Privacy Policy

1. Introduction

Welcome to TowerCut ("we," "our," or "us"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media comment management application.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Full name
• Password (encrypted)

2.2 Social Media Data

When you connect your social media accounts (Facebook, Instagram, TikTok), we access and store:

• Page/account names and IDs
• Access tokens to interact with your social media accounts
• Posts and comments from your connected pages
• Comment author information (names, profile pictures, IDs)
• Post metadata (creation dates, URLs, content)

2.3 Usage Information

We automatically collect:

• Log data (IP addresses, browser type, pages visited)
• Device information
• Usage patterns and interactions with our service

3. How We Use Your Information

We use the collected information to:

• Provide Our Service: Display and manage comments from your social media pages
• Comment Moderation: Enable you to hide, delete, or flag comments
• Automation: Apply your configured automation rules to incoming comments
• Analytics: Show statistics about your comments and engagement
• Real-time Updates: Receive webhook notifications from social media platforms for instant comment updates
• Account Management: Maintain and secure your account
• Service Improvement: Analyze usage to improve our features
• Communication: Send important service updates and notifications

4. Data Storage and Security

We store your data securely using industry-standard practices:

• All data is stored in encrypted databases
• Passwords are hashed using bcrypt
• Access tokens are stored securely and never exposed to client-side code
• We use HTTPS for all data transmission
• Regular security audits and updates

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share data only in these circumstances:

• With Your Consent: When you explicitly authorize us to share specific information
• Service Providers: With trusted third-party services that help us operate (hosting, analytics)
• Legal Requirements: When required by law or to protect our rights
• Social Media Platforms: We interact with Facebook, Instagram, and TikTok APIs to perform actions you request (hiding/deleting comments)

6. Facebook Platform Policy Compliance

TowerCut uses Facebook's Platform APIs and complies with Facebook Platform Terms and Policies:

• We only access data that you explicitly authorize through Facebook Login
• We use Facebook data solely for the features you enable
• We respect Facebook's data retention and deletion policies
• We implement Facebook's required security measures
• We use webhooks to receive real-time notifications about comments on your pages

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and associated data
• Disconnect: Remove connected social media accounts at any time
• Export: Download your data in a portable format
• Opt-out: Disable specific features or notifications

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we delete all associated data within 30 days, except where we're required by law to retain it longer.

Comments and posts data are retained based on your sync settings, and you can manually delete them at any time.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze usage patterns
• Improve security

You can control cookies through your browser settings, but disabling them may affect functionality.

10. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Third-Party Services

Our service integrates with third-party platforms:

• Facebook/Instagram: Subject to Meta Privacy Policy
• TikTok: Subject to TikTok Privacy Policy
• Vercel (Hosting): Subject to Vercel Privacy Policy

We are not responsible for the privacy practices of these third-party services.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

15. GDPR Compliance (For EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority