Legal
Privacy policy
Draft — not yet final. The parts marked below are still to be written by A3.
Who we are
Still to be written
[To be written by A3 — the legal name of the company behind A3, its registered address, and its data protection officer or representative where one is required.]
What we collect
Still to be written
[To be written by A3 — the personal data A3 collects about the people who use it (their account, their organisation, billing, usage and logs), and about the contacts its customers keep in it.]
When someone connects a Facebook Page or an Instagram professional account through A3's own Meta app, A3 keeps:
- the Page's or the account's id, name, username and picture;
- its access token, sealed and never sent to a browser;
- the app-scoped id of the Facebook user who connected it, so that a deletion request from Facebook can be matched to it;
- each post published through it: its id, its link, and the figures the network reports for it a day and a week after it goes out.
Why we use it
Still to be written
[To be written by A3 — the purposes for which A3 uses each kind of data.]
Legal bases
Still to be written
[To be written by A3 — the legal basis for each purpose, and A3's role (controller or processor) for its own users' data and for its customers' contacts.]
Services we use
A3 calls these services with its own keys, once the platform's operators have connected them:
- Resend — sends A3's own emails: confirming an address, resetting a password, invitations and notices.
- Stripe — takes payment for A3's plans.
- Cloudflare Turnstile — checks that a sign-up comes from a person.
- Meta — Facebook Login, when someone connects a Facebook Page or an Instagram account through A3's own Meta app.
- Telegram — alerts A3's operators when something on the platform needs them.
- OpenRouter — writing help on A3's own sites and tools; never for a customer's content.
- HubSpot — A3's own list of people who ask about its plans, when connected.
Still to be written
[To be written by A3 — where each of these processes data and the safeguards in place; any other service this deployment uses, such as the hosting provider and backup storage; and how A3 describes the services each customer connects with its own keys, which act for that customer.]
How long we keep it
When a Facebook Page or an Instagram account is disconnected, A3 forgets its access at once and deletes its posts' figures: what the network reported and the clicks on their links.
Still to be written
[To be written by A3 — how long A3 keeps each kind of data, including backups and logs.]
International transfers
Still to be written
[To be written by A3 — where data is stored and processed, and the safeguards for transfers between countries.]
Your rights
Still to be written
[To be written by A3 — the rights people have over their data, how to use them, and where to complain.]
How to contact us
Still to be written
[To be written by A3 — the address to write to about privacy.]
Changes to this policy
Still to be written
[To be written by A3 — how A3 tells people when this policy changes.]