Privacy Policy

What we collect

• When you log in with Facebook: your Facebook user ID for Trend Radar (an ID that only works within this app), your name, and the URL of your profile picture. We do not ask Facebook for your email address.
• If you share them in the login dialog: the names and IDs of up to 25 Facebook Pages you manage. We use them only to show you a "Pages you manage" list.
• For the Facebook Pages we monitor, from public data: the Page's name and handle, and for each public post, its ID, its public link, when it was posted, and the number of reactions, comments and shares.
• If we restrict who can sign in: the Facebook user IDs of the people allowed, kept in our server settings. We do not restrict sign-in at present, so no such list is in use.
• When a deletion request is made: a confirmation code, the time and the status. We do not store a Facebook ID with it.

We do not collect the text of posts or comments, and we do not store the names of the people who reacted or commented. The list of monitored Pages is shared by everyone signed in, and we do not record who added or removed a Page.

How we use it

We use this information on the basis of our legitimate interests (GDPR Article 6(1)(f)):

• to analyse public engagement on Facebook Pages for internal editorial work, such as ranking posts and comparing Pages; and
• to run secure sign-in and keep Trend Radar protected.

The engagement numbers are shown only to people who sign in to Trend Radar. We do not publish them.

Facebook login and your session

• Facebook gives us an access token when you log in. We use it only during sign-in, to read your profile and the list of your Pages. We then discard it. We never store it.
• Your session is kept in an encrypted cookie in your browser, and it holds the login details and Pages list described above. We keep no copy of it on our servers. Nothing is written to our database when you log in.
• A session lasts up to 30 days after you sign in, and it ends when you sign out. We cannot end a session that is already stored in a browser.
• We never post to Facebook on your behalf.

Where the data comes from

Public Page data is read through Meta's official Graph API. This covers our own Pages and public Pages we don't manage. Until Meta grants us the Page Public Content Access feature, the Pages we don't manage are limited to those whose admin holds a role on our app. We do not scrape Facebook, and we do not buy this data from third parties. We follow the Meta Platform Terms and Developer Policies.

How long we keep it

• Post records and engagement numbers are deleted 90 days after we collect them. A post that is still among a monitored Page's recent posts when it is deleted may be collected again, and then kept for another 90 days.
• Deletion-request records (confirmation codes) are deleted after 90 days.
• Removing a Page from the list stops collection, but does not delete anything. Its posts and engagement numbers stay until the 90-day deletion above, and come back into view if the Page is added again.
• A Page's name and handle are kept, including after it is removed from the list, unless the Page's data is erased on request. To ask for that, email hello@duoleads.com and name the Page. We then delete the Page's name, handle, posts and engagement numbers by hand.
• Copies in database backups may remain for a limited time after deletion.

Who we share it with

• Hetzner Online GmbH, a German hosting company, hosts our servers and database in the European Union.
• Meta provides Facebook Login and the Graph API. Meta handles the data it holds under its own privacy policy, at facebook.com/privacy/policy. Meta is outside our control and may process data outside the European Union.

We do not sell your data, use it for advertising, or share it with anyone else, unless the law requires it.

Your rights

You can ask us for access to your data, correction, erasure, restriction of processing, and data portability. You can also object to processing based on our legitimate interests. Email hello@duoleads.com to do this. To delete your data, see our Data Deletion page.

You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the data protection authority in your own country.

Cookies

We use only strictly necessary cookies: the session cookie that keeps you signed in, and short-lived cookies that protect the Facebook sign-in. We do not use analytics or advertising cookies.

Contact

Questions or requests are welcome at hello@duoleads.com.