Privacy Policy

Last updated: October 28, 2026

This is an English translation of our Política de Privacidade. If the two versions conflict, the Portuguese version prevails.

1. Who we are (data controller)

AllPages ("Service", "we") is operated by MR MIDIAS DIGITAIS LTDA, a company established in Brazil (Av. Paulista, 1636, Conj. 4, 15th floor, Suite 1504 (Paulista Corporate building), São Paulo – SP, ZIP 01310-200), which acts as the controller of the data processed through the Service.

Privacy contact: contato.allpages@gmail.com

2. Who this policy applies to

• Customers: people and businesses who create an AllPages account and connect their Facebook Pages and/or Instagram professional accounts.
• People who interact with our customers' Pages: anyone who comments on or sends a message to a Page or Instagram account connected to the Service. In these cases, the customer decides how those contacts are used, and we process that data on the customer's behalf to deliver the messaging features.

3. What data we collect

3.1 Your AllPages account data

• Name, email and, where applicable, phone number.
• Login credentials (passwords are stored hashed — never in plain text).

3.2 Data received from Meta ("Platform Data")

When you connect a Page through Facebook Login, we receive and store:

• Identifiers of your profile and of the Pages you authorized (IDs), plus the Page name and picture.
• The Page access token — used exclusively to perform the actions you request.
• Your Pages' content and metrics: posts, comments, reach and engagement metrics.
• Conversations and contacts: messages exchanged with the Page, and the identifier (PSID) and public name of the people who interact, so you can reply and organize your customer service.

When you connect an Instagram professional account through Instagram Login, we receive and store:

• Identifiers and profile of the account: account ID, username, name, profile picture, account type (Business or Creator) and follower, following and post counts.
• The account access token (valid for about 60 days and renewed automatically) — used exclusively to perform the actions you request.
• Account content and metrics: posts, comments and reach, views and interaction metrics.
• Direct messages and contacts: messages exchanged with the account, and the identifier (IGSID) and username of the people who interact, so you can reply and organize your customer service.

We never have access to your Facebook or Instagram password: login happens on Meta's official screens.

3.3 Content you create

• Text, captions, images, videos, schedules, automated replies and tags that you set up.

3.4 Technical data

• Operational logs, and the date and time of actions and errors, used to run and protect the Service.

4. How we use the data (purposes)

Data	What we use it for
Account data	Creating and maintaining your access, authenticating your login and providing support.
Page and Instagram account IDs and tokens	Publishing, scheduling, commenting, reading metrics and replying to messages — only on the Pages and accounts you authorized.
Page and account content and metrics	Showing your posts, reports and performance inside the Service.
Conversations and contacts	Letting you read and reply to messages and comments, and organize your contacts (tags, history).
Technical data (logs)	Operation, security, abuse prevention and bug fixing.

We do not use your data, or the data of people who interact with your Pages, for advertising, profiling for third parties, or any purpose unrelated to running the Service.

5. Legal basis (Brazil's LGPD)

• Performance of a contract: to deliver the features you signed up for or requested.
• Consent: when you authorize access to your Pages through Facebook Login or to your accounts through Instagram Login.
• Legitimate interest: security, fraud prevention and improving the Service.
• Legal obligation: when the law requires us to keep or disclose information.

6. Use of Meta data — limits we respect

We follow Meta's Platform Terms and Developer Policies. In particular, we do not:

• sell, rent or trade data obtained from Meta;
• use this data for targeted advertising or to build profiles for third parties;
• try to re-identify people from de-identified data;
• use the data for surveillance, discrimination or any practice prohibited by Meta or by law;
• send unsolicited bulk messages — messaging follows Meta's windows and rules.

7. Data sharing

We do not sell your data. Data is shared only:

• With Meta (Facebook and Instagram), through its official APIs, to the extent needed to perform the actions you request (publishing, commenting, replying to messages, reading metrics).
• With infrastructure providers (server hosting), strictly to keep the Service running, with no permission to use the data for their own purposes.
• When required by law, upon an order from a competent authority — after assessing the legitimacy of the request and disclosing only the minimum necessary.
• With your consent, in any other case.

8. Storage and security

Data is kept on servers under our control, with restricted access. We take reasonable security measures, such as hashed passwords, encrypted connections (HTTPS), session control and separation of data between different customer accounts. No system is 100% immune, but we continuously work to protect your information.

9. How long we keep data

• While your account is active and the data is needed to provide the Service.
• We delete data as soon as it is no longer needed for the purposes above.
• We delete it when you request deletion or close your account.
• We delete it if the Service is discontinued.
• If you remove the app in your Facebook or Instagram settings, access is revoked, and data linked to that authorization stops being updated and is deleted according to this policy.
• When you remove the app on Instagram or request deletion there, Meta notifies us automatically: we turn off access and, on a deletion request, delete the connected account and the data linked to it.
• We may keep minimal records when there is a legal obligation, or aggregated/anonymized data that does not identify anyone.

10. How to request deletion of your data

Any user can request deletion at any time, free of charge. See the full step-by-step guide at Data Deletion, or email contato.allpages@gmail.com with the subject "Data deletion". We handle requests within 30 days.

11. Your rights

Under Brazil's LGPD (Law 13,709/2018) and equivalent laws, you may request:

• confirmation that we process your data, and access to it;
• correction of incomplete or outdated data;
• deletion or anonymization;
• portability, and information about who we share data with;
• withdrawal of consent (by removing the app on Facebook or Instagram, or disconnecting the Page or account in the Service).

To exercise any of these rights, write to contato.allpages@gmail.com.

12. Cookies

We only use one technical session cookie, needed to keep you logged in. We do not use advertising cookies or third-party tracking.

13. Minors

The Service is intended for people aged 18 or over who are responsible for business Pages and accounts. We do not knowingly collect data from children or teenagers.

14. International transfers

When Meta's APIs are used, data may be processed on servers outside Brazil, according to Meta's own infrastructure. We apply the applicable safeguards to this processing.

15. Changes to this policy

We may update this Policy. The "last updated" date at the top always shows the current version. Significant changes will be announced through the Service's channels.

16. Contact

Privacy questions, access or deletion requests:
MR MIDIAS DIGITAIS LTDA
Address: Av. Paulista, 1636 – Conj. 4, 15th floor, Suite 1504 (Paulista Corporate building)
São Paulo – SP · ZIP 01310-200 · Brazil
Email: contato.allpages@gmail.com
Website: https://allpages.net

AllPages is an independent tool and is not affiliated with, sponsored or endorsed by Meta Platforms, Inc.