5. Facebook and Social Platform Data (MyPost Social)

When you connect a Facebook Page to MyPost Social:

We store an access token that allows us to publish posts to Pages you have authorized

We use this access only to (a) list your Pages, (b) read minimal Page metadata required for

display, and (c) publish content you have created or approved

You can disconnect your Facebook Page at any time from the Settings area of MyPost

Social, or by revoking access directly at https://www.facebook.com/settings?

tab=business_tools. Disconnecting immediately revokes our ability to post on your behalf

and deletes the stored access token.

The same principles apply to any future connected platforms, including LinkedIn.

6. Data Retention

Marketing contact data is retained for as long as needed to fulfill the purposes described in

this Privacy Policy or as required by law.

Application account data is retained for as long as your account remains active.

Generated posts, images, and published history are retained in your account history

while your account is active.

OAuth tokens are retained only while the corresponding social connection is active.

Disconnecting a social account deletes the associated token immediately.

Billing records are retained for the period required by applicable tax and accounting law

(typically seven years).

Log and security data is retained for up to 12 months for security and abuse-prevention

purposes.

After account deletion, we delete or anonymize personal data within 30 days, except for records

we are legally required to keep.

7. Cookies & Tracking

Our website and applications may use cookies and similar tracking technologies for analytics,

authentication, and session management. You can choose to disable cookies through your

browser settings, though disabling essential cookies may limit your ability to use our services.

8. Data Security

We implement strong security measures to protect your information, including:

Encryption in transit (TLS) for all data transmitted between your browser and our servers

Encryption at rest for stored data, including OAuth tokens

Password hashing using industry-standard algorithms

JWT-based session authentication for our applications

Access controls limiting internal data access to authorized personnel

Regular security review and monitoring

No method of transmission or storage is 100% secure. In the event of a data breach affecting your

personal data, we will notify you and any applicable authorities as required by law.

9. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you

Request correction or deletion of your information

Restrict or object to certain processing

Export your data in a portable format

Opt out of marketing communications at any time

Withdraw consent (where processing is based on consent)

Lodge a complaint with a data protection authority

To exercise these rights, contact us at ([email protected]) .

9.1 Account Deletion

You can delete your MyPost Social or other RealDealerAI application account at any time from

the Settings area of the application, or by emailing [email protected]. When you delete your

account:

All connected social account tokens are revoked and deleted

All stored business profile content, reviews, knowledge base entries, and generated posts

are deleted within 30 days

Billing records may be retained as described in Section 6

9.2 Data Deletion Request (Facebook Platform)

If you have connected a Facebook Page to MyPost Social and wish to request deletion of the data

we received from Facebook, you may:

1. Disconnect the Page from within MyPost Social, which automatically deletes the associated

access token and related Page metadata, or

2. Email us at [[email protected]] with the subject line "Facebook Data Deletion Request"

Upon receipt, we will delete the requested data within 30 days and confirm completion by email.

This page and process also serve as our Data Deletion Instructions for purposes of Meta's

Platform Terms.

10.International Data Transfers

RealDealerAI services are hosted in [Hosting Region — e.g., the United States]. If you access

our services from outside that region, your information will be transferred to and processed in

that region. By using our services, you consent to this transfer. Where required, we rely on

appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

11. Children's Privacy

Our services are not directed to individuals under the age of 13, and we do not knowingly collect

personal data from children under 13. If you believe we have inadvertently collected such data,

please contact us and we will delete it.

12. Updates to This Policy

We may update this Privacy Policy periodically. The updated version will be posted on this page

with a revised "Last Updated" date. For material changes, we will provide additional notice (such

as an email or in-app notice) before the changes take effect.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

📧[[email protected] ]🌐www.realdealerai.net