Privacy Policy

1. Introduction & Overview

Effective Date: October 19, 2026
Last Updated: October 26, 2026

Flexon Digital ("we," "our," "us") is dedicated to safeguarding your privacy and ensuring the highest standards of data security and transparency. This Privacy Policy governs your use of our corporate website (https://flexondigital.com) and our specialized software-as-a-service (SaaS) platform, Flexon Social.

By accessing our website, using Flexon Social, authorizing social media accounts, or utilizing our integrated Canva design workflow, you explicitly agree to the collection, handling, and storage practices outlined in this policy. If you do not agree with any terms described herein, please refrain from using our platforms and revoke any authorized application tokens.

2. Flexon Social Platform Architecture

Flexon Social is an all-in-one social media publishing, scheduling, inbox management, and analytics solution designed to empower digital creators, brands, and marketing teams. Key architectural components include:

• Canva Design Studio Integration: An integrated creative editor powered by the Canva Button SDK and Canva Connect API, allowing users to design visual creatives, banners, and thumbnails directly inside the platform and export them immediately into the publishing composer.
• Multi-Channel Publishing Matrix: Automated scheduling and publishing engine across supported social media networks including Meta (Facebook & Instagram), YouTube, LinkedIn, Google My Business, X (formerly Twitter), and Pinterest.
• Unified Social Inbox: Real-time synchronization of customer mentions, direct inquiries, and comments across authorized channels for consolidated customer engagement.
• Cross-Platform Analytics: Aggregation of engagement metrics, impressions, reach, and demographic insights to evaluate campaign efficacy.

3. Third-Party Social Networks & API Compliance

To provide automated publishing, analytics, and inbox synchronization, Flexon Social integrates with official APIs provided by third-party platforms. Your use of these features is subject to the privacy policies and developer agreements of each respective network:

4. Information We Collect

We collect only the minimum information necessary to provide, optimize, and secure our services:

1. Account & Profile Information

• User Credentials: Name, work email address, company name, phone number, and timezone when registering or requesting a consultation.
• Social Profile Identifiers: Public profile names, usernames, avatars, page IDs, channel IDs, and account identification numbers returned via authorized OAuth authorization flows.

2. Authorization & Token Credentials

• OAuth 2.0 Access & Refresh Tokens: Scoped, time-limited cryptographic tokens issued by third-party networks (Meta, Google, LinkedIn, X, Pinterest) authorizing Flexon Social to publish on your behalf. These tokens are encrypted at rest using AES-256 and never made visible to unauthorized personnel.

3. User Content & Publishing Assets

• Post Captions & Media: Text, hashtags, hyperlinks, images, videos, thumbnails, and Canva-exported creative files you compose or upload to be scheduled and published.
• Scheduling Parameters: Time and date timestamps, targeting criteria, platform distribution selections, and approval workflow notes.

4. Analytics & Inbox Interaction Data

• Performance Metrics: Impressions, video view counts, reach, like counts, retweets/shares, comment tallies, and click-through rates ingested through platform APIs.
• Customer Inquiries & Comments: Public comments and direct messages received on connected business pages for display in the unified inbox.

5. Device, Log & Usage Information

• IP addresses, browser type, operating system, session duration, and pages navigated, collected automatically to maintain system security and detect fraudulent activity.

5. How We Use Your Information

We process collected data exclusively for legitimate business and operational purposes:

• To Execute Content Publishing: Dispatching your scheduled media, text, reels, and pins to your selected social media channels at your designated publish times.
• To Deliver Unified Inbox & Moderation: Allowing you and your team to monitor, triage, and reply to social conversations from a single dashboard.
• To Generate Actionable Analytics: Compiling cross-channel performance reports, audience growth trends, and engagement rate visualizations.
• To Provide Canva Integration: Facilitating the seamless round-trip transfer of user-approved design assets from Canva into the post scheduler.
• To Maintain Platform Security: Monitoring for rate limits, mitigating denial-of-service attempts, preventing spam, and validating cryptographic webhook payloads.
• To Deliver Service Updates: Sending critical notifications regarding token expirations, scheduled post successes/failures, and essential security announcements.

