Privacy Policy
How Funnell API collects, uses, and protects your data.
1. Overview
Funnell API ("we", "our", or "us") operates a social media management platform at https://app.funnellapi.com. This Privacy Policy describes how we collect, use, and protect your information when you use our platform, including our use of the Meta Platform APIs (Instagram and Facebook) and the YouTube API Services provided by Google.
2. Data Controller
Funnell API is the data controller responsible for your personal data. We are based in the United Kingdom. For any data-related enquiries, contact us at hello@funnellapi.com.
3. Information We Collect
We collect and process the following categories of information:
Account Information
Your name and email address when you register for an account.
Social Account Authorisation
OAuth access tokens for connected Instagram, Facebook, and YouTube accounts. These tokens are used solely to publish content and retrieve data on your behalf.
Content
Posts, captions, images, videos, and other media created or generated within the platform.
Meta Platform Data
Profile information, media objects, comments, messages, and insights accessed through the Meta Graph API under your explicit authorisation.
YouTube Data
YouTube channel information, video metadata, and upload data accessed through the YouTube API Services under your explicit authorisation.
Usage Information
General usage data such as pages visited and actions taken within the platform, used solely for operating and improving our service.
4. Legal Basis for Processing (GDPR)
Under the UK GDPR and EU GDPR, we rely on the following legal bases to process your personal data:
Performance of a Contract
Processing your account information and social media data is necessary to provide the platform services you have requested.
Legitimate Interests
We process usage data and maintain security logs to operate and protect our platform. This processing is necessary for our legitimate interests in running a secure and functional service.
Consent
When you connect your Instagram, Facebook, or YouTube account, you explicitly consent to our access to data on those platforms. You may withdraw this consent at any time by disconnecting your account.
5. How We Use Your Information
We use the information we collect solely to provide and operate our platform:
To publish content to your connected Instagram, Facebook, and YouTube accounts on your behalf and at your direction.
To retrieve and display performance insights and analytics for your published content.
To send automated direct messages in response to Instagram comments when you have explicitly enabled this feature.
To generate content using AI services based on your account preferences.
To authenticate you and maintain the security of your account.
To send essential service communications related to your account.
6. Meta Platform Data
We access Instagram and Facebook data through the Meta Graph API under your explicit OAuth authorisation. We access only the minimum data necessary to provide the features you use, including profile information, media objects, comments, messages, and insights. We do not sell or transfer Meta platform data to third parties, and we do not use it for any purpose other than operating the features you have enabled.
7. YouTube API Data
Our platform uses the YouTube API Services to publish video content to your YouTube channel on your behalf. By connecting your YouTube account, you are also subject to Google's Privacy Policy, which can be found at https://policies.google.com/privacy.
We access your YouTube channel information and upload videos on your behalf using your authorised credentials.
We do not store YouTube data beyond what is necessary to complete the publishing action.
You can revoke our access to your YouTube account at any time via the Google security settings page at https://security.google.com/settings/security/permissions.
8. Data Sharing
We do not sell your data. We share data only with third-party service providers that are necessary to operate the platform, such as cloud hosting, content generation, and media processing services. All third-party providers are contractually bound to use your data only for the purpose of delivering services to us and are prohibited from using it for any other purpose.
9. International Data Transfers
Some of our third-party service providers may process data outside the UK or European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authority, to protect your data in accordance with UK GDPR and EU GDPR requirements.
10. Data Storage and Security
We store your data securely using industry-standard encryption and access controls. OAuth tokens are encrypted at rest. Media files are stored temporarily and deleted automatically once posting is complete. All data is transmitted over HTTPS.
11. Data Retention
We retain account data for as long as your account is active. Media assets are deleted from our servers immediately after successful posting. Upon account deletion, all associated data is permanently removed within 30 days.
12. Your Rights
Under UK GDPR and EU GDPR, you have the following rights regarding your personal data:
Right of Access
You may request a copy of the personal data we hold about you.
Right to Rectification
You may request correction of any inaccurate data we hold.
Right to Erasure
You may request deletion of your personal data at any time.
Right to Restriction
You may request that we restrict the processing of your data in certain circumstances.
Right to Data Portability
You may request a copy of your data in a portable format.
Right to Object
You may object to processing based on legitimate interests.
Right to Withdraw Consent
You may disconnect any connected social account at any time, immediately revoking our access to that platform.
To exercise any of these rights, contact us at hello@funnellapi.com. We will respond within 30 days.
13. Data Deletion
You may request deletion of your data at any time by contacting us at hello@funnellapi.com. If you remove our app from your Facebook, Instagram, or Google connected apps, we will process the disconnection and delete all associated platform data within 24 hours. We will provide a confirmation upon completion.
14. Right to Lodge a Complaint
If you are based in the United Kingdom and believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website
https://ico.org.uk
Phone
0303 123 1113
If you are based in the European Union, you may contact your local data protection authority. We encourage you to contact us first at hello@funnellapi.com so we can attempt to resolve your concern directly.
15. Cookies
We use only essential cookies required to operate the platform, such as authentication session tokens. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
16. Children's Privacy
Our platform is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us at hello@funnellapi.com and we will delete it promptly.
17. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the platform after changes are posted constitutes your acceptance of the updated policy.
18. Contact Us
If you have any questions or requests regarding this Privacy Policy, please contact us at hello@funnellapi.com.
This policy applies to https://app.funnellapi.com operated by Funnell API (United Kingdom). For enquiries contact hello@funnellapi.com
All rights reserved by Funnell API.