Privacy Policy

This Privacy Policy describes how Theta One (“we,” “us,” or “our”) collects, uses, stores, and protects your information when you use our Facebook application (“the App”), including integrations with WhatsApp Messaging and Meta Marketing API services.

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this Privacy Policy, please do not use the App.

We are committed to protecting your privacy and ensuring compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable, the California Consumer Privacy Act (CCPA), and Meta's Platform Terms.

1. Information We Collect

When you use our Facebook App and its integrated services, we may collect the following categories of information:

1.1 Information from Facebook Login

When you authenticate through Facebook Login, we may access:

• Your public Facebook profile (name, profile picture, age range, gender)
• Email address associated with your Facebook account
• Page management access — if you manage Facebook Pages, we may request access to read page insights and manage messages on your behalf
• Ad account information — if you link a Meta ad account, we may access its basic metadata and performance metrics

We only request the minimum permissions necessary for the App to function. You can review and revoke these permissions at any time through your Facebook App Settings.

1.2 Information from WhatsApp Messaging Integration

Through our WhatsApp Business API integration, we may process:

• Phone numbers of users who opt in to receive WhatsApp messages
• Message content sent and received via the WhatsApp Business Platform
• Message delivery status, timestamps, and read receipts
• Media files shared through WhatsApp conversations (images, documents, audio)
• Customer interaction history for support and engagement purposes

Important: WhatsApp messaging is only used with explicit opt-in consent. We comply with WhatsApp's Business Solution Terms and WhatsApp's Commerce Policy. Message data is processed in accordance with Meta's “Business Extension for WhatsApp” data processing terms.

1.3 Information from Meta Marketing API

When you connect your Meta ad account to our App, we may access:

• Ad campaign performance metrics (impressions, clicks, spend, conversions)
• Ad creative content and targeting criteria
• Audience data — aggregated demographic and interest information from your campaigns
• Conversion tracking data via the Meta Pixel or Conversions API
• Custom audience lists that you explicitly upload for ad targeting

We do not use Meta Marketing API data for retargeting or audience creation beyond what you explicitly configure in the App. All API usage complies with Meta's Advertising Policies and Meta Platform Terms.

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain the App: Authenticate your identity, deliver the features you request, and ensure the App functions correctly.
• WhatsApp Messaging: Send notifications, respond to customer inquiries, deliver service updates, and manage conversational support through the WhatsApp Business Platform — always with your opt-in consent.
• Marketing Analytics: Analyze ad campaign performance, generate insights, optimize targeting, and produce aggregated reports through the Meta Marketing API.
• Communication: Respond to your requests, send service-related announcements, and provide customer support.
• Improvement and Development: Understand usage patterns to improve our services, develop new features, and enhance user experience.
• Compliance and Security: Detect and prevent fraudulent activity, abuse, and security incidents, and comply with legal obligations.

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

• Meta Platforms, Inc.: Data is shared with Meta as necessary for Facebook Login, WhatsApp Messaging, and Meta Marketing API functionality. This sharing is governed by Meta'sPrivacy Policyand the contract between us as a Meta platform developer.
• Service Providers: We may engage trusted third-party service providers to host data, process analytics, or provide infrastructure — all bound by contractual data protection obligations.
• Legal Requirements: If required by law, regulation, or legal process, or to protect our rights, property, or safety, we may disclose information to authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, with notice provided to you.

4. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law. Specifically:

• Facebook Login data — retained for the duration of your account relationship with us, and deleted within 90 days of account deletion or permission revocation.
• WhatsApp message data — retained for up to 90 days to facilitate ongoing conversations and support, unless you request earlier deletion.
• Marketing API data — aggregated analytics are retained for up to 24 months; raw campaign data is deleted within 12 months unless needed for ongoing campaigns.

5. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

To exercise any of these rights, please contact us using the details in Section 10. We will respond to your request within 30 days as required by applicable law.

6. Meta Platform-Specific Disclosures

6.1 Facebook Platform

Our App uses Facebook Login and the Facebook Graph API under Meta's Platform Terms. We comply with the following:

• We only request data necessary for App functionality (minimum permissions principle)
• We do not use Facebook data for advertising without your explicit consent
• We do not transfer Facebook data to third parties except as necessary for the App's operation
• We implement reasonable security measures to protect Facebook user data
• We allow users to delete their data and disconnect the App at any time

6.2 WhatsApp Messaging

Our WhatsApp messaging features are provided through Meta's WhatsApp Business API. We adhere to:

• WhatsApp's Business Solution Terms and Business Policy
• Opt-in consent requirements — messages are only sent to phone numbers that have explicitly opted in
• Opt-out mechanisms — every message includes clear instructions for unsubscribing
• End-to-end encryption — WhatsApp messages are encrypted in transit, and we do not decrypt or read message content except as necessary for automated support workflows with user consent
• Limitations on bulk messaging in compliance with WhatsApp's spam and quality policies

We do not share WhatsApp message content with third parties for their own purposes, and we do not use WhatsApp data for advertising or ad targeting unless you provide explicit consent through a separate mechanism.

6.3 Meta Marketing API

Through the Meta Marketing API, we provide advertising analytics and management features. In doing so:

• We only access ad accounts you explicitly authorize
• All API usage complies with Meta's Advertising Policies and Marketing API Terms
• We do not create, modify, or act on custom audiences or lookalike audiences without your explicit action
• Aggregated analytics (e.g., “total impressions across all accounts”) are presented in identifiable form only to the account owner
• We do not combine Marketing API data with data from other sources to create new advertising audiences
• We refresh access tokens in compliance with Meta's token rotation policies

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Secure token storage for Meta API access tokens
• Regular security assessments and vulnerability scanning
• Access controls limiting data access to authorized personnel only
• Incident response procedures for data breach notification
• Regular review of third-party service provider security practices

8. Children's Privacy

Our App is not intended for individuals under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date at the top. We may also provide additional notice through the App or via email for significant changes. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: