Privacy Policy
Last updated: 19 May 2026
1. Data controller
Victor Romnov (sole proprietor), Finland. Privacy contact: romanovviktor87@gmail.com.
2. Data we process
- Your service account data (email, name, role, technical identifiers).
- Data obtained when you connect Facebook/Instagram via Facebook Login and the Meta Graph API (see section 3).
- Comments and direct messages (DM) from connected Facebook Pages and Instagram accounts.
- Meta advertising campaign metrics and statistics.
- Technical service logs (security events, diagnostics, audit of user actions).
3. Facebook and Instagram connection
The service uses Facebook Login and the Meta Graph API to access Facebook Page and Instagram business account data that you connect yourself through the OAuth flow.
When connecting, the following permissions may be requested:
email,public_profile— basic profile data.pages_show_list,pages_read_engagement,pages_read_user_content,pages_manage_metadata,pages_manage_engagement— your Pages list and management of content, reactions, and comments.pages_messaging— receiving and sending Messenger messages on behalf of a Page.instagram_basic,instagram_manage_messages,instagram_manage_comments,instagram_business_manage_messages,instagram_business_manage_comments— Instagram business account basics, DMs, and comments.business_management— linking Pages to your Business Manager.
Through these permissions the service may receive and store:
- identifiers and names of connected Facebook Pages and linked Instagram business accounts;
- access tokens (stored encrypted and used only on the service backend);
- incoming comments and messages via Meta webhooks and Graph API requests (including inbox sync initiated by you);
- basic sender data (public name, PSID / IGSID).
We do not use this data for profiling or advertising, do not sell it, and do not share it with third parties for marketing or similar purposes, except processors listed in section 7 (hosting infrastructure, Meta, OpenAI when AI drafts are enabled).
4. Purposes of processing
- Providing platform features (unified inbox for comments/messages, ad statistics).
- Advertising and communications analytics in the user interface.
- AI draft and/or auto-reply preparation according to your settings.
- Security, stability, and audit of the service.
5. Legal basis (GDPR)
- Performance of a contract with you — to operate the service.
- Your consent — when connecting Facebook/Instagram via OAuth.
- Legitimate interest — security and diagnostic logs.
6. Retention
- Account and connected Page data — while you use the service and until a deletion request.
- Comments and messages from Meta — until deletion is requested or you disconnect the integration.
- Security and analytics logs — up to 12 months unless law requires otherwise.
- Meta access tokens — until expiry, revocation, or disconnection.
7. Storage and security
Application servers and databases are hosted in Finland (EU/EEA). Processing may involve infrastructure processors (hosting) in the EU/EEA. We do not transfer data outside the EU/EEA except exchanges with Meta platforms under integrations you request and, where needed, AI API providers (OpenAI) for draft generation.
Organizational and technical measures include: encrypted access tokens, role-based access (admin / manager / client), action audit, HTTPS for external connections, and verification of Meta webhook signatures (X-Hub-Signature-256).
8. Your rights
Under the GDPR you may request access, rectification, erasure, restriction, portability, and withdrawal of consent. Contact romanovviktor87@gmail.com or use the Data Deletion page.
9. Data deletion
On request, deletion is completed within 30 calendar days. Instructions are on Data Deletion. You may revoke app access in Facebook/Instagram settings at any time; we then stop receiving new Meta data for that connection.
10. Cookies
This site uses cookies. Details are in our Cookie Policy.
11. Policy changes
The current version is always published at https://fbstat.fun/privacy. Material changes are reflected in the date at the top.
12. Contact
Privacy questions: romanovviktor87@gmail.com, Telegram @victor_manager_1.