Privacy Policy

1. Who we are

WebSeal provides software tools for content creation, automation, scheduling, and publishing workflows. CasanovaAI is a WebSeal application designed to help users create, organize, generate, schedule, and manage social media content.

For privacy-related requests, including data access or deletion requests, contact us through the contact details available at https://webseal.eu.

2. Data we collect

Depending on how you use our services, we may collect the following categories of data.

Account and authentication data

When you create or use an account, we may process:

• 

  your name
• 

  email address
• 

  user ID
• 

  login/session information
• 

  account role and access level
• 

  authentication cookies or session identifiers

Meta/Facebook Login data

If you choose to connect your Facebook account or Facebook Pages to CasanovaAI or another WebSeal application, we may receive data from Meta, depending on the permissions you grant. This may include:

• 

  Facebook user ID
• 

  basic profile information made available by Meta
• 

  connected Facebook Pages that you manage or are authorized to access
• 

  Page IDs
• 

  Page names
• 

  Page access tokens
• 

  granted permissions and authorization status

We only request Meta permissions that are needed to provide the requested functionality.

Facebook Page and publishing data

If you connect a Facebook Page, we may process data related to publishing workflows, including:

• 

  selected Page/Fanpage ID
• 

  Page name
• 

  Page access token
• 

  post captions
• 

  text content
• 

  uploaded or generated media URLs
• 

  scheduled publishing times
• 

  publishing status
• 

  publishing errors
• 

  export or publish timestamps
• 

  metadata needed to retry, audit, or display publishing activity

Content and AI generation data

When you use CasanovaAI or related tools, we may process content that you provide or generate, including:

• 

  prompts
• 

  captions
• 

  image or video generation inputs
• 

  generated text
• 

  generated media references
• 

  social media post drafts
• 

  folder/campaign configuration
• 

  scheduling settings
• 

  automation settings

If third-party AI or media processing providers are used, relevant content may be sent to those providers only to perform the requested generation or processing task.

Technical and usage data

We may collect technical information necessary to operate and secure our services, such as:

• 

  IP address
• 

  browser type
• 

  device information
• 

  operating system
• 

  timestamps
• 

  log entries
• 

  error reports
• 

  security events
• 

  API request metadata

3. How we use data

We use collected data to:

• 

  provide and operate WebSeal and CasanovaAI services
• 

  authenticate users and manage sessions
• 

  connect Facebook accounts and Facebook Pages when requested by the user
• 

  show the list of Facebook Pages the user is authorized to manage
• 

  create, manage, schedule, and publish posts to connected Facebook Pages
• 

  store campaign and folder settings
• 

  generate or assist in generating content when requested
• 

  display publishing history and status
• 

  diagnose technical issues
• 

  secure the application
• 

  prevent misuse
• 

  comply with legal and platform requirements
• 

  respond to user requests, including data access or deletion requests

We do not sell personal data.

4. Meta/Facebook permissions

When using Meta/Facebook integrations, our applications may request permissions required for the selected functionality. Depending on the feature, these may include permissions such as:

• 

  access to basic profile information
• 

  listing Facebook Pages available to the user
• 

  reading Page-related information needed to display connected Pages
• 

  publishing or managing posts on selected Pages
• 

  publishing video content, if video publishing is enabled

The exact permissions requested may depend on the product version and enabled features. You can review and revoke permissions through your Facebook account settings.

5. Page access tokens

To publish or manage content on a connected Facebook Page, our application may store Page access tokens provided through Meta authorization.

We use Page access tokens only to perform actions requested or configured by the user, such as listing connected Pages, preparing publishing workflows, or publishing content to a selected Page.

We protect tokens using appropriate technical and organizational measures. We do not expose tokens publicly and we do not share them with unauthorized third parties.

6. Legal basis for processing

Depending on your location and the specific processing activity, we process personal data based on one or more of the following legal bases:

• 

  performance of a contract or provision of requested services
• 

  user consent, especially when connecting Meta/Facebook accounts or Pages
• 

  legitimate interests, such as security, debugging, service improvement, and abuse prevention
• 

  compliance with legal obligations

You may withdraw consent or disconnect integrations where applicable, but some features may stop working if required data or permissions are removed.

7. Sharing data with third parties

We may share data with service providers only when necessary to operate our services. These may include:

• 

  hosting providers
• 

  database and infrastructure providers
• 

  authentication or security providers
• 

  AI generation or media processing providers
• 

  Meta/Facebook APIs when the user connects a Facebook account or Page
• 

  analytics or logging tools, if enabled

We require service providers to process data only as necessary to provide their services and to apply appropriate security measures.

We do not sell personal data.

8. Data retention

We retain personal data only for as long as necessary to provide the service, comply with legal obligations, resolve disputes, maintain security, and support legitimate business needs.

Examples:

• 

  account data may be retained while the account is active
• 

  connected Page data may be retained while the integration remains active
• 

  Page access tokens may be retained while the user keeps the Page connected
• 

  post drafts and publishing records may be retained as part of the user’s workspace
• 

  logs may be retained for a limited period for security and debugging

Users may request deletion of their data as described below.

9. Data deletion and Meta data deletion requests

You may request deletion of your data from WebSeal and CasanovaAI.

To request deletion, contact us through the contact details available at https://webseal.eu and include enough information for us to identify your account or connected integration.

If you connected your Facebook account or Facebook Page, you may also remove the app from your Facebook settings. When you remove the app or request deletion, we will delete or disconnect data received from Meta where technically and legally possible, including associated user identifiers, Page connection data, and stored Page access tokens.

Data deletion may include:

• 

  removing connected Facebook Page records
• 

  deleting stored Page access tokens
• 

  deleting or anonymizing associated Meta user identifiers
• 

  deleting user account data where applicable
• 

  deleting or anonymizing stored drafts and publishing records where applicable

Some data may be retained if required for legal, security, fraud prevention, accounting, or compliance purposes.

10. User rights

Depending on your location, you may have rights to:

• 

  access your personal data
• 

  correct inaccurate data
• 

  delete your data
• 

  restrict or object to processing
• 

  withdraw consent
• 

  request data portability
• 

  lodge a complaint with a relevant data protection authority

To exercise these rights, contact us through the contact details available at https://webseal.eu.

11. Cookies and local storage

Our website and applications may use cookies or similar technologies to:

• 

  keep users signed in
• 

  maintain secure sessions
• 

  remember preferences
• 

  protect against abuse
• 

  improve performance and reliability

You can control cookies through your browser settings. Some features may not work correctly if cookies are disabled.

12. Security

We use reasonable technical and organizational measures to protect personal data, including access controls, secure transport, restricted access to secrets and tokens, and infrastructure-level protections.

However, no system is completely secure. Users are responsible for keeping their login credentials secure and for managing access to their connected Facebook accounts and Pages.

13. International data transfers

Depending on the infrastructure and service providers used, data may be processed in countries other than your country of residence. Where required, we apply appropriate safeguards for such transfers.

14. Children’s privacy

Our services are not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us so we can take appropriate action.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the effective date on this page. Continued use of the services after changes means you accept the updated Privacy Policy.