Privacy Policy
This Privacy Policy outlines how GBAT Workspace (operated by Axell Group Of Companies) accesses, handles, protects, and deletes data in connection with our Social Push publishing integration, including the Pinterest Developer API and Meta Graph API (Instagram & Facebook).
Pinterest API Purpose
Used strictly to query authorized boards and publish product Pins (media, captions, destination links) selected by the store owner.
Zero Data Selling
We never sell, rent, monetize, or transfer social account credentials or user data to third-party data brokers or advertisers.
Total User Control
Instant token revocation via Pinterest / Facebook settings and one-click data deletion requests anytime.
1Overview & Service Scope
GBAT Workspace is an internal e-commerce management and automated social publishing tool designed for multi-brand retail operations. The Social Push module allows authenticated store managers to create promotional product creatives, generate engaging captions, and publish them directly to authorized social media channels, specifically:
- Pinterest: Publishing product Pins to specified user boards via the official Pinterest Developer API.
- Instagram: Publishing product photos and captions via Meta Graph API (Instagram Content Publishing API).
- Facebook: Publishing product posts to authorized brand Facebook Pages via Meta Graph API.
We value the privacy of our users, their customers, and social platform audiences. We collect and process only the minimal data strictly required to facilitate publishing requests initiated by the user.
2. Pinterest Developer API Data Use & Access
In accordance with the Pinterest Developer Terms of Service, this section describes all scopes and interactions between GBAT Workspace and Pinterest:
A. Permissions and Scopes Requested
boards:read: Allows GBAT Workspace to list the user's available Pinterest boards. This allows the store manager to select which target board to pin the product to.pins:write: Allows GBAT Workspace to create and publish new Pins to the designated board, including the user-approved image URL, title, description, and target store product URL.pins:read: Allows verification that the pin was successfully indexed by Pinterest and saves the permanent URL (permalink) in the user's audit log for reporting.
B. Information We Do NOT Collect
GBAT Workspace does NOT access, read, or process:
- Personal direct messages or chat history.
- Followers, following lists, or personal browsing history.
- Secret or private boards not selected for publishing.
- Financial, payment, or ad billing information.
C. Adherence to Pinterest Community Guidelines
GBAT Workspace enforces strict quality safeguards: Pins created through our system must link directly to legitimate, active product landing pages matching the featured creative. We prohibit any form of cloaking, redirection tricks, or repetitive spam pinning.
3. Meta Graph API (Instagram & Facebook) Data Use
When publishing content to Facebook Pages and Instagram Professional accounts:
- Publishing Only: Tokens are used exclusively for publishing scheduled product images and captions to verified business Pages (
pages_manage_posts) and Instagram accounts (instagram_content_publish). - No End-User Tracking: We do not track or profile social media users who view, like, or comment on published posts.
- Compliance with Meta Platform Terms: All integrations strictly comply with Meta's Platform Terms and Developer Policies.
4Data Storage, Encryption & Security Standards
We implement industry-grade technical and organizational measures to safeguard all credentials and tokens:
API tokens (including Pinterest access tokens and Meta Page tokens) are encrypted at rest using AES-256 encryption within dedicated secure storage (Supabase Vault / local restricted config).
All communication between the user browser, our servers, and third-party APIs (Pinterest, Meta, Shopify) is encrypted in transit via HTTPS/TLS 1.3.
Tokens are never exposed in client-side JavaScript bundles or public HTML markup. Middleware and server endpoints strip credentials from public responses.
Publish logs record only the timestamp, target channel, board name, and resulting public post link. No sensitive personal data is stored in logs.
5Third-Party Data Sharing & Non-Disclosure
We do NOT sell, rent, monetize, or trade any personal data or social media account credentials.
Data is shared solely with the specific third-party APIs you configure (e.g., transmitting your post payload to Pinterest when you click "Publish to Pinterest"). We do not partner with data brokers, ad networks, or user-tracking syndicates.
6. User Control, Revocation & Data Deletion Instructions
Users have unconditional control over their social media connections and stored data. You can disconnect accounts and request complete data purging at any time.
A. Immediate Revocation via Pinterest Account Settings
You can instantly revoke GBAT Workspace's access to your Pinterest account at any time without contacting us:
- Log in to your Pinterest account and navigate to Pinterest Settings → Apps.
- Locate GBAT Workspace (or your configured App name).
- Click Revoke Access. This immediately destroys our authorization token.
B. Immediate Revocation via Meta / Facebook Settings
To disconnect Instagram or Facebook publishing permissions:
- Go to your Facebook profile or Business Manager Settings → Business Integrations.
- Find the GBAT Workspace integration and click Remove.
C. Complete Data Deletion Request (Callback & Contact)
To purge all tokens, configured stores, and historical publish records from GBAT Workspace:
- Self-Service: In GBAT Workspace, navigate to Settings → Social API Keys and remove the stored Access Token or click Clear History on the Social Push page.
- Official Data Deletion Request: Send an email to privacy@axellgroup.com with the subject
Data Deletion Request. All records associated with your account will be permanently expunged within 48 hours of verification.
7Compliance with Platform Developer Policies
GBAT Workspace operates in strict alignment with:
8Contact Information & Data Inquiries
For any questions regarding this Privacy Policy, your API permissions, or data handling practices, please contact our Compliance & Privacy Team: