Parallax Studio

Privacy

What our posting tool holds, why, and how long for.

It holds what it needs to publish posts for our clients and look after the comments on them. It keeps no copy of anyone's comment.

01

What the tool is

Parallax Posting is the tool Parallax Studio uses to publish posts for its clients to their own Facebook Pages and Instagram accounts. It also helps us look after the comments people leave on our clients' posts. It works through Meta's own systems for this.

Only we use it. Nobody else can sign in, and it works only with Pages and accounts that a client has asked us to run.

02

What it holds

  • the access keys Meta gives the tool when we connect a client's Facebook Page and its Instagram account, which are what let it publish there
  • the name of each connected Page and Instagram account, and the number Meta gives it
  • the name of the Facebook account at Parallax Studio that connected them
  • the posts we prepare: the words, the pictures, and when and where each one is to go out
  • what Meta sends back once a post is published: its number and link, or the reason it failed
  • the number Meta gives each comment on our clients' posts, so the tool can tell which comments are new
  • what we did about a comment: our reply, or that we hid or deleted it, and when

Meta collects each picture from a web address. So the tool keeps each picture at a public web address that is hard to guess. Anyone with that address could open the picture until we delete it, 30 days after the post goes out.

03

Comments

The tool reads a client's comments from Meta when we need them. It reads the commenter's name or username as Facebook or Instagram shows it, what they wrote, and when. It does not keep a copy of the comment or the commenter's name.

We reply to a comment, hide it or delete it only on the client's behalf. We hide or delete a comment only when it is spam or abusive, or when the client asks us to. We make every reply, hide or delete ourselves, or approve it before the tool makes it.

When new comments arrive, the tool emails us how many there are and on which post. The email does not include the comments.

04

What it never holds

The tool does not read or keep messages, likes or followers. Apart from the comment numbers and our records of what we did, it keeps nothing about the people who see or comment on a post. It does not run adverts.

05

Why, and who else handles it

We use these details only in our work for our clients: publishing the posts they ask for, and looking after the comments on them. The client decides what each post says and shows, and we publish it on their behalf, following their instructions.

Our legal basis for the details we decide how to use is legitimate interests. They include the name of the Facebook account that connected a Page, and the numbers of the comments we have seen. In UK data protection law, legitimate interests means a reasonable purpose of our own. Ours is publishing the posts our clients engage us to publish, and looking after the comments on them.

Meta receives each post when it is published, and Meta's own privacy policy then covers it on Facebook and Instagram. Cloudflare hosts the tool and stores its records and pictures. Resend sends the tool's emails to us. Anthropic's Claude, an AI service, helps us prepare the posts and our replies to comments. It also helps us run the tool, so it sees the posts, the comments we look after and our replies. It never sees the access keys.

Cloudflare, Anthropic and Resend may handle these details in the United States. Cloudflare does so under the UK-US data bridge, the arrangement the UK government approved for sending personal details to certified US companies. Anthropic and Resend do so under their own safeguards, such as standard contractual clauses.

06

How long we keep it

We delete the tool's copy of a post's pictures 30 days after the post goes out. Our record of each post is kept for 12 months after it goes out, then deleted. We delete each comment's number, and our record of what we did about it, 12 months after the tool first saw that comment.

We delete a client's access keys within 7 days of our work for them ending, or sooner if they ask. The posts themselves stay on Facebook and Instagram until the client removes them.

07

Your rights

You can ask for a copy of what we hold about you, or ask us to correct it, delete it or limit how we use it. Write to hello@parallax-studio.io. How to have the tool's records deleted, and how to remove its access yourself, is on the data deletion page.

You can also object to our use of your details at any time, which means telling us to stop. Write to hello@parallax-studio.io.

If you are unhappy with how we have handled your details, tell us. You can also complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint.

08

Who we are

Parallax Posting is run by Parallax Thinking Ltd, which trades as Parallax Studio. Its company number is 16344822, and its registered office is 90 Florence Road, Poole, Dorset, BH14 9JF.