6. Data Security & Cryptographic Protection

We employ enterprise-grade architectural and technical measures to protect all data processed across Flexon Digital and Flexon Social:

• Encryption at Rest: All sensitive credentials, OAuth tokens, and API secrets are stored in secure datastores protected by AES-256 encryption.
• Encryption in Transit: All communications between your browser, our servers, and third-party APIs (Meta, Google, LinkedIn, etc.) are strictly enforced over TLS 1.3 / HTTPS with HSTS enabled.
• Role-Based Access Control (RBAC): Strict permission boundaries guarantee that team members only access workspaces and social accounts explicitly assigned to them.
• Multi-Tenant Isolation: Data partitions ensure tenant boundaries are rigorously maintained, precluding any cross-organization data leakage.
• Audit Logging: Administrative actions, token renewals, and publishing dispatches are logged for compliance monitoring and threat detection.

7. User Data Deletion Instructions

We fully respect your right to control your personal and social data. If you wish to delete your social media tokens, account credentials, or all stored publishing history, you have multiple convenient options:

Option A: Immediate In-App Channel Disconnection

1. Log in to your Flexon Social account.
2. Navigate to Settings → Connected Channels.
3. Locate the target platform (Facebook, Instagram, YouTube, LinkedIn, X, Pinterest, or GMB) and click "Disconnect".
4. Confirm deletion: All active access tokens, cached profile data, and upcoming scheduled drafts for that channel will be permanently removed from our active database immediately.

Option B: Revoke Authorization Directly from the Social Platform

You can revoke Flexon Social's access directly at the source at any time:

• Meta (Facebook & Instagram): Visit Facebook Business Integrations, select "Flexon Social", and click "Remove".
• Google / YouTube / GMB: Visit Google Third-Party Apps with Account Access, select "Flexon Social", and click "Remove Access".
• LinkedIn: Navigate to LinkedIn Permitted Services and revoke access.
• X (Twitter): Go to Connected Apps Settings and revoke token authorization.
• Pinterest: Go to Pinterest Apps Settings and click "Revoke Access".

Option C: Formal Written Deletion Request (Right to Erasure)

To request the complete, permanent erasure of your user profile, organization records, analytics history, and uploaded media files, email our Data Protection Officer:

Option D: Meta Automated Data Deletion Callback

For users who remove Flexon Social via Facebook Settings, our system implements the official Meta Data Deletion Callback endpoint (https://flexondigital.com/data-deletion), generating a unique confirmation code and systematically purging all associated user data automatically.

8. Data Retention & Purge Schedules

• OAuth Access & Refresh Tokens: Retained only while your social account remains connected. Upon disconnection or revocation, tokens are expunged from the database immediately.
• Published Media & Captions: Retained for performance auditing and client reporting for a maximum of 12 months, or until account closure.
• Temporary Canva Design Drafts: Temporary working files and unassigned media assets are automatically removed from disk cache after 30 days of inactivity.
• Analytics Caches: Aggregated social performance metrics are kept for up to 24 months to power historical trend comparisons, unless an early deletion request is submitted.

9. Global Privacy Rights (GDPR, CCPA/CPRA, DPDP)

Depending on your geographic location, you enjoy specific legal rights regarding your personal data:

• General Data Protection Regulation (GDPR - EU/UK): You have the right to access, rectify, restrict processing of, object to, and request the complete erasure of your personal data, as well as the right to data portability.
• California Consumer Privacy Act (CCPA / CPRA - USA): You have the right to know what personal information is collected, request its deletion, and be free from discriminatory treatment. We affirm that we do not sell or share personal information for cross-context behavioral advertising.
• Digital Personal Data Protection Act 2023 (DPDP - India): Processing is grounded upon lawful, specific consent for authorized social media automation, with clear avenues to withdraw consent and obtain grievance redressal.

10. Protection of Minors

Flexon Digital and Flexon Social are enterprise business tools strictly intended for use by individuals 18 years of age or older. We do not knowingly solicit, collect, or process information from children under the age of 13 (or under 16 where required by local legislation). If we discover that personal data of a minor has been collected without parental consent, we will immediately delete that information.

11. Amendments to This Policy

We may revise this Privacy Policy periodically to reflect enhancements in Flexon Social, additions of new social API integrations, or evolving international regulatory standards. The "Last Updated" timestamp at the top of this document will always reflect the most recent version. Continued use of our software after revisions signifies your acceptance of the updated terms.

12. Contact Us & Grievance Redressal

If you have questions, feedback, or compliance inquiries concerning this Privacy Policy, our data handling procedures, or our social platform integrations, please contact our Data Protection and Compliance Team: