Facebook app privacy policy

Effective October 30, 2026.

This policy covers the CODACON application registered on the Meta for Developers platform (the "app"). It does not cover Facebook itself; Meta's own privacy policy governs what Meta does with your data. Our LinkedIn app privacy policy covers our LinkedIn app.

The app is operated by CODACON, Montréal, Québec, Canada. Contact: hello@codacon.ai.

What the app does

The app publishes CODACON content, such as posts from the CODACON blog, to the CODACON Facebook Page. It is used only by CODACON's own Page administrators to share CODACON's publications. It does not read your feed, your friends, your messages, or comments, and it does not post to personal profiles or groups.

Data the app accesses

When a CODACON Page administrator signs in with Facebook and grants permission, the app receives only what the approved permissions allow:

• Basic profile: the administrator's Facebook user identifier and name (public_profile).
• The list of Pages the administrator manages (pages_show_list), used to select the CODACON Page.
• Basic Page information (pages_read_engagement): the Page's identifier and name.
• Permission to publish to the CODACON Page (pages_manage_posts), used only to publish content CODACON has approved.
• A Page access token issued by Meta, which lets the app act within those permissions until it is revoked.

The app does not request access to friends, messages, groups, photos, or any other Facebook data, and it collects no data about people who view or interact with the Page.

How the data is used

• To identify the Page a post is published to.
• To publish posts CODACON has approved.

That is the only use. The app does not use Facebook data for advertising, profiling, analytics, or training AI models, and it does not sell, rent, or trade it.

Sharing

Facebook data is not shared with third parties, except:

• with Meta, to perform the actions authorized;
• where required by law.

Storage and retention

• Access tokens are kept in an encrypted secret store, readable only by the CODACON systems that publish posts. They are never written to logs or to this website.
• Tokens are deleted when access is revoked or no longer needed.
• Profile data is kept only as long as needed to publish posts, and is deleted when access is revoked or deletion is requested.
• This website sets no cookies, runs no analytics, has no Facebook pixel or plugin, and does not receive any Facebook data.

Security

Access to the secret store is restricted to CODACON, protected by multi-factor authentication, and limited to the minimum permissions needed to publish. Data travels over encrypted connections (HTTPS).

Data deletion

To delete the data the app holds about you:

1. Remove the app in Facebook: Settings & privacy → Settings → Business integrations (or Apps and websites), select CODACON, then Remove. This revokes its tokens immediately.
2. Ask us to delete anything we hold by writing to hello@codacon.ai with the subject "Facebook data deletion". We confirm deletion within 30 days.

Your choices and rights

You may access, correct, or delete the personal information we hold about you, or withdraw consent, by writing to hello@codacon.ai. We answer within 30 days.

CODACON handles personal information under Québec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). The person in charge of the protection of personal information is David Côté, founder, reachable at hello@codacon.ai. If you are not satisfied with our answer, you may file a complaint with the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

Changes

If this policy changes, the new version is published at this address with a new effective date. Material changes that affect how Facebook data is used will require renewed consent.