Privacy Policy

Effective date: 07 Oct 2025

Contact: alexkhan@thesoph.ai

Who we are

TheSoph.AI provides a demo web application (the “App”) that integrates with Meta APIs (Facebook Pages & Instagram Business) to showcase posting, insights, and related workflows for page admins.

Scope

This Privacy Policy explains what information we process when you use the App at https://app.thesoph.ai/ and how we use, share, and protect that information.

Information we process

• Information you provide: content you choose to publish (e.g., Page post message, optional link, media URLs for Instagram), and the Page(s) you explicitly select during Facebook Login.
• Meta account data: basic public profile returned by Facebook Login and Page/IG identifiers (e.g., Page ID, instagram_business_account ID) required to perform the demo actions.
• Technical data: standard logs, IP address, device/browser info, and cookies/localStorage needed for session and security.
• Tokens: the user access token is stored only in your browser (localStorage). Page actions (publish, insights, subscribe) are performed server-to-server using our Meta Business System User token; the server exchanges it for a Page Access Token per request. We do not show or persist Page tokens in the browser.

How we use information

• Authenticate you via Facebook Login and let you choose which Page(s) to use.
• Display your Pages list and related identifiers for the demo flows.
• Perform Page and Instagram actions you request (load feed and insights, publish a Page post, subscribe/unsubscribe app to a Page, create & publish Instagram media).
• Keep the App secure, prevent abuse, and measure reliability.

Legal basis (where applicable)

We process your information under legitimate interests (operating and securing the demo), contract (providing the features you request), and, where required, your consent (Facebook Login scopes you grant).

Sharing & third parties

We share data only as necessary to operate the App, comply with law, or protect our rights/users:

• Meta Platforms (Facebook/Instagram Graph APIs) to perform the demo actions you request.
• Cloudflare (Workers, and optionally R2/CDN) to host and deliver the App and the media proxy endpoint.

We do not sell or rent personal information.

Data retention

We minimize storage. User tokens remain in your browser. Server logs are kept for a limited time for security/troubleshooting and then deleted. We do not build user profiles and do not retain Page content beyond what’s necessary to fulfill your action.

Data Deletion

You can request deletion of your data as follows:

1. Since user tokens are stored in your browser only, you can clear them by logging out and clearing browser storage/cache.
2. To request deletion of any server-side data related to your account/Page, email alexkhan@thesoph.ai with your Facebook User ID and Page ID. We will confirm deletion.
3. Facebook may also invoke our automated deletion endpoint at /facebook/data_deletion to trigger deletion programmatically.

Security

We use industry-standard safeguards and least-privilege access to protect data in transit and at rest. No method of transmission or storage is 100% secure; risks cannot be completely eliminated.

International transfers

Depending on your location, data may be processed or stored in countries that may have different data protection laws than yours. We rely on appropriate safeguards where required.

Your rights

Subject to your local laws, you may have rights to access, correct, delete, or restrict certain processing. Contact us at alexkhan@thesoph.ai and we will respond as required by law.

Children’s privacy

The App is not directed to children under 13 (or under the applicable age in your jurisdiction). We do not knowingly collect personal information from children.

Changes

We may update this policy from time to time. We will post updates on this page and revise the “Effective date” above.

Contact

If you have questions about this Privacy Policy or our data practices, email alexkhan@thesoph.ai.