Privacy Policy
MGC Developments ("we", "us", or "our") operates the website https://mgcdevelopments.com and associated digital tools including MGC AutoPost. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including integrations with Meta (Facebook and Instagram), LinkedIn, YouTube, and TikTok.
By using our Service, you agree to the collection and use of information in accordance with this policy.
1. Company Information
Legal Business Name: MGC Developments
Website: https://mgcdevelopments.com
Contact Email: info@mgcdevelopments.com
2. Information We Collect
We may collect the following categories of information:
- Account Information: Name, email address, and profile information provided during registration.
- Social Platform Data: When you connect a social media account (Facebook, Instagram, LinkedIn, YouTube, TikTok), we collect OAuth access tokens, account identifiers, profile names, page IDs, and publishing permissions granted through the platform's official authorization process.
- Content Data: Text, images, videos, captions, and scheduling metadata you upload or create through our Service.
- Usage Data: Log files, IP addresses, browser type, device identifiers, pages visited, and interaction data collected automatically.
- Cookies and Tracking: Session cookies, authentication tokens, and preference cookies as described in our Cookie Policy.
3. Facebook and Instagram Data (Meta Platforms)
Our Service integrates with the Meta Graph API to allow you to manage and publish content to Facebook Pages and Instagram Business Accounts. When you connect your Meta account, we:
- Request only the permissions necessary to perform the specific functions you authorize, including
pages_show_list,pages_manage_posts,instagram_business_basic, andinstagram_business_content_publish. - Store your Facebook Page Access Tokens and Instagram access credentials using AES-256 encryption at rest in our secure database.
- Use your Meta credentials solely to publish content on your behalf at the times and with the content you have explicitly scheduled or approved.
- Do not sell, share, or transfer your Meta user data or access tokens to any third party.
- Do not use your Meta data for advertising targeting, profiling, or any purpose beyond operating the Service features you requested.
- Retain Meta access tokens only for as long as your account is active or as required to complete scheduled publishing tasks.
Your use of our Facebook and Instagram integration is also governed by Meta's own terms. We recommend reviewing Meta's Privacy Policy and Platform Terms.
4. Other Platform Integrations
Similarly to Meta, when you connect LinkedIn, YouTube, or TikTok accounts, we request only the minimum permissions required, store credentials encrypted, and use them solely to publish content you have scheduled through our Service.
5. How We Use Your Information
- Operate, maintain, and improve our Service.
- Authenticate your identity and manage your account securely.
- Connect to third-party social media platforms on your behalf and publish content as directed by you.
- Generate AI-powered content suggestions, captions, and scheduling recommendations.
- Send transactional communications (publish confirmations, error alerts, account notices).
- Comply with legal obligations and enforce our Terms of Service.
- Detect, prevent, and address technical issues, fraud, or security threats.
6. How We Share Your Data
We do not sell your personal information. We may share data only in these limited circumstances:
- Service Providers: Trusted infrastructure providers who process data on our behalf under strict confidentiality agreements.
- Platform APIs: Data transmitted to social media platforms solely to perform publishing actions you have authorized.
- Legal Requirements: If required by law, court order, or regulatory authority.
- Business Transfers: In connection with a merger or acquisition, with notice to affected users.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account or disconnect a social platform, associated access tokens and credentials are permanently deleted within 30 days. Published post records may be retained for up to 12 months for analytics purposes.
8. Data Security
We implement AES-256 encryption for sensitive credentials, HTTPS/TLS for all data transmission, JWT-based authentication with automatic expiry, and Row Level Security (RLS) for database access control. No method of storage is 100% secure and we cannot guarantee absolute security.
9. Your Rights
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data — see our Data Deletion page.
- Disconnect any connected social media account at any time.
- Withdraw consent for data processing where consent is the legal basis.
To exercise any of these rights, contact us at info@mgcdevelopments.com.
10. Data Deletion
You can request deletion of your personal data at any time via our Data Deletion page. Upon a verified request, we permanently remove your account data, connected social platform tokens, and associated content within 30 days.
You may also revoke our access directly via Facebook's App Settings or Instagram's Apps and Websites settings.
11. Children's Privacy
Our Service is not directed to individuals under 18. We do not knowingly collect personal information from minors. If we become aware a minor has provided personal information, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date above and, where appropriate, by email.