Effective September 19, 2026
Privacy Policy
This policy explains how PromoParrot collects, uses, stores, and deletes information for projects, campaigns, payments, and connected social accounts.
1Information you provide
We collect information you submit, including names, business names, email addresses, phone numbers, service locations, campaign goals, budgets, project details, content, approvals, messages, and communication preferences.
2Meta account information
When you connect Facebook or Instagram, Meta may provide an account or Page identifier, Page or account name, account type, approved permissions, access token, token expiration, and the Pages you are authorized to manage. We also retain the campaign association and publishing results such as a returned post identifier or error status.
3How we use information
We use information to respond to inquiries, authenticate connected accounts, associate the correct social account with a campaign, prepare and publish authorized content, provide campaign updates and analytics, process payments, secure the service, troubleshoot failures, and maintain required business records.
4Tokens and passwords
PromoParrot does not receive your Facebook or Instagram password. Access tokens are encrypted at rest and are not displayed to clients or staff. OAuth requests use short-lived, signed verification values to prevent a connection from being attached to the wrong campaign.
5Sharing and service providers
We do not sell personal information. Information is shared only as needed with providers supporting the service, such as Meta, hosting, storage, payments, email, and communications, or when required by law. Those providers process information under their own terms and privacy practices.
6Media and campaign files
Project media and campaign content may be stored with secure service providers and transmitted to a selected social platform when publishing is requested. Private campaign and delivery links should not be shared unless you intend to grant access.
7Retention
Campaign and business records are retained while needed to provide services and for reasonable legal, security, accounting, and dispute-resolution purposes. Connected-account credentials are removed when the connection is deleted and no other active campaign requires that same connection.
8Your choices and deletion
You may revoke PromoParrot access in your Meta account settings at any time. You may also request access correction or deletion by following the User Data Deletion instructions linked below. Revoking or deleting access prevents future connected publishing.
9Security
We use reasonable administrative and technical safeguards, including encrypted token storage, access controls, signed OAuth state, and activity records. No internet service can guarantee absolute security.
10Children and changes
PromoParrot is a business service not directed to children under 13. We may update this policy as services or legal requirements change and will post the revised effective date here.
11Contact
Privacy and data-deletion questions can be sent to promoparrothq@gmail.com.