Privacy Policy.

Last updated

31 July 2025

1. Data Controller

EquaTalent FZ‑LLC
Dubai Internet City, in5 Tech Building
Dubai, United Arab Emirates
Email: tech@equatalent.com

2. Scope of this Policy

This Policy applies when you:
- Authorize the Comment Shield app (as listed on Meta for Developers) to access your Facebook Page(s) or Instagram Business Account(s) via Meta OAuth;
- Use our web dashboard or associated widgets to view moderation activity;
- Communicate with us via email or support channels.

3. Information We Collect

Category	Source	Typical Fields
Account Data	You / Meta OAuth	Name, profile picture, email, Facebook User ID / Page ID, Instagram Business Account ID, OAuth tokens
Comment Data	Instagram Graph API	Comment ID, Post ID, commenter User ID, comment text, timestamp, language
Moderation Logs	Generated by our Service	Spam flag, deletion timestamp, notification status
Usage Data	Your browser/device	IP address, user-agent, pages visited, dashboard activity

We do not collect Facebook or Instagram passwords.

4. How & Why We Use Your Data

Purpose	Description	Legal Basis (GDPR)
Deliver & secure Service	Authenticate via Meta OAuth, retrieve comments, run AI classification, delete spam, send notifications	Performance of a contract / legitimate interests
Model training	Store de-identified comments to improve moderation accuracy	Legitimate interests
Analytics & support	Gather operational stats, crash logs, and app performance metrics	Legitimate interests
Marketing updates (opt-in)	Send product news or promotional offers	Consent (opt-in only)
Legal & audit compliance	Maintain deletion records, logs, and audit trails	Legal obligation

5. Sharing Your Information

We never sell your personal data. We share information only with:
- Service providers (e.g. hosting, email, security services) under strict agreements;
- Meta Platforms, Inc., when we issue deletion commands or fetch comment metadata via Graph API;
- Legal authorities when required by law;
- Potential business acquirers or during mergers, under confidentiality safeguards.

6. Meta Platform Data Use

We access Meta Platform Data via permissions such as pages_manage_metadata, pages_manage_engagement, instagram_manage_comments, and instagram_business_basic.
- Purpose: To fetch, classify, and optionally delete spam or negative comments on Instagram Business accounts; display moderation results only.
- Retention: Comment text is cached for up to 30 days; moderation logs are kept for up to 12 months.
- No third-party sharing: We do not share this data beyond necessary Meta requests.
- Revocation: You may disconnect or revoke access via Facebook settings > Business Integrations.

We strictly comply with Meta Platform Terms and Developer Policies. We do not use Meta data for user profiling, advertising, or unrelated analytics.

7. Your Rights & Deletion Options

You have rights to request deletion, correction, or access to your personal data as permitted by applicable laws.

To revoke access or request deletion:
- Remove the Comment Shield integration in your Facebook settings (Settings > Business Integrations);
- Email: tech@equatalent.com with the subject “Delete Comment Shield Data” to request deletion.

We will respond within 30 days and confirm completion of deletion where applicable.

8. Data Retention Policy

- Comments older than 30 days are purged automatically.
- Moderation logs are anonymized after 12 months.
- Account data is retained until you delete your Comment Shield account or revoke Meta access.

9. International Data Transfers

We use servers in the EU (Frankfurt) and U.S. For transfers outside the EEA, we rely on standard contractual clauses or adequacy decisions.

10. Security Measures

We utilize:
- TLS 1.3 encryption for data in transit
- Role-based access and least privilege controls
- Periodic penetration testing
- ISO 27001-certified infrastructure

While no system is infallible, we maintain industry-standard protections.

11. Cookie Use

Only first-party cookies are used for session management and login. No third-party tracking or advertising cookies are used.

12. Children’s Privacy

Our Service is not intended for children under 16. We do not intentionally collect data from minors. Please contact us if you believe otherwise.

13. Updates to This Policy

We may update this policy. We will notify you via email or in-app banner at least 14 days before any material changes.

14. Contact Information

Data Protection Officer (DPO): tech@equatalent.com
Address: EquaTalent FZ-LLC, Dubai Internet City, Building XYZ, Dubai, UAE