1. About this policy
This Privacy Policy explains how WDC Posting Tool ("the Tool") collects, uses, and protects information when our staff uses it to schedule and publish social media content on behalf of clients.
The Tool is operated by We Do Content (WDC), a marketing agency based in Cairo, Egypt. It is a self-hosted instance of an open-source social media management platform, running on infrastructure controlled solely by WDC.
Contact: mounirsamy.msv@gmail.com
2. Who uses the Tool
The Tool is used only by WDC staff — account managers and content strategists who schedule and publish posts on behalf of WDC's clients. Clients do not access the Tool directly; their only interaction is a one-time authorization (via the relevant platform's OAuth flow) granting WDC permission to publish on their connected social accounts.
3. Information we collect
From WDC staff: name, email, login timestamps, and actions performed within the Tool (for internal audit trail).
From connected client social accounts (via OAuth): when a client grants WDC permission through Meta (Instagram + Facebook), TikTok, or another supported platform, the Tool receives:
- access tokens and refresh tokens (used to publish on the client's behalf);
- account identifiers (Facebook Page ID, Instagram Business Account ID, TikTok User ID);
- public profile information (page/profile name, username, profile picture, follower count).
From uploaded content: media files (images, videos), text captions, hashtags, and scheduling metadata created by WDC staff.
Collected automatically: standard web access logs (IP address, user agent, timestamp) and a session cookie for staff login state. No third-party analytics or trackers.
4. How we use this information
- Publish scheduled content to the social accounts clients have explicitly connected and authorized.
- Maintain a history of posts for client reporting and internal team coordination.
- Authenticate WDC staff logging into the Tool.
- Debug errors and monitor the Tool's health and security.
We do not use data collected through the Tool for advertising, profiling, or any purpose unrelated to the agency services WDC provides to clients.
5. Third parties we share data with
| Third party | What we share | Purpose |
|---|---|---|
| Meta (Facebook + Instagram) | Post content and media | Publishing to connected Pages and Instagram accounts via the Graph API |
| TikTok | Post content and media | Publishing to connected TikTok accounts via the Content Posting API |
| Google Drive | Backups of media files | Secondary media storage outside the Tool's database |
| Airtable | Post metadata (post ID, client, status, timestamps) | Internal project tracking and team coordination |
We do not sell data. We do not share data with advertising networks, resellers, or analytics providers beyond what is listed above.
6. Where your data is stored
The Tool and its database run on a VPS operated by Hetzner Online GmbH, located in Germany (European Union). Backups are stored in a WDC-controlled Google Workspace account. Data is protected by HTTPS/TLS in transit, encrypted credential storage at rest, access controls, and firewalls.
7. How long we keep data
- OAuth tokens: until the client or the platform revokes authorization, or deletion is requested.
- Post content and metadata: for the duration of the business relationship, unless earlier deletion is requested.
- Access logs: up to 90 days.
- Backups: 14-day rotation.
On written request, we permanently delete all data associated with a client within 30 days.
8. Your rights
If WDC holds data about you or manages your social media accounts through the Tool, you have the right to:
- access the data we hold about you;
- correct inaccurate data;
- request deletion of your data;
- revoke WDC's access to your social accounts at any time, directly via Meta, TikTok, or Google — no intermediary required;
- export your data in a portable format.
To exercise any of these rights, email mounirsamy.msv@gmail.com.
9. Data deletion
If your social accounts have been connected to the Tool, you may request complete deletion at any time by emailing mounirsamy.msv@gmail.com. We will:
- disconnect your social accounts from the Tool;
- delete OAuth tokens immediately;
- remove all post data, media, and metadata within 30 days;
- confirm the deletion in writing.
You may also revoke WDC's access directly on the platform side:
- Meta: Settings → Business Integrations → remove "WDC Posting Tool"
- TikTok: Settings → Manage account → Third-party apps
- Google: myaccount.google.com → Security → Third-party apps
10. Children's data
The Tool is a business-to-business product used only by WDC staff. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated to active clients by email.
12. Contact
- Email: mounirsamy.msv@gmail.com
- Operator: We Do Content (WDC), Cairo, Egypt