1. Who we are and what this policy covers
Excavation Marketing Pros operates Agency Page Feeds, a service that allows authorized administrators to connect Facebook Pages, synchronize Page content, and display selected content on websites through an embeddable feed. This policy covers the service’s administrator dashboard, Facebook integration, public feed endpoints, and this legal-information website.
For privacy questions or requests, contact support@excavationmarketingpros.com. This policy describes our service, not Facebook’s own services or the independent websites that embed a feed.
2. Information we collect
When you use the administrator dashboard, we receive account information provided by the sign-in service, such as an account identifier, name, email address if supplied, sign-in method, administrator role, and sign-in timestamps. We also store client or Page names, Page identifiers, Page links or handles, and a widget identifier used to address each feed.
When an authorized administrator connects Facebook, we receive the Facebook account’s app-scoped identifier and name, granted permission information, authorized Page identifiers and names, Page categories and available Page tasks, and access tokens needed to retrieve authorized Page content. We store available token-expiry and data-access-expiry information and connection status. Facebook supplies only the information permitted by the account’s access and the permissions and assets approved during authorization.
For connected Pages, the service may retrieve and store Page post text or stories, post identifiers, publication dates, media URLs, Facebook links, photo captions and image URLs, album names and descriptions, and aggregate engagement counts such as reactions, comments, and shares. The current feed stores aggregate engagement counts rather than individual comment text or the identities of people who react or comment; other incidental API response fields are not used or retained for the feed. Administrators can also submit manual post text, image links, and Facebook links.
We keep operational information needed to run the service, including synchronization timestamps, success or error status, content counts, and limited diagnostic messages. Our hosting and network providers may process standard request information, such as IP addresses, browser information, requested URLs, and timestamps, for delivery, security, and service operations. If you email us, we receive your address and the information you choose to include.
The current service does not request Facebook passwords, personal-profile timeline posts, private messages, payment-card details, or publishing and messaging permissions for its read-only feed feature.
3. How we use information
We use information to authenticate administrators, identify and connect authorized Pages, retrieve and update Page content, render the feeds selected by administrators, provide manual-content functionality, identify expired or revoked authorization, troubleshoot failures, secure the service, and respond to support and privacy requests.
We do not sell Facebook Platform Data, use it for unrelated advertising targeting, or use it to train artificial-intelligence models. We use Facebook information only for the disclosed feed functionality and related service operations, subject to Meta’s applicable terms and the permissions granted.
4. What is displayed publicly
A Page administrator chooses whether to embed a feed and which supported posts are visible. Visible post text, media, dates, Facebook links, and aggregate engagement counts can be displayed to visitors of the embedding website. Public feed endpoints can return visible content without a visitor sign-in; a widget identifier is an address for a feed, not a password or access-control secret.
Account email addresses, access tokens, and app secrets are not included in feed output or embed snippets. Administrators should connect only Pages they are authorized to manage and display only content they are entitled to publish on the chosen website. If content includes personal information, consider that wider website display before enabling it.
5. Service providers and other recipients
We use Manus and its infrastructure providers to host the application, authentication-related functionality, database, and operational services. Cloudflare hosts and delivers this legal-information website. Meta provides Facebook authorization, the Graph API, and Facebook-hosted content and media. These providers process information needed to provide the relevant services.
A visitor’s browser may contact Facebook or other media hosts when loading images or following a Facebook link. Independent embedding websites may operate their own analytics, cookies, or other features, which are governed by their own notices. We may also disclose information when required by law or when necessary to protect rights, address security incidents, or respond to valid legal requests.
6. Cookies and similar technologies
The administrator dashboard uses cookies needed for sign-in and session security. The Facebook connection flow uses a short-lived browser-binding cookie to protect authorization requests. This static legal-information website does not include advertising scripts or analytics scripts added by us. Hosting providers may use security-related mechanisms, and Facebook and embedding websites may use their own cookies under their respective policies.
7. Security
The service uses HTTPS and access controls. Facebook access tokens are stored using authenticated encryption and are used by the server; stored tokens are not returned through the administrator’s client-read APIs or public widget endpoints. We take reasonable steps to limit credential exposure and unauthorized access. No storage or transmission method can be guaranteed completely secure.
Do not send passwords, App Secrets, or access tokens in ordinary support emails. Revoke authorization in Facebook and contact us promptly if you believe your connection or account has been compromised.
8. Retention and deletion
We retain account and feed information while it is needed for an authorized, active service relationship and the purposes described in this policy. We remove Facebook information when it is no longer needed for those purposes, when a verified user or client requests deletion, when the associated service relationship ends, or when applicable law or Meta’s requirements require removal.
Removing the integration in Facebook prevents future access through the revoked authorization, but it does not, by itself, erase information already stored in the service. Contact us to request removal of stored information. We process verified requests promptly and within applicable legal deadlines. Where residual backup copies exist, we work with the relevant providers to address them; any information that must be retained for a specific legal obligation is limited to that obligation and is not used to continue the feed service.
9. Your choices and rights
You can decline requested access, choose the Pages you authorize, and remove the integration through Facebook’s Apps and Websites or Business Integrations settings, as applicable. Page administrators can control supported post visibility and request that a Page connection be removed.
You can contact us to request access to, correction of, or deletion of information about you, or to exercise other rights available under applicable privacy law. You do not need to be a Page administrator to make a request about your own personal information. We may ask for the minimum information needed to verify the request and locate the relevant records. We do not require your Facebook password or access token.
Detailed steps are available on our Data Deletion Instructions page. Where applicable, you may also raise a concern with your local privacy regulator.
10. International processing, