Digilayers Social privacy policy

1. Who we are

Digilayers Inc. is a Canadian company ("we", "us"). Digilayers Social is the service we use to run social media and ads for the businesses we work with. We are responsible for the information it handles, and our Privacy Officer oversees it.

2. How you connect your accounts

You connect your accounts yourself, through Meta's own login window. You choose which Facebook Pages, Instagram accounts, ad accounts and WhatsApp numbers we can use, and which permissions you allow. We never see or store your Facebook password. You can remove our access at any time (section 9).

3. What we read and store

Only for the accounts you connect:

Account details: Page and account names, IDs and profile pictures, so you can pick the right one.
Access tokens: the keys Meta gives us to act for you. We store them encrypted.
Posts: your past posts and their results (reach, likes, comments, shares), so new posts fit your page and we can show what works.
Comments and messages: comments on your posts and messages sent to your Page, Instagram account or WhatsApp number, so you can read and answer them in one place.
Ads: your campaigns, budgets, results and the leads from your lead forms.
WhatsApp: your message templates and the messages you send and receive through us.

We don't collect information about the people who follow you beyond what comes with their comment or message (usually a name, profile picture and the text they sent).

4. What we do with it

Publish the posts you approve, on the dates you choose.
Show your comments and messages, and send the replies you approve.
Create and change ads you approve, and report how they perform.
Pass new leads to you.
Prepare drafts of posts and replies for you to check.

We use your information only to run the service for your business. We never use one business's posts, comments, messages or ad data to serve another business. We never sell it, and we never use it for our own advertising.

5. Drafts made with AI

We use AI services to draft posts, captions, images and replies. They receive the text and images needed for each draft, such as a comment you want to answer. Nothing is published or sent until you approve it. Our AI providers may not use your information to train their models.

6. Who else sees it

Meta, which runs Facebook, Instagram, Messenger and WhatsApp. What you publish through us is also covered by Meta's own terms and privacy policy.
Our service providers, for hosting, storage, email and AI drafting. They may use your information only to provide their service to us.
People on your team you give access to in our dashboard.

Some providers store or process data outside Canada, for example in the United States, where it is subject to local laws.

7. How long we keep it

While your accounts are connected, we keep what we need to run the service.
If you disconnect an account or close your Digilayers Social account, we delete its access token at once and delete the data we read from it within 30 days.
We keep invoices and records the law requires us to keep (for example, for tax), and nothing more.

8. How we protect it

Tokens are encrypted, access is limited to the people who run the service, and every connection uses HTTPS. No system is perfectly secure. If a breach creates a real risk of significant harm, we will tell you and the Office of the Privacy Commissioner of Canada, as the law requires.

9. Removing your data

You can do either:

Remove our access in Facebook: Settings and privacy, then Settings, then Business integrations. Find Digilayers Social and click Remove. We then delete your data as described in section 7.
Ask us: email legal@digilayers.ca from the address on your account, with the subject "Delete my data". We confirm within 10 business days.

Step-by-step instructions: Data deletion.

10. Your rights

You can ask what information we hold about you, ask us to correct it or delete it, and withdraw your consent. We answer within 30 days and may first need to confirm who you are. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada. If you live in Quebec, Quebec's privacy law gives you these rights too.

11. Changes

We may update this policy. The date at the top shows the current version. If a change affects what we read or how we use it, we email you before it applies.

12. Contact

Email legal@digilayers.ca, or write to our Privacy Officer at Digilayers Inc., 901 Guelph Line, Burlington, ON L7R 3N8, Canada.