Privacy Policy

MATRIX MEDIA COMMUNICATION AND ENTERTAINMENT COMPANY LIMITED ("we") operates Fanpage Publisher, an internal tool our staff use to schedule posts to Facebook Pages owned or managed by the company, through the Meta Graph API. It is not offered to the public.

1. How the app accesses Pages

Through the company's Business Manager system user; or
Through Facebook Login for Business: approved staff sign in with their own Facebook accounts and select the Pages they manage. Users see the requested permissions and can decline.

2. Data we process

Connected account: ID, name and a long-lived user access token with its expiry.
Page data: Page IDs and names, the account's tasks on each Page, Page access tokens issued by Meta, and a read-only list of managed Pages.
Post content: text, links, media and comments created by our staff, and the post IDs and statuses returned by Meta.
Staff accounts: email, display name and activity log.

We do not collect email addresses, friends lists, or personal data of Page followers or commenters. We do not use data for advertising, and do not sell or share data with third parties other than the infrastructure providers below.

3. Purpose

Listing Pages, scheduling, editing and cancelling posts, verifying they went live, posting one Page comment, monitoring token expiry and internal reporting.

4. Storage and security

Data is stored on Supabase (database, Singapore), Cloudflare R2 (media) and Cloudflare.
Access tokens and app secrets are encrypted and never written to logs, URLs, error messages or user interfaces.
Access requires a staff account with two-factor authentication, and each person sees only their assigned Pages.

5. Retention

Media files are deleted once Meta has received them or the post is cancelled (7 days at most).
Tokens are replaced when renewed. User tokens expire after about 60 days unless the account reconnects.
Post content older than 30 days is deleted, keeping only IDs and status.
Encrypted database backups are kept for up to 30 days.

6. Data deletion

Users can remove the app under Business Integrations in their Facebook settings.
Administrators can click "Disconnect" in the app to delete a stored token immediately.
Page admins can revoke the app's or system user's access at any time.
For full deletion, email contact@matrixmedia.vn with your Facebook account ID or Page ID. We delete the related data within 30 days and confirm by email.

7. Contact

MATRIX MEDIA COMMUNICATION AND ENTERTAINMENT COMPANY LIMITED – contact@matrixmedia.vn