PUBLIC LEGAL DOCUMENT

Privacy Policy

This policy explains how seifelleathy Studios collects, uses, stores and protects information when people use seifelleathy Studios Manager, including its authorized Meta and TikTok integrations.

Effective October 14, 2026Operator: seifelleathy StudiosContact: seifelleathy@gmail.com

This is the privacy policy of seifelleathy Studios. Meta and TikTok operate under their own privacy policies. Connecting an account does not make this service part of, endorsed by, or controlled by either platform.

1. Scope and controller

seifelleathy Studios operates seifelleathy Studios Manager as a business-management service for the studio, its authorized personnel and participating clients. This policy applies to the public website, client portal, manager workspace, and supported integrations.

2. Information we collect

Account and client information

  • Name, business name, email address, telephone number, account role, portal activity and authentication/session records.
  • Client services, schedules, tasks, approvals, comments, invoices, quotations and related operational records.

Content and files

  • Captions, media references, uploaded files, brand materials, comments, approval decisions, campaign information and publishing instructions.

Technical information

  • IP address, timestamps, browser/session information, security logs, device/session counts and actions recorded for fraud prevention and auditing.

3. Information received from Meta and TikTok

When an authorized user chooses to connect a supported social account, the platform displays its own consent screen and identifies the permissions requested. Depending on the integration and permissions approved, we may receive:

  • Platform user or account identifiers, display name, profile image, username, public profile information and connected Page, business or professional-account identifiers.
  • Access and refresh tokens, granted scopes, token expiry information and authorization status.
  • Content and publishing information, including posts, captions, media metadata, publishing status and platform-generated content identifiers.
  • Account, Page, post, audience, engagement, advertising or performance information only when the relevant platform permission has been approved.

We do not request or store a person’s Meta, Facebook, Instagram or TikTok password. Platform tokens are used only to perform actions requested through the service and permitted by the platform.

Those providers process information under their own policies, including the Meta Privacy Policy and TikTok Privacy Policy.

4. How we use information

  • Provide authentication, account connections, scheduling, authorized publishing, reporting, client approvals and business operations.
  • Display connected accounts and content, maintain publishing queues, retrieve permitted insights, and troubleshoot failed requests.
  • Protect the service, enforce access controls, maintain audit records, prevent misuse and comply with law or platform requirements.
  • Communicate about tasks, approvals, invoices, security, service changes and support requests.

We do not sell personal information. We do not use platform data for unrelated profiling or advertising to third parties.

5. When information is shared

Information may be shared with:

  • Authorized studio personnel and the relevant client users according to their roles.
  • Meta, TikTok or another connected provider when necessary to complete an authorized API request.
  • Hosting, storage, security, email or infrastructure providers acting on our behalf and subject to appropriate obligations.
  • Authorities, advisers or affected parties where reasonably necessary to comply with law, protect rights, investigate misuse or respond to a security incident.

6. Retention and deletion

Operational records are retained for as long as the related client relationship, legal obligation, dispute, security need or legitimate business record requires. OAuth tokens are retained while the integration remains connected and are deleted or rendered unusable when access is disconnected, revoked, expired without renewal, or deleted following a valid request, subject to limited security or legal records.

Deletion instructions are available at www.seifelleathy.com/data-deletion.php.

7. Security

We use role-based access, authenticated sessions, HTTPS, server-side storage, encrypted credential/token storage, audit logging and access restrictions designed to protect information. No system can guarantee absolute security. Users must protect their own credentials and promptly report suspected unauthorized access.

8. Your choices and rights

Subject to applicable law, a person may request access, correction, deletion, restriction, portability or objection regarding their personal information. A connected platform account can also revoke this service from the platform’s own Apps, Business Integrations or security settings. Revoking platform access stops future API access but does not automatically erase records we must retain lawfully.

9. International processing

Hosting providers and connected platforms may process information in countries different from the user’s location. Where required, we use reasonable contractual, organizational and technical safeguards for such processing.

10. Children

The service is a business tool and is not directed to children. Users must be at least 18 years old or the age of legal majority required to authorize business-account access in their jurisdiction.

11. Changes to this policy

We may update this policy to reflect service, legal, security or platform changes. The effective date above will be updated when material revisions are published.

12. Contact

Privacy questions and verified rights requests may be sent to seifelleathy@gmail.com. Include your name, the relevant client or connected account, the nature of the request, and enough information to verify that you are authorized to make it. Do not send passwords or access tokens.