Privacy Policy

1. Scope

This policy applies to the XBEATHOUSE website, related public pages, and software operated by or for XBEATHOUSE. It also applies when an authorized operator connects XBEATHOUSE-managed social media accounts to XBEATHOUSE Social Promotion.

2. Information we may process

Depending on how the services are used, we may process limited information such as:

• information you voluntarily provide by email or other direct communication;
• basic website/server information such as IP address, browser or device information, timestamps, requested pages, and security logs generated by normal web hosting;
• strictly necessary session information used to secure authenticated administration areas;
• for connected social accounts, account or Page identifiers, display names or usernames, granted permissions, access or refresh tokens, and information needed to identify the authorized Facebook, Instagram, TikTok, or other supported destination;
• promotion metadata created in the software, such as captions, media references, scheduled times, approval state, publication status, and provider response identifiers.

XBEATHOUSE Social Promotion does not require your Facebook, Instagram, or TikTok password. Authentication is performed through the applicable platform's authorization flow.

3. How we use information

We use information only as reasonably necessary to operate, secure, maintain, and improve the website and software; authenticate authorized accounts; prepare, schedule, test, and publish approved content; diagnose technical issues; maintain audit and security records; respond to requests; and comply with applicable legal obligations.

4. Social platform data

When an authorized operator connects a social platform, XBEATHOUSE Social Promotion may request only the permissions needed for the enabled features. The software may use platform APIs to retrieve account/profile information, identify Pages or professional accounts the operator is authorized to manage, and perform approved publishing actions when live publishing is deliberately enabled.

OAuth credentials used by the desktop application are intended to be stored in protected local credential storage on the operator's device. Disconnecting an account through the application removes the locally stored connection record and associated locally stored OAuth credentials where supported by the application.

For Meta authorization, the XBEATHOUSE website may temporarily receive a short-lived authorization code and state value at the HTTPS OAuth callback. The callback does not exchange the code for a token, does not receive the Meta App Secret, and does not persist the authorization result; it immediately returns the browser to the loopback listener on the operator's own computer.

5. Sharing and disclosure

We do not sell personal information. Information may be disclosed only as reasonably necessary to service providers that support hosting or operation, to a social platform when you direct the software to interact with that platform, to protect XBEATHOUSE or others from fraud, abuse, or security threats, or where disclosure is required by applicable law.

6. Cookies and similar technologies

The public website does not intentionally rely on advertising or behavioral-tracking cookies. The site may use strictly necessary session cookies for authenticated administrative functions and may receive ordinary technical logs from the hosting environment. Third-party sites reached through external links operate under their own privacy practices.

7. Security

We use reasonable administrative and technical safeguards appropriate to the nature of the information processed. No method of transmission or storage can be guaranteed to be completely secure, so absolute security cannot be promised.

8. Retention

We retain information only for as long as reasonably necessary for the purpose for which it was collected, for security and audit needs, or as required by applicable law. OAuth credentials and local account connection records can be removed by disconnecting the account from XBEATHOUSE Social Promotion. Some limited security, backup, or audit information may remain for a reasonable period where necessary.

9. Access, correction, and deletion requests

You may request access to, correction of, or deletion of personal information associated with XBEATHOUSE services by emailing info@xbeathouse.com. For social-platform data deletion, please see the Data Deletion Instructions. We may need to verify the request before acting on it.

10. Third-party services

Facebook, Instagram, TikTok, streaming services, and other linked or connected platforms are independent services. Their collection and use of information are governed by their own terms and privacy policies. XBEATHOUSE is not responsible for the privacy practices of third-party services.

11. Children

The services are not designed to knowingly collect personal information from children. If you believe a child has provided personal information to XBEATHOUSE, contact us so that we can review and, where appropriate, delete it.

12. Changes to this policy

We may update this Privacy Policy when our services, legal obligations, or data practices change. The effective date at the top of this page will be updated when material changes are made.

13. Contact

Privacy questions and requests may be sent to info@xbeathouse.com.