Privacy policy

Who this covers

Insito Studio is a one-person practice run by Chuck Pfahler. This policy covers this website, and it covers the Insito Studio application that connects to Facebook and Instagram on behalf of clients who have asked me to manage their accounts.

What this website collects

If you use the contact form, I receive what you type into it: your name, your email address, and your message. It comes to me by email. I do not sell it, share it, or add you to a mailing list, because there isn't one.

The site sets no advertising cookies and runs no third-party trackers.

What the Insito Studio application accesses, and why

Clients who hire me to manage their publishing connect their Facebook Page and, where relevant, the Instagram account linked to it. They grant that access themselves, through Facebook, and they can withdraw it at any time. I never ask for or hold anyone's password.

With that permission the application can:

• Publish and schedule posts to the Page and Instagram account, from content the client has approved
• Read comments left on those posts, and publish replies to them on the client's behalf
• Read performance data for the Page, the Instagram account, and, if the client connects an ad account, their advertising results
• List the Pages a connecting user manages, so the right one can be selected

That is the whole extent of it. The application does not read private messages unless a client specifically asks for that and grants the separate permission, it does not access personal profiles or friend lists, and it does not use anyone's data to train anything.

What is stored, and where

For each connected account I store an access token issued by Facebook, the account identifiers needed to publish to the right place, and the content and scheduling of posts made through the system. Comments retrieved from a client's posts are stored so that new ones can be told apart from ones already seen and answered.

This is held on servers I control, and it is kept only while the client engagement is live.

Who else sees it

Nobody. I do not sell data, I do not share it between clients, and I use no advertising or analytics intermediaries in the application. Client A's data is not visible to client B.

Content published through the application necessarily goes to Facebook and Instagram, which is the point of it, and is then governed by Meta's own terms.

Deleting your data

Any client can disconnect at any time from their own Facebook settings, which immediately revokes the application's access. To have stored data removed as well, see data deletion, or email me and I will confirm when it is done.

Children

This is a business service. It is not directed at anyone under 18 and I do not knowingly collect anything from them.

Changes

If the application's permissions change, this page changes with them, and the date at the bottom moves. I will not quietly widen what is collected.