This policy applies to the Content Automation System (“CAS”) operated for The Breakup Journal and to its public website, platform connections, API gateway, and webhook endpoints.
1. Who operates CAS
CAS is operated for The Breakup Journal. Privacy and data-deletion questions can be sent to thebreakupjournalyvr@gmail.com.
2. Information CAS processes
CAS processes only information needed to operate authorized social-media and content workflows. Depending on the platforms connected, this may include:
- Professional account identifiers, usernames, display names, profile information, connected Facebook Page identifiers, and granted permissions.
- Posts, media identifiers, captions, permalinks, thumbnails, publication times, public engagement counts, and account or media insights.
- Comments and replies, including comment identifiers, text, usernames, user-scoped identifiers, timestamps, moderation state, and reply history.
- Messages sent to connected professional accounts, including message identifiers, text, sender-scoped identifiers, timestamps, and references to attachments.
- Encrypted authorization tokens, connection status, token expiration dates, synchronization history, webhook delivery records, and security logs.
- Content drafts, rendered media, publishing schedules, review decisions, and feedback created by the operator.
CAS does not request or store a person’s Facebook, Instagram, Threads, or TikTok password.
3. How information is obtained
Information comes from official platform authorization flows and APIs, signed webhooks sent by connected platforms, content supplied by the operator, and ordinary technical requests to this website. The connected-account owner controls which accounts are authorized and can revoke access through the platform.
4. Why information is used
CAS uses this information to connect and synchronize authorized accounts; display content and analytics; prepare, review, schedule, and publish content; organize comments and messages; draft or send approved replies; prevent duplicate processing; secure the service; diagnose failures; and comply with deletion or legal obligations.
CAS does not sell or rent personal information, build third-party advertising profiles, or use comment and message content to train a general-purpose artificial-intelligence model.
5. Storage and service providers
Primary CAS records and encrypted platform tokens are stored in an operator-controlled environment. Vercel provides the stable public website and request relay. Cloudflare provides the encrypted tunnel to the CAS origin. Supabase stores service-discovery information such as the current endpoint and expiration time. The connected platforms process data under their own terms and privacy policies.
These providers may process limited request metadata, such as timestamps, IP addresses, headers, and diagnostic logs, as necessary to deliver and secure their services. CAS does not authorize them to use connected-account content for unrelated purposes.
6. Sharing
Information is shared only with the connected platform when performing an authorized action, with infrastructure providers needed to operate CAS, when the account owner instructs CAS to publish or reply, or when disclosure is required by law. CAS does not disclose platform user data to data brokers.
7. Retention
Connected-account data is retained while the connection and associated CAS workflows remain active. Encrypted tokens are removed when an account is disconnected or its data is deleted. Imported content, analytics, comments, messages, workflow records, and operational logs are retained only as long as reasonably necessary for the purposes described above, backup integrity, security, or legal obligations.
8. Deletion and correction
Account owners can disconnect a platform connection in CAS and revoke the app in the platform’s settings. Any person may request access, correction, or deletion by emailing thebreakupjournalyvr@gmail.com. Include the relevant platform and username, but never send a password or access token. We may request reasonable verification before acting.
See the Data Deletion Instructions for the complete process. Valid requests are handled without undue delay and ordinarily within 30 days.
9. Security
CAS uses encrypted tokens, scoped API keys, signed-webhook validation, HTTPS transport, account-level authorization, expiration checks, and request deduplication. No system is perfectly secure; suspected vulnerabilities should be reported to the contact address above.
10. International processing
Infrastructure providers may process information in Canada, the United States, or other locations where they operate. Appropriate technical and contractual safeguards are used where applicable.
11. Children
CAS is not directed to children under 13 and is not intended to knowingly collect children’s personal information.
12. Changes
This policy may be updated when CAS features, providers, or legal obligations change. The effective date above will be revised, and material changes will be made available at this URL.