Privacy Policy

This Privacy Policy explains how Gendox collects, uses, stores, and protects information when users connect social media accounts, pages, or profiles to the Gendox platform for business marketing workflows.

By using Gendox or connecting a social media account, you agree to this Privacy Policy.

1. Information We Collect

When you connect a social media account or page, Gendox may collect and store:

• Your basic social account identity, such as account ID, profile/page name, username, and profile image when available.
• Pages, business profiles, or organizations you choose to connect and manage through Gendox.
• Connection status, connection date, connected user, permissions/scopes granted, and last verification status.
• Access tokens, refresh tokens, token expiration dates, and related authorization metadata required to keep the integration working.
• Content, campaign, scheduling, publishing, analytics, or automation data that you create or manage inside Gendox.

2. Facebook and Meta Platform Data

If you connect Facebook Pages or Instagram business accounts through Meta, Gendox uses the permissions you approve only to provide the requested features, such as listing pages you administer, connecting a selected page, preparing future publishing workflows, scheduling posts, and displaying connection status.

Gendox does not sell Facebook, Instagram, or Meta Platform data. We do not use Meta Platform data for advertising outside the functionality requested by the user or the connected company.

3. How We Use Information

We use collected information to:

• Authenticate and maintain connected social accounts.
• Show connected profiles, pages, and connection status inside Gendox.
• Enable current and future marketing features, including publishing, scheduling, analytics, campaign automation, notifications, inbox workflows, and AI-assisted content suggestions.
• Protect accounts, troubleshoot errors, monitor connection health, and prevent unauthorized access.
• Comply with legal, security, and platform requirements.

4. How We Store and Protect Data

Sensitive credentials such as access tokens, refresh tokens, client secrets, and webhook secrets are stored securely and are not displayed directly in the user interface after saving. Access to social account settings is limited to authorized users within the relevant tenant/company.

We use technical and organizational measures designed to protect data against unauthorized access, alteration, disclosure, or destruction.

5. Sharing of Information

We do not sell personal data. We may share information only when necessary to operate Gendox, comply with law, protect rights and security, or communicate with the social media provider whose integration you have authorized.

6. User Control and Disconnection

Authorized users can disconnect social accounts from Gendox. Disconnecting removes active use of the account inside Gendox and prevents future automated actions through that connection.

You may also revoke Gendox access directly from the relevant social network account settings, such as Facebook, Instagram, TikTok, LinkedIn, or X/Twitter.

7. Data Deletion Instructions

Please include the company name, your email address, and the social network/account you want removed. After verification, we will delete or anonymize the relevant connection records and tokens, unless retention is required by law, security, or accounting obligations.

8. Data Retention

We retain social connection information for as long as the account remains connected or as needed to provide the service. Logs and security records may be retained for a limited period to protect the platform and investigate issues.

9. Children’s Privacy

Gendox is a business software platform and is not intended for children. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date.

11. Contact

For privacy questions or requests, contact: stole@vmedia.mk.