Policy for Meta

Last Updated: 21 October 2026

PRIVACY POLICY

Endpoint Clients

Website: https://www.endpointclients.com/

Contact Email: info@endpointclients.com

1. Introduction

Endpoint Clients ("Endpoint Clients," "we," "us," or "our") respects your privacy and is committed to protecting the personal information and social media account data entrusted to us.

This Privacy Policy explains how we collect, access, use, process, store, share, and delete information when individuals or businesses use our social media automation software, websites, connected applications, integrations, and related services (collectively, the "Services").

Our Services enable businesses, marketing teams, and authorized users to connect supported social media accounts through official authorization processes, including OAuth, and automate activities such as content scheduling, publishing, and related workflow management.

This policy applies to our customers, their authorized team members, and individuals who connect social media accounts to our Services.

By using our Services, you acknowledge the data practices described in this Privacy Policy. Where consent is required by applicable law, we will request it separately.

2. Information We Collect

We collect and process information necessary to provide, maintain, secure, and improve our Services.

2.1 Account and Business Information

When you register, subscribe, contact us, or use our platform, we may collect:

Full name and business or organization name.
Email address and contact information.
Account identification and login information.
Workspace details, preferences, and authorized team memberships.
Subscription information and transaction records, if paid subscriptions are offered.
Communications submitted to our support team.

2.2 Connected Social Media Account Information

When you connect a social media account through an authorized integration, such as Facebook or Instagram, we may receive information permitted by the relevant platform and the permissions you grant.

This information may include:

Social media profile name, username, and account identifiers.
Profile images and basic account information.
Facebook Page names and identifiers.
Instagram professional account information.
Business or organization account identifiers.
Account connection status and granted permissions.
Access tokens, refresh tokens where provided, and token expiration information.
Information relating to content publishing and other specifically authorized features.

We access only the information made available by the platform's approved APIs and required for the functionality authorized by the user.

The specific information available depends on the platform, account type, integration, and permissions granted.

2.3 OAuth Authentication and Authorization Data

We use official third-party authorization mechanisms, including OAuth, to connect social media accounts securely.

When you authorize an integration, the relevant social media provider may issue an access token allowing our application to perform approved actions on your behalf.

We may securely process and retain these tokens while necessary to maintain the authorized connection and provide requested automation services.

We do not require you to disclose your Facebook, Instagram, or other third-party social media account passwords directly to Endpoint Clients.

2.4 Content and Automation Information

To perform social media automation, we may process:

Images, videos, captions, text, hashtags, and other content submitted for publishing.
Selected social media accounts and publishing destinations.
Content calendars and scheduled publishing dates.
Workflow configurations, automation settings, and publishing instructions.
Publishing status, timestamps, errors, and delivery records.
Platform-generated post identifiers and links.
Content performance information or insights, where separately supported and authorized.

This information is used to operate workflows configured or approved by our customers.

2.5 Technical and Usage Information

When you access our website or application, we may collect technical information, including:

IP address and approximate location inferred from that address.
Device and browser information.
Operating system information.
Application usage records and diagnostic information.
Login events and security logs.
Cookies or similar technologies used for authentication, security, and functionality.

Where non-essential analytics or tracking technologies are used, we will provide relevant notices and obtain consent where required by law.

3. How We Use Your Information

We use information collected through our Services for the following purposes:

Account Management: To register users, authenticate access, manage workspaces, and provide customer support.

Social Media Integration: To connect authorized Facebook, Instagram, and other supported social media accounts using official APIs and authorization mechanisms.

Automated Content Publishing: To publish or schedule customer-provided or customer-approved content on connected social media accounts according to authorized instructions.

Workflow Execution: To execute automation rules, manage scheduled tasks, and provide publishing status updates.

Service Operations: To maintain, troubleshoot, secure, and improve the platform.

Customer Communications: To provide service notifications, account updates, support responses, and important operational information.

