data privacy
2. Find "Permitted services"
3. Remove ASOP-WCC

Instagram/Threads (Meta):

1. Go to Facebook.com → Settings → Apps and Websites
2. Find ASOP-WCC
3. Click "Remove"

Twitter/X:

1. Go to Twitter.com → Settings → Security → Apps
2. Find ASOP-WCC
3. Click "Revoke access"

8. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

• Consent: You explicitly authorize each platform connection
• Contract: Processing is necessary to provide the publishing service you requested
• Legitimate Interest: Maintaining logs for troubleshooting and service improvement

9. International Data Transfers

When you use ASOP-WCC:

• Your data is stored locally on your system
• API calls are made directly to platform servers (may be in various countries)
• We do not transfer your data to any third-party international servers

10. Children's Privacy

ASOP-WCC is not intended for use by children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children under these ages.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last Updated" date at the top of this document.

• Material changes will be documented in the application's changelog
• Continued use of the application after changes constitutes acceptance of the updated policy

12. Compliance

This application is designed to comply with:

• Pinterest API Terms of Service
• LinkedIn API Terms of Use
• Meta Platform Terms (Instagram/Threads)
• Twitter/X Developer Agreement
• General Data Protection Regulation (GDPR) principles
• California Consumer Privacy Act (CCPA) principles
• Platform-specific community guidelines

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy:

Developer: Mark Zhou

Website: https://4to1planner.com

Contact Page: https://4to1planner.com/contact.html

GitHub: https://github.com/qingxuantang

14. Consent

When you authorize ASOP-WCC to access your social media accounts, you consent to:

• The collection of authentication tokens as described above
• The use of these tokens to publish content on your behalf
• The local storage of credentials and operational data

You may withdraw consent at any time by revoking platform access and deleting local data.