Privacy Policy
1. Introduction
Pompato ("we", "us", or "our") operates the Pompato platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. By using the Service you agree to the practices described below. For an overview of the Service, see About Pompato.
2. Information We Collect
2a. Information you provide
- Account registration data (name, work e-mail, organization name)
- Messages, files, and other content you submit through the Service
- Communications you send to us (support requests, feedback)
2b. Information collected automatically
- Log data (IP address, browser type, pages visited, timestamps)
- Device identifiers and operating system information
- Cookies and similar tracking technologies (see Section 7)
2c. Information from third parties
When you connect a Facebook Page or an Instagram professional account, we receive data from those platforms as authorized during the connection flow — such as Page and account profile information, posts, comments, messages, and related engagement metadata — and use it only to provide the Service. You can disconnect a connected account at any time from within the Service; after disconnection the account is removed from your workspace and we stop importing content from it, publishing to it, and responding to new activity on it. To withdraw the Service's access completely, you can also remove the Pompato integration in your Facebook or Instagram account settings.
3. How We Use Your Information
- Provide, operate, and improve the Service
- Authenticate users and maintain account security
- Send service-related communications (updates, security alerts)
- Analyze usage patterns to improve product features
- Comply with legal obligations
4. Sharing of Information
We do not sell your personal information. We may share information with:
- Service providers – third-party vendors who perform services on our behalf (cloud hosting, analytics, customer support tools) under data-processing agreements
- Business transfers – in connection with a merger, acquisition, or sale of assets, with prior notice to you
- Legal requirements – when required by law, court order, or government authority
- Protection of rights – to prevent fraud, enforce our Terms, or protect the safety of users
5. Your Privacy Rights
Depending on where you reside, you may have the following rights regarding your personal information:
- Access – request a copy of the personal data we hold about you
- Correction – request correction of inaccurate or incomplete data
- Deletion – request erasure of your personal data, subject to legal retention obligations
- Portability – receive your data in a structured, machine-readable format
- Opt-out of sale / sharing – we do not sell data, but you may limit certain sharing
California residents (CCPA/CPRA): You have the right to know, delete, correct, and opt out of the sale or sharing of your personal information. We do not sell personal information. To submit a verifiable consumer request, contact us at the address below.
Nevada residents (NRS 603A): You may opt out of the sale of covered information. We do not sell covered information.
To exercise any of these rights, e-mail us at [email protected]. To request deletion of stored data, including data received from connected Facebook or Instagram accounts, follow our data deletion process. We will respond within 45 days (extendable by an additional 45 days where necessary).
6. Data Retention
We retain personal information for as long as necessary to provide the Service and fulfill the purposes described in this Policy, unless a longer retention period is required by law. When data is no longer needed, we securely delete or anonymize it.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Keep you signed in (essential session cookies)
- Remember your preferences
- Analyze traffic and usage (analytics cookies)
You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.
8. Data Security
We implement industry-standard technical and organizational measures to protect your information against unauthorized access, loss, or alteration, including encryption in transit (TLS) and at rest. No system is 100% secure; you use the Service at your own risk.
9. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal data, contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, where required by law, notify you by e-mail or in-app notice. Your continued use of the Service after the update constitutes acceptance of the revised Policy.
11. Contact Us
For privacy-related questions or to exercise your rights:
Pompato – Privacy Team[email protected]