Legal and Security Compliance: To prevent unauthorized use, investigate security incidents, comply with applicable laws, and meet relevant platform requirements.

We do not use Meta platform data for unrelated advertising, sell such data, or use connected social accounts for unauthorized activities.

4. Social Media Permissions and Access Tokens

Our Services rely on permissions granted by users through supported social media platforms.

When you connect an account:

You are redirected to the relevant platform's official authorization process.
The platform displays the permissions requested by our application.
You choose whether to authorize access.
The platform may return an authorization code or access token.
Our system uses the resulting authorization to perform the activities you have approved through our Services.

Depending on the enabled integration, these activities may include accessing account identification information, managing publishing workflows, uploading media, and publishing content.

Permissions are limited to the features requested, granted, and approved by the relevant platform.

We do not claim ownership of your connected social media accounts.

Access tokens are used to provide the functionality you have authorized and are not sold or disclosed to unrelated third parties.

We do not access private messages, run advertising campaigns, or perform other unrelated account actions unless such functionality is separately offered, clearly disclosed, and specifically authorized.

5. Automated Publishing and User Control

Our Services may perform publishing activities automatically after a customer configures and authorizes a workflow.

This means that an approved post may be published at its scheduled time without requiring the customer to manually log in again.

Customers remain responsible for their publishing instructions, selected destinations, schedules, and content.

Customers may request the cancellation of pending automations or the disconnection of linked accounts.

Once authorization is revoked or an account is disconnected, our Services will stop using that connection for new publishing activity. Any operation already completed or transmitted to a third-party platform may not be reversible.

6. Legal Bases for Processing

Where applicable data protection laws require a legal basis, we process personal information under one or more of the following grounds:

Contractual necessity: To provide the Services requested by our customers.
Consent: Where consent is required, including certain optional processing activities.
Legitimate interests: To operate, secure, maintain, and improve our Services, where those interests are not overridden by applicable individual rights.
Legal obligations: To comply with laws, regulations, and legally binding requests.

For customer-controlled social media content and related personal information, Endpoint Clients may act as a service provider or data processor acting on customer instructions, depending on the circumstances and applicable law.

7. How We Share Information

We do not sell personal information or social media access tokens.

We may share limited information with the following categories of recipients where necessary and legally permitted:

Social Media Platforms: Including Meta platforms such as Facebook and Instagram, and other platforms expressly connected by customers, to authenticate integrations and publish authorized content.

Technology Service Providers: Including hosting, database, infrastructure, workflow processing, security, monitoring, and technical support providers that assist us in operating the Services.

Payment Processors: Where subscriptions or paid services are available, to process payments and maintain related records.

Legal Authorities: Where disclosure is required by applicable law or a valid legal process.

Corporate Successors: In connection with a lawful merger, acquisition, restructuring, or transfer of business assets, subject to applicable data protection obligations.

Service providers handling personal data must be subject to appropriate confidentiality, security, and contractual restrictions.

Access tokens and other restricted platform data will be shared only where permitted by the relevant platform's policies and necessary for authorized service operations.

8. Data Storage and Security

We use appropriate technical and organizational safeguards designed to protect personal information and connected account credentials against unauthorized access, disclosure, alteration, and loss.

These safeguards include measures intended to protect authentication information, restrict access to sensitive data, secure communications, and monitor service security.

Access to social media authorization data is limited to the systems and personnel that require it for legitimate operational purposes.

No internet-connected service can guarantee absolute security. We continuously assess security risks and take appropriate steps to address identified vulnerabilities.

If a security incident requires notification under applicable law or relevant platform requirements, we will provide the necessary notifications.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to legal, contractual, and platform-specific requirements.

In particular:

Account information may be retained while an Endpoint Clients customer account remains active.
Social media access tokens may be retained while the relevant account connection remains authorized and necessary for service operation.
Scheduled content and automation configurations may be retained while required to provide the requested functionality.
Publishing records and diagnostic logs may be retained for legitimate operational, security, or legal purposes.
Information that is no longer necessary will be deleted or anonymized in accordance with applicable requirements.

We will delete applicable platform data without undue delay when required by a valid user deletion request, account closure, the relevant social media platform, or applicable law, unless lawful retention is required or an applicable permitted exception exists.

10. User Data Deletion Instructions

Endpoint Clients provides a method for individuals to request deletion of personal information and social media platform data associated with our Services.

To request deletion of your data:

Step 1: Send an email to info@endpointclients.com.

Step 2: Use the email subject line: "Data Deletion Request – Endpoint Clients".

Step 3: Include the email address associated with your Endpoint Clients account and identify the relevant connected social media account or platform, where known.

Step 4: Indicate whether you wish to delete data associated with a particular social media connection or request deletion of your entire Endpoint Clients account.

Step 5: Our team will review the request, perform reasonable identity or authorization verification where necessary, and process the deletion in accordance with applicable laws and platform requirements.

Eligible deletion requests may result in the removal of:

Stored social media access and refresh tokens.
Social media profile identifiers and connection information.
Associated platform data no longer required for an authorized purpose.
Pending automation configurations associated with the deleted connection.
Customer account information and stored content covered by the request.

Certain information may be retained where legally required or permitted, including limited records necessary to meet compliance or security obligations.

Important: Removing information from Endpoint Clients does not automatically remove content already published directly on Facebook, Instagram, or another social media platform. Users may need to manage previously published content directly through those platforms.

Revoking Access

Users may also revoke Endpoint Clients' access through the connected social media platform's account settings, such as the relevant applications or business integrations management area.

Revoking access prevents continued authorized API access, but a separate deletion request may be necessary to remove information already retained within our systems.

Data deletion requests can be submitted through the email process above without logging into the Endpoint Clients platform.

11. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

Request access to personal information we hold about you.
Request correction of inaccurate information.
Request deletion of eligible personal information.
Object to or restrict certain processing activities.
Request a portable copy of eligible information.
Withdraw consent where processing relies on consent.
Submit a complaint to an applicable data protection authority.

Requests may be directed to info@endpointclients.com.

We may need to verify your identity or authority before processing certain requests.

We will not unlawfully discriminate against users for exercising applicable privacy rights.

12. International Data Transfers

Endpoint Clients serves customers internationally and may use service providers or technical infrastructure located in countries other than the country in which a user resides.

Where personal information is transferred internationally, we will use appropriate safeguards and lawful transfer mechanisms where required by applicable data protection laws.

13. Third-Party Platforms

Our Services integrate with independently operated third-party platforms, which may include Facebook, Instagram, LinkedIn, YouTube, and other supported services.

Each third-party platform operates under its own privacy policy, terms of service, developer policies, and technical requirements.

Endpoint Clients is not responsible for the independent privacy practices of those platforms.

Users should review the relevant platform's terms and privacy notices before authorizing integrations.

14. Children's Privacy

Our Services are designed for businesses and authorized professional users aged 18 or older.

We do not knowingly collect personal information directly from children for the purpose of providing customer accounts.

If we become aware that personal information has been collected in violation of applicable children's privacy laws, we will take appropriate steps to delete it.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, legal requirements, security practices, or third-party integrations.

The latest version will be made publicly available with an updated effective date.

Where required by law, we will provide additional notice or obtain consent before material changes take effect.

16. Contact Information

If you have questions about this Privacy Policy, the handling of your personal information, social media integrations, or data deletion requests, please contact:

Endpoint Clients

Website: https://www.endpointclients.com/

Email: info@endpointclients.com

Office: New City Phase 2, F-Block, Street 6B, House # 1, Wah Cantt, Punjab 47040

For privacy-related requests, use the subject line: Privacy Request – Endpoint Clients.

For data deletion requests, use: Data Deletion Request – Endpoint Clients.