Privacy Policy

Effective Date: April 23, 2026 · Last Updated: April 23, 2026

This Privacy Policy describes how Rukn Al-Sbrat Trading Services Establishment ("we", "us", or "the Establishment") collects, uses, and protects information in connection with the "Sbrat Social Manager" application (the "Application"), which is used internally by the Establishment to manage its own Instagram Business account (@we_sbrat).

1. Information We Access

Through the Instagram Graph API, and only after explicit authorization by the account owner, the Application may access:

• Profile information: username, account type, profile picture, bio, follower/following counts, media count.
• Media content: photos, videos, reels, carousels published by the authorized account, including captions, timestamps, like counts, and comment counts.
• Comments: comments on the Establishment's own media, for the purpose of moderation and reply.
• Direct messages: messages received on the Establishment's Instagram inbox, for the purpose of customer communication.
• Insights: aggregated, anonymized statistics about content performance (reach, impressions, engagement).

2. How We Use Information

Information accessed through the Instagram Graph API is used exclusively for:

• Displaying the authorized account's own data within the Application's dashboard.
• Publishing content (photos, videos, reels, carousels) on behalf of the account owner.
• Responding to comments and direct messages.
• Analyzing performance through insights, to improve the Establishment's content strategy.

We do not sell, rent, trade, or share any data with third parties.

3. Data Storage and Security

• The Application stores the OAuth access token in the browser's localStorage on the authorized user's device only.
• No user data is stored on any external server owned or operated by the Establishment.
• API requests are proxied through a Cloudflare Worker which acts solely as a stateless passthrough — no data is logged or retained.
• Access tokens automatically expire after 60 days unless refreshed.

4. Third-Party Services

The Application relies on the following third-party services:

• Instagram Graph API (Meta Platforms, Inc.) — for all account operations. Subject to Meta's Platform Terms and Instagram Platform Policies.
• Cloudflare Workers — used as a stateless OAuth proxy. Cloudflare does not store any user data.

5. Data Retention and Deletion

Because the Application does not store user data on any server, there is no retained data to delete beyond what is held locally on the authorized user's browser. The user can revoke access at any time by:

• Clearing browser storage for the Application's domain, or
• Removing the Application's authorization from Instagram Settings → Apps and Websites.

For formal data deletion requests, visit our Data Deletion page or email yasser226900@gmail.com.

6. Children's Privacy

The Application is intended exclusively for use by the authorized owner/operator of the Establishment. It is not directed to, and does not knowingly collect information from, children under the age of 18.

7. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect the most recent revision.

8. Contact

For questions or concerns regarding this policy, contact:
Rukn Al-Sbrat Trading Services Establishment
Commercial Registration No. 7038810789
VAT Registration No. 312165027400003
An Naseem Dist., Buraidah, Kingdom of Saudi Arabia
Email: yasser226900@gmail.com