ContentFlow ("we", "us") is operated by Arctensors. ContentFlow helps businesses run their
Facebook Pages: it writes and designs posts, publishes the posts the business approves, and handles comments on the
business's Page. This policy explains what information we process, why, who we share it with, and how you can have it
deleted.
Who this policy is about
Business customers: the people who connect a Facebook Page to ContentFlow and use it.
People who comment on a Page connected to ContentFlow, or on its linked Instagram account, and
people who send them a direct message.
Information we process
From Facebook, when a business connects a Page
The Facebook user ID of the person who connected the Page, and the list of Pages they manage (shown only so they
can choose one).
The connected Page's ID and name, and a Page access token. The token is stored encrypted and is used only
to act for that Page as described below.
The permissions Facebook granted and when the connection expires.
If the Page has a linked Instagram professional account: its ID and username, and, for each post we publish
there, its Instagram ID and link.
The Page's and its linked Instagram account's statistics as Meta reports them (for example views, people
reached, followers and interactions, per day and per post we published), shown to the business in Analytics.
Comments on connected Pages
For comments on a connected Page's posts: the comment's text, ID and time, the commenter's name and Facebook ID
as provided by Facebook, and which post it belongs to. The same for comments on the Page's linked Instagram
account, with the commenter's Instagram username and ID.
What we did with the comment (for example: answered, hidden, deleted, or flagged to the business) and any reply
we posted.
For direct messages sent to a connected Page or its linked Instagram account: the message's text, ID and time,
the sender's name or username and ID as provided by Meta, the replies sent (by our assistant or the business's
team), and how each message was handled. Messages are used only to answer the sender and to show the business
its conversations.
Provided by the business
Business details used to write posts (such as brand name, description, services, audience, language and tone),
frequently asked questions and their answers, and settings such as posting times.
If the business links Telegram to receive previews and alerts: the Telegram chat ID.
If the business uses our dashboard: its account email address and sign-in data. Sign-in and subscriptions use
the person's Arctensors account (accounts.arctensors.com), shared by every Arctensors product; we read whether
a business has a ContentFlow subscription and until when.
If someone uses "Ask ContentFlow", the help chat in the dashboard: their questions and the answers, with a few
facts about their Page's settings so the answer fits.
Created by ContentFlow
Post ideas, post text and images we generate, approval decisions, publishing records, and usage records
(for example the number of AI requests made for a Page).
How we use it
To generate post ideas, text and images for the business, and to send previews for approval.
To publish the posts the business approves to its Facebook Page, and also to its linked Instagram account
when the business turns that on.
To moderate comments on the business's Page: classify each new comment, answer questions using only the
business's own FAQ, hide or delete abusive comments (depending on the business's settings), and alert the
business about complaints.
To check that the Facebook connection still works and to tell the business when it needs reconnecting.
To keep the service secure, fix problems, and meet legal obligations.
We do not sell personal information, and we do not use it for advertising.
Who we share it with
We use these service providers to run ContentFlow. Each receives only what it needs for its task:
Meta Platforms (Facebook and Instagram): to publish posts, read and act on comments, and manage the Page
connection, under Meta's own terms and policies. To post on Instagram, Instagram fetches the picture from a
private link that works for one hour.
OpenAI: business details, FAQ entries, comment text and the related post text are sent to OpenAI's API to
generate posts and images, to classify and answer comments, and to answer questions asked in the help chat.
Supabase: hosts our database and stores generated images.
Telegram: delivers previews and alerts to the business's linked chat, which can include comment text and
commenter names.
Our server hosting provider, which runs our application.
We may also disclose information if required by law.
How long we keep it
Page access tokens: until the Page is disconnected, the person who connected it removes our app from Facebook,
or a deletion request is made. They are then deleted.
Comments and moderation records: while the Page uses ContentFlow, unless deleted earlier on request.
Business data and generated content: while the business uses ContentFlow, and deleted when the business
closes its account or asks us to delete it.
Generated images: kept until the post is published, then only a small copy for 30 days. Images of rejected
posts are deleted shortly after the decision, and test previews after one day.
Photos you upload with "Ask for a post": saved without their location or camera details. Once used in a post
they are kept like generated images; if the request is cancelled or expires, the photo is deleted within a
day.
Photos of your menu or price list: read once to list your products for you to check, and not stored.
Help chat questions and answers: 30 days, to answer follow-up questions and improve our help.
Your logo: kept while your Page uses it on its pictures. A logo you replace or remove is deleted within a
day.
Your choices and rights
Remove ContentFlow from Facebook: in your Facebook settings under "Apps and websites". We are
notified and immediately delete the Page tokens you granted, which stops ContentFlow from acting for
your Pages.
Ask for deletion through Facebook: from the same Facebook settings. We delete the Page tokens you granted
and the Facebook comments we stored for those Pages, and give you a confirmation code with a status page.
Contact us at support@arctensors.com to access, correct or delete your information. A commenter can also ask
the business that runs the Page.
Security
We encrypt Page access tokens, use HTTPS for all connections, and limit access to the data to what each part of the
service needs. No method of storage or transmission is completely secure, but we work to protect your information.
Our support team can open a business's dashboard to help it or to fix a problem. They see what the business's
members see, change something only when there is a reason (usually the business asked), and every change they make is
recorded with their name.
Children
ContentFlow is a service for businesses and is not directed to children.
Changes
We may update this policy. We will change the effective date above, and tell business customers about important
changes.