Privacy Policy &
Data Governance Framework

1. Overview & Data Controller Identification

This Privacy Policy describes how FanpageInsight Inc. ("FI", "Company", "we", "us", or "our"), headquartered at 650 University Ave #10, Berkeley, CA 94710, United States, Phone: (510) 646-8368, collects, processes, protects, and governs information through our social intelligence platform, website, and APIs.

FI acts as a Data Controller with respect to your Customer Account Data, and as a Data Processor (or Service Provider under the California Consumer Privacy Act) with respect to social intelligence telemetry and audience pipeline indexing.

2. Information We Collect

We process information in three distinct categories:

3. Privacy by Design & Ethical Governance

FI enforces strict data minimization principles across all processing pipelines:

• Zero Inbox Snooping: We never inspect, collect, or store private messages, direct inquiries, or non-public personal profiles.
• Default Contact Masking: Personal identifiers are hashed and masked by default in all customer views. Accessing full records requires an authenticated audit-logged action.
• Strict Purpose Limitation: Data is used solely for social media market analysis, competitive benchmarking, and authorized CRM workflow triggers.

4. Legal Bases for Processing (EU GDPR)

Under the EU General Data Protection Regulation (GDPR Article 6), we process personal data under the following lawful bases:

• Performance of a Contract: To provision your platform workspace, authenticate team seats, and process subscription invoices.
• Legitimate Interests: To provide market analytics and competitive intelligence on public social business pages while respecting individual fundamental rights.
• Compliance with Legal Obligations: To maintain corporate tax records and satisfy statutory governance mandates.

5. California Consumer Privacy Rights (CCPA / CPRA)

California residents are entitled to exercise the following rights without discrimination:

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected.
• Right to Delete: Request permanent deletion of personal records from our databases and backups.
• Right to Correct: Request rectification of inaccurate personal records.

6. Individual Rights & Self-Serve Data Erasure Portal

Regardless of whether you hold an active FanpageInsight account, any individual may exercise their privacy rights at any time. Verified requests for data access, restriction, or permanent erasure (Right to be Forgotten) are processed across all live databases and cold storage archives within 24 hours.

7. Security Architecture & Data Retention

FI implements bank-grade technical and organizational measures (TOMs) validated through annual third-party SOC 2 Type II audits:

• Encryption: AES-256 encryption at rest across all databases and AWS S3 storage; TLS 1.3 encryption for all data in transit.
• Access Control: Least-privilege access, Multi-Factor Authentication (MFA), and automated employee access revocation.
• Retention: Aggregated benchmark statistics are retained for longitudinal trend reporting; individual engagement records are retained strictly according to customer retention tiers (3 to 24 months) or until an erasure request is received.

8. International Data Transfers & Sub-processors

Data is hosted in secure, enterprise-grade cloud regions in the United States and European Union (AWS, Cloudflare, Google Cloud). When transferring personal data outside the European Economic Area (EEA), FI utilizes EU Standard Contractual Clauses (SCCs) and UK International Data Transfer Addendums to guarantee adequate protection.

9. Data Protection Officer (DPO) & Contact

If you have any questions, concerns, or requests regarding this Privacy Policy: