Privacy Policy — Ideoniq Content Engine

Operator: [OWNER TO PROVIDE: legal entity name and registered address]. Effective: [OWNER TO PROVIDE: effective date].

What the app does

Ideoniq Content Engine is a Shopify app that prepares and schedules organic feed posts about a merchant's products for the merchant's own Facebook Page and Instagram professional account.

Data we process

• Store data from Shopify: shop domain, shop identifier and time zone, and product catalog data (titles, descriptions, images, variants, inventory availability, product page links). The app requests only the read_products and read_inventory scopes.
• We do not request access to Shopify customer or order data and we do not store information about the merchant's customers.
• Merchant settings: brand and audience preferences, language and dialect, publishing time zone, plan preference, automation state and content plans, captions and schedules.
• Meta connection: the connected Facebook Page and Instagram account identifiers, granted permissions and access tokens. Tokens are stored encrypted.
• Generated images and publishing records: images prepared for posts, publishing attempts and receipts returned by Facebook or Instagram.
• Support requests the merchant sends from inside the app, and technical logs.

Service providers

Data is processed by providers needed to run the service: Shopify (platform), Meta (Facebook and Instagram publishing), our hosting and database provider, object storage for images, and — only when enabled for the merchant — AI image generation, AI caption generation and image safety review providers. [OWNER TO PROVIDE: final named list of processors and their locations]

Uninstall and deletion

• Disconnecting Facebook/Instagram in the app deletes the stored Meta credentials and cancels queued posts.
• On uninstall, the app revokes its public image links and deletes the stored Meta credentials.
• When Shopify sends the shop/redact request (about 48 hours after uninstall), the app erases the shop's records and stored images. A minimal pseudonymized record that the request was honoured is kept.
• Posts already published to a Facebook Page or Instagram account are not deleted by the app; the merchant can remove them in Meta's tools.
• customers/data_request and customers/redact are acknowledged; the app holds no customer records to return or erase.
• Retention: [OWNER TO PROVIDE: retention periods for backups, logs and audit records]

Contact

Privacy questions and requests: [OWNER TO PROVIDE: privacy contact email]. See also the support page.