Privacy Policy

Mars (operated by Mars, "we") is a social media management tool for professionals and agencies. This policy explains what data we process, why, and how to exercise your rights.

1. Data we collect

• Account: email, name, password (hashed, never stored in clear text).
• OAuth access tokens for the networks you connect (Facebook, Instagram, TikTok, LinkedIn), encrypted at rest. We never see your password for those networks.
• Content & engagement: posts you create, comments retrieved, likes and engagement statistics for the pages you connect.

2. Per-platform data and requested permissions

We request only the permissions required by the features you use:

Facebook (Pages)

• pages_show_list — Lister les Pages que vous gérez
• pages_read_engagement — Lire les mentions J'aime, réactions et statistiques
• pages_read_user_content — Lire les commentaires des publications
• pages_manage_posts — Publier, modifier et supprimer des publications
• pages_manage_engagement — Répondre et modérer les commentaires

Instagram (Business)

• instagram_business_basic — Profil et médias du compte professionnel
• instagram_business_content_publish — Publier photos et vidéos
• instagram_business_manage_comments — Lire, répondre et modérer les commentaires
• instagram_business_manage_insights — Statistiques d'engagement
• instagram_business_manage_messages — Gérer les messages (si activé)

TikTok

• user.info.basic — Nom et avatar du compte
• video.publish / video.list — Publier et lister vos vidéos
• comment.list / comment.list.manage — Lire et modérer les commentaires (si accordé)

LinkedIn

• openid, profile, email — Identité de connexion (nom, email)
• w_member_social — Publier des posts en votre nom (si accordé)

3. Purposes

• Publish and schedule content to the pages you connect, at your request.
• Retrieve and analyze comments (sentiment, bot detection, moderation).
• Produce performance reports and AI-assisted content.

4. Data sharing

We do not sell or rent your data. It only flows to: (a) the official APIs of the networks you connect, and (b) the AI providers configured by your agency to generate content. No data is used for advertising.

5. Security

OAuth tokens encrypted at rest (Fernet), passwords hashed (bcrypt), HTTPS transport, security headers (CSP, HSTS), role-based access.

6. Retention & deletion

Data is kept while your account is active. At any time you can: disconnect a network (immediate token deletion) or delete your entire account from My profile → Delete my account, or via the Data deletion page.

7. Your rights

Access, rectification, deletion and withdrawal of consent (disconnecting a network). To exercise these rights: contact@liadprod.com.

8. Contact

Mars — contact@liadprod.com