Platforms: Facebook • Instagram • YouTube
Effective Date: April 15, 2026
Last Updated: April 16, 2026
1. Introduction
Howazt Feedback Manager (“we”, “our”, or “us”) is a unified social media feedback management application operated by DigiKing Service Provider ,which connects to your Facebook Pages, Instagram Business/Creator accounts, and YouTube channel.
This Privacy Policy explains what data we collect from each platform, how we use it, how we protect it, and your rights.
By authorizing Howazt Feedback Manager to access your Meta and/or Google (YouTube) accounts, you agree to the practices described in this policy. If you do not agree, please disconnect the app and discontinue use.
| This single policy satisfies the privacy requirements of Meta Platform Policies (for Facebook and Instagram) and Google API Services User Data Policy (for YouTube). |
2. Platforms Connected and Data Collected
Howazt Feedback Manager connects to three platforms. We access only the minimum data necessary to deliver the feedback management service on each platform.
2.1 Facebook (via Meta Platform API v19.0)
When you connect your Facebook Page, we collect:
- Page Information: Facebook Page name, Page ID, and Page access tokens.
- Published Posts: Posts that you create and publish through our service on your connected Facebook Pages.
- Post Metadata: Timestamps and post IDs for posts published through our service.
- Engagement Metrics: Aggregate comment counts and reaction counts (only numerical data)
We do not collect individual comments, comment authors, or private comments from your Facebook Page.
API Permissions Requested:
- pages_show_list — View Pages you manage
- pages_manage_posts — Create posts on your Pages
- pages_read_engagement — Read engagement metrics (like counts, comment counts, reaction counts)
2.2 Instagram (via Meta Platform API v18.0)
When you connect your Instagram Business or Creator account, we collect:
- Account Information: Instagram account ID linked to your Meta account.
- Published Media: Media content that you create and publish through our service on your Instagram account.
- Media Metadata: Timestamps and media IDs for content published through our service.
- Engagement Metrics: Aggregate comment counts (only numerical data).
We do not collect individual comments, mentions, or private content from your Instagram account.
API Permissions Requested:
- instagram_basic — Access basic account information.
- instagram_content_publish — Create and publish media content.
- pages_show_list — View Pages and Instagram accounts you manage (for platform selection).
2.3 YouTube (via YouTube Data API v3)
When you connect your YouTube channel, we collect:
- Channel Information: Channel ID, channel name, description
- Channel Statistics: Subscriber count
- Authentication: OAuth 2.0 access token and refresh token
- Token Metadata: Token expiration timestamp
API Permissions Requested:
- openid, email, profile — Google identity
- https://www.googleapis.com/auth/youtube.readonly — Read channel data
- https://www.googleapis.com/auth/youtube.upload — Upload videos
- https://www.googleapis.com/auth/youtube.force-ssl — Secure API access
We do NOT access:
- YouTube comments
- Subscriber lists
- Analytics data
- Private videos
- Community posts
2.4 Data We Do NOT Collect
❌ Private messages or DMs on Facebook, Instagram, or YouTube
❌ YouTube comments, community posts, or subscriber information
❌ Your Meta or Google account passwords
❌ Payment or financial information
❌ Device location data
❌ Any data from personal (non-business) Facebook or Instagram profiles
3. How We Use Your Information
We use the data collected solely to operate Howazt Feedback Manager.
We do not sell, rent, lease, or share your data with any third party for advertising, marketing, or commercial purposes.
3.1 Facebook & Instagram Data
- Display Page comments in a unified feedback dashboard
- Allow you to view, filter, categorize, and respond to customer feedback
- Maintain authenticated sessions via Meta access tokens
3.2 YouTube Data
- Authenticate your YouTube channel using Google OAuth 2.0
- Display channel information in the dashboard
- Upload videos to your YouTube channel as directed by you
- Display upload progress and status
3A: Responsibility for Published Content
Howazt Feedback Manager is a technical publishing tool only. The user connecting their social media accounts is solely responsible for:
- All content published via our platform
- Holding rights/permissions for published content
- Compliance with Meta and Google platform policies
- Obtaining consent from feedback submitters prior to public posting
Howazt Feedback Manager bears no liability for content published by Users.
4. Google API Services — YouTube Specific Disclosures
Howazt Feedback Manager’s use of data received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements.
4.1 Limited Use Compliance
We use YouTube data only for:
- Providing and improving app features visible to the user
- Complying with applicable law
We do NOT use YouTube data to:
- Serve advertising
- Sell to third parties
- Transfer data beyond required functionality
- Determine creditworthiness
4.2 YouTube API Token Storage
- OAuth tokens are stored securely with encryption at rest
- Used only to authenticate API requests
- You may revoke access anytime: https://myaccount.google.com/permissions
4.3 YouTube Terms of Service
By connecting your account, you agree to:
5. Legal Basis for Processing
- Contractual Necessity: To provide the service
- Consent: Via OAuth authorization
6. Data Sharing and Third Parties
We do not sell or share your data. Limited disclosures:
- Infrastructure providers (e.g., cloud hosting and database service providers) operating under strict confidentiality and data protection obligations.
- Legal requirements
- Business transfers (with notice)
7. Data Retention and Deletion
7.1 Facebook & Instagram
While Connected:
We store Facebook Page access tokens, Instagram Business Account IDs, and related operational data in our database strictly for providing the Service.
Upon Disconnection:
When a user disconnects their Facebook or Instagram account:
- The corresponding database record (including access tokens and identifiers) is permanently deleted (hard delete) immediately upon disconnection, with no retention of personal or account-level data.
- All associated user-generated data, including feedbacks and related records linked to the platform, are also permanently deleted.
- No residual personal or account-level data is retained post-deletion.
7.2 YouTube
While Connected:
We store YouTube access tokens, refresh tokens, and channel metadata in our database to enable platform functionality.
Upon Disconnection:
When a user disconnects their YouTube account:
- The account status is immediately set to INACTIVE.
- The corresponding database record (including tokens and channel metadata) is permanently deleted (hard delete) immediately upon disconnection, with no retention of personal or account-level data.
- All associated user-generated data, including feedbacks and platform-linked records, are also permanently deleted.
- No residual personal or account-level data is retained post-deletion.
7.3 Immediate Deletion Requests
Users may request immediate deletion of their data at any time. Upon such request, all relevant data will be permanently deleted in accordance with the above process.
7.4 Exception: Non-Personal Data
We may retain aggregate, anonymized, or non-personal statistical data (e.g., usage metrics, counts) in a fully de-identified form for analytics and service improvement purposes. This data cannot be used to identify any individual user.
In certain cases, minimal system logs required for security or legal compliance may be retained for a limited period; however, such data does not contain personal or identifiable user information.
| Note: Aggregate, anonymised, or non-personal statistical data (e.g., post counts) may be retained beyond the above periods in de-identified form for service improvement purposes only. |
8. Data Security
✅ HTTPS/TLS encryption
✅ Encrypted token storage (encryption at rest)
✅ Role-based access control (least privilege principle)
✅ Access logging and monitoring
✅ Regular security audits and updates
9. Your Rights
9.1 All Users
- Access
- Correction
- Deletion
- Withdraw consent
9.2 GDPR (EU/EEA)
- Data portability
- Restrict processing
- File complaints
9.3 CCPA/CPRA (California)
- Right to know
- No sale of data
- No discrimination
9.4 India (DPDP Act 2023)
- Access
- Correction
- Erasure
- Grievance redressal
10. Meta Platform Data Deletion
You can remove the app via:
- Facebook → Settings → Apps and Websites
- Instagram → Settings → Apps and Websites
Data is permanently deleted (hard delete) immediately upon removal of the app, with no retention of personal data.
11. Data Deletion Instructions
To request deletion of your data:
1. Remove the app from your Facebook or Instagram account
OR
2. Send a deletion request via email to: contact@digikingsp.com
Please include your account details and platform name in the request.
All deletion requests are processed immediately, and the associated data is permanently deleted (hard delete) without delay.
12. Children’s Privacy
This service is not intended for users under 13 (or 16 in EU).
We do not knowingly collect children’s data.
13. International Data Transfers
We ensure safeguards such as:
- Standard Contractual Clauses (SCCs)
- Compliance with applicable laws
14. Changes to This Privacy Policy
We may update this policy.
Changes will be notified via email or in-app.
15. Contact Us
| App Name | Howazt Feedback Manager |
| contact@digikingsp.com | |
| Website | https://digikingsp.com/privacy-policy-howaztfeedbackmanager |
| Platforms Covered | Facebook, Instagram, YouTube |