Privacy.

Account details. When you sign in, our sign-in provider (Clerk) handles your name, email address and login. We never see your password.

Your Facebook Page content. When you connect your Facebook Page, you grant us access — via Meta’s Graph API, with your explicit OAuth consent — to your Page’s posts and media. We use that content for one thing: building your website and keeping it in sync with what you post.

Payment details. Payments are handled by Stripe. We never see or store your card number — Stripe tells us only that a payment succeeded or failed.

Technical basics. Our sites run on Vercel, which keeps standard server logs (IP address, request time) to run and secure the service.

Synced Page content is stored in our database so your site loads fast. The connection tokens that let us read your Page are stored encrypted (AES-256-GCM). Access is limited to what the service needs to run.

We don’t sell your data. We don’t use your content for anything except your own website. We collect the minimum we need (data minimisation) and use it only for the purpose you gave it to us for (purpose limitation).

Only the services that run your site: Clerk (sign-in), Stripe (payments), Vercel (hosting) and Meta (the Facebook connection you authorise). Each processes data under its own privacy policy. No advertising networks, no data brokers.

You can ask to see, correct or delete the data we hold about you or your organisation. We follow the Australian Privacy Act and apply GDPR-style rights to everyone: access, correction and deletion on request. To have your data deleted, see our data deletion instructions.

Email dev@triplesparkle.agency — a real person replies.