Privacy Policy

Last updated: August 30, 2026

This Privacy Policy explains how MLINO ("MLINO", "we", "us", or "our") collects, uses, stores, and protects information when you use MLINO Content Studio (the "Service"), including when you connect a third-party platform account such as Instagram or Facebook through Meta Platforms, Inc. ("Meta").

1. Who We Are

MLINO Content Studio is a content production and publishing platform that helps teams plan, create, review, and publish content, and connect their own social media accounts to manage approved publishing workflows.

2. Information We Collect

2.1 Account information

Name, email address, and workspace details you provide when creating an account.
Authentication credentials, stored using industry-standard hashing — we never store your password in plain text.

2.2 Content you create

Drafts, briefs, images, captions, and other content you create or upload inside the Service.
Review and approval history for that content.

2.3 Information from connected platforms (Meta)

When you choose to connect an Instagram professional or Facebook Page account through Meta's login and authorization flow, we receive:

Basic account identifiers (account ID, username, account type) needed to publish on your behalf.
An access token, scoped to the specific permissions you approved during authorization.
Publishing status information (e.g. whether a post succeeded) for content you explicitly approved for publishing.
Basic, aggregate engagement metrics (such as reach or interaction counts) for content published through the Service, used to power in-app analytics.

We only request the permissions required for the features described in this policy. We do not request or use permissions for reading your private messages, or for any purpose you have not explicitly authorized.

2.4 Usage and technical data

Log data such as IP address, browser type, and pages visited, used for security and reliability purposes.

3. How We Use Meta Platform Data

MLINO uses Meta APIs (including the Instagram Graph API) to allow users to connect their own professional Instagram or Facebook accounts and manage approved publishing workflows. Specifically, data obtained through Meta APIs is used only to:

Publish content to your connected account, but only after you have explicitly reviewed and approved that specific piece of content inside the Service.
Display the status of your connected account and recent publishing activity within your MLINO workspace.
Show basic performance metrics for content you published through the Service, so you can see what worked.
Maintain and troubleshoot the connection itself (e.g. detecting an expired or revoked token).

What we do not do: We do not use Meta Platform data for advertising, do not build advertising profiles from it, do not sell it, and do not share it with third parties except as strictly necessary to operate the Service (e.g. our cloud infrastructure provider) or as required by law.

4. How We Use Your Information (General)

To provide, maintain, and improve the Service.
To authenticate you and secure your account.
To communicate with you about your account or the Service.
To comply with legal obligations.

5. Data Storage and Security

Access tokens for connected platforms are encrypted at rest and are never exposed in client-side code or API responses.
Data for each workspace is logically isolated from other workspaces.
We apply reasonable technical and organizational measures to protect your data, but no system can be guaranteed 100% secure.

6. Data Retention

We retain account and content data for as long as your account is active. Meta access tokens are retained only for as long as needed to provide the connected features, or until you disconnect the account or request deletion. Raw provider API responses used for short-term debugging are retained for a limited period and then automatically purged.

7. Your Rights and Choices

You can disconnect a connected Meta account at any time from your workspace settings — this immediately stops any further publishing access.
You can request deletion of your account and associated data at any time. See our Data Deletion Instructions.
Depending on your location, you may have additional rights to access, correct, or export your data. Contact us to exercise these rights.

8. Children's Privacy

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

10. Contact Us

Questions about this Privacy Policy or your data? Reach us at privacy@mlino.site, or see our Contact page.