Privacy Policy — RYPL

Last updated

RYPL ("we", "our", "us") is a commercial web application available at https://rypl.is. This Privacy Policy explains how we collect, use, disclose, and protect your data when you use our Service.

By using RYPL, you agree to this Privacy Policy. If you do not agree, you may stop using the Service.

1. Data We Collect

a) Data you provide directly

Name and email (when you sign up or connect via Meta login).
Facebook/Instagram assets you manage (Pages, business accounts).
Content and interactions (posts, comments, messages) that you choose to manage through RYPL.

b) Data we receive via Meta APIs

With your authorization, we may process:

Managed Pages and accounts metadata.
Posts, comments, and user interactions.
Private messages from Messenger/Instagram Direct (if you enable them).

c) System/technical data

Collected automatically when you access the Service:

IP address, device/browser info, OS.
Access time/date, referrer, and interaction logs.
Security and session identifiers (cookies, tokens, Cloudflare security headers).

2. Why We Request Facebook & Instagram Permissions

We request Meta permissions strictly to provide the automation and moderation features of RYPL. Examples:

pages_manage_posts, pages_manage_engagement, pages_messaging, instagram_manage_comments, etc.
Optional permissions for advertising (ads_management, pages_manage_ads) are only used if you enable ad-related features.

We never request more access than necessary. Your data is not shared with unauthorized third parties.

We process data based on:

Contractual necessity — to deliver the Service you subscribe to.
Legitimate interest — to secure, improve, and market the Service (e.g., analytics, performance monitoring, fraud prevention, product development).
Consent — only when explicitly required by law (e.g., connecting your Meta account via OAuth).

You may withdraw platform authorization at any time by disconnecting RYPL from your Meta account.

4. Cookies & Tracking

Essential cookies (security, session, checkout) are always set. Without them, login and payments won’t work.
Analytics & marketing cookies (Google Analytics, Meta Pixel, optional Hotjar) may load automatically under our legitimate interest in improving and promoting RYPL.
You can disable these cookies via your browser or vendor opt-out tools (e.g., Google Analytics Opt-out Add-on, Meta Ads settings).

For details, see our Cookie Policy.

5. Data Retention & Deletion

We retain your data while your subscription is active.
Upon cancellation or inactivity, data may be deleted after 60 days.
You may request deletion anytime at privacy@rypl.is; we will erase data within 24 hours where legally permitted.

6. Third-Party Services

We use trusted providers for infrastructure and integrations, including:

Cloudflare (security, CDN, performance)
Lemon Squeezy (checkout, payments, VAT compliance)
Google Analytics, Meta Pixel, Hotjar (analytics/marketing)

These providers may process limited personal data as controllers under their own policies.

7. User Responsibility & Disclaimers

By using RYPL, you agree that:

You are solely responsible for the Meta assets you connect and for all content/actions performed via your accounts.
RYPL does not verify ownership of connected accounts and is not liable for bans, suspensions, or restrictions imposed by Meta.
We are not liable for reputational, regulatory, or financial consequences of your use of the Service, including the publication of User Content.
Use of fake, unauthorized, or abusive accounts is prohibited and may lead to termination.

8. Children’s Privacy

The Service is not intended for children under 13. We do not knowingly collect such data; if discovered, it will be deleted.

9. International Transfers

Your data may be processed outside the EEA (e.g., by Google, Meta, Cloudflare, Lemon Squeezy). We rely on safeguards such as SCCs as required by GDPR.

10. Limitation of Liability

As-is service — The Service is provided “as is” and “as available” without warranties of any kind, express or implied.
No indirect damages — To the maximum extent permitted by law, we disclaim liability for indirect, incidental, consequential, or punitive damages, including loss of goodwill, reputational harm, or business interruption.
User accountability — You are solely responsible for how you use RYPL and for any outcomes, including legal, reputational, or financial consequences to you or third parties.
Third-party risks — We are not liable for actions of third-party providers (e.g., Meta, Google, Lemon Squeezy, Cloudflare) or for policy changes, enforcement actions, data loss, or unavailability caused by them.
Aggregate limit — Our total liability, if any, shall be limited to the amount you paid for the Service in the 12 months preceding the claim.

11. Updates

We may update this Policy to reflect legal, technical, or product changes. Updates will appear on this page with a new date. Continued use after changes means acceptance.

12. Governing Law & Venue

This Policy is governed by the laws of Poland. Disputes shall be resolved exclusively in the courts of Poland.

13. Contact

Email: privacy@rypl.is

Website: https://rypl.is