Effective Date: May 22, 2026

Last Updated: May 22, 2026

This Privacy Policy describes how Green Mountain Legacy LLC ("GML," "we," "us," or "our") collects, uses, stores, processes, and deletes information in connection with the GML Managed Marketing Service (the "Service"). This Privacy Policy applies specifically to users of the Service.

1. Information We Collect

When you use the Service or connect your Instagram or Facebook account, we may collect and process the following categories of information:

Business Profile Information (provided by you at onboarding)

• Business name, services, audience description, and brand details
• Logos, photos, and other brand assets you supply

Account Information (retrieved via Meta API)

• Instagram Business Account ID
• Facebook Page ID
• OAuth access tokens and authentication credentials

Content and Publishing Data

• Captions and post copy
• Uploaded images and media
• Scheduled publishing dates and times
• Publishing confirmations and post metadata

Analytics Data

• Reach, impressions, likes, comments, engagement metrics, and other analytics made available through the Instagram Graph API

Billing Information

• Billing is processed through Stripe. We do not store full payment card information.

2. Meta Platform Permissions

Our application may request permissions from Meta platforms including:

• instagram_basic — to identify and connect your Instagram Business account
• instagram_content_publishing — to publish approved content on your behalf
• instagram_manage_insights — to retrieve analytics and engagement metrics
• pages_show_list — to identify connected Facebook Pages associated with your Instagram Business account

We only request permissions necessary to provide the Service. We do not access Instagram direct messages, private conversations, or unrelated account data.

3. How We Use Information

We use information collected through the Service solely to:

• Provide and maintain the Service
• Publish approved social media content
• Generate analytics and reporting
• Manage subscriptions and billing
• Prevent fraud, abuse, or unauthorized access
• Comply with legal obligations and Meta platform requirements
• Improve internal workflows and service quality

We do not:

• Sell personal data
• Share Meta platform data with data brokers
• Use customer data for advertising purposes
• Use customer content to train proprietary AI models

We only use Meta platform data in accordance with applicable Meta Platform Terms and Developer Policies.

4. Legal Basis for Processing

We process information:

• To perform our contractual obligations to you
• Based on your consent when you connect your accounts
• For legitimate business purposes related to operating and securing the Service
• To comply with applicable legal obligations

5. Third-Party Services

The Service integrates with third-party providers including Meta Platforms (Instagram and Facebook), Stripe, Google, GitHub, and Anthropic. These providers may independently process information according to their own privacy policies and terms.

6. Data Storage and Security

Customer data is stored on GML's secure, password-protected systems and with the third-party providers listed in Section 5. We use commercially reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, or misuse. Security measures may include:

• Encrypted credential storage where appropriate
• Password-protected systems
• Restricted access controls
• Secure third-party service providers
• Periodic credential rotation and access review

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International Data Transfers

Information may be processed or stored in the United States or other jurisdictions where our service providers operate. By using the Service, you consent to such transfers and processing.

8. Data Retention

We retain information:

• For the duration of your active subscription
• As reasonably necessary to provide the Service
• As required for legal, accounting, tax, dispute resolution, or security purposes

After termination of the Service, we generally delete or anonymize customer data within 90 days unless retention is legally required or reasonably necessary to enforce agreements, resolve disputes, or prevent fraud.

9. Data Deletion Requests

You may request deletion of your information at any time by contacting:

greenmountainlegacyllc@gmail.com

We will make commercially reasonable efforts to respond within 5 business days and complete deletion requests within 30 days, subject to legal or operational retention requirements.

10. Meta Platform Data Deletion

If you remove the GML Managed Marketing Service application from your Instagram or Facebook account settings, Meta may send an automated deletion request to our Data Deletion Callback URL. Upon receiving a valid deletion request, we will:

• Delete stored access credentials associated with your account
• Remove associated publishing and analytics records where reasonably practicable
• Process the request in accordance with Meta platform requirements
• Return a confirmation response to Meta where required

Data Deletion Callback URL: https://gml-deletion-callback.onrender.com/deletion-callback

11. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your information
• Correct inaccurate information
• Request deletion
• Withdraw account authorization
• Object to certain processing activities

Requests may be submitted to: greenmountainlegacyllc@gmail.com

12. Children's Privacy

The Service is intended for business use only and is not directed toward individuals under the age of 13. We do not knowingly collect personal information from children.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If material changes are made, we will provide notice to active customers before the updated policy becomes effective. Continued use of the Service after the effective date constitutes acceptance of the updated Privacy Policy.

14. Contact

If you have any questions or concerns about this Privacy Statement or how we handle your information, please contact us using the following contact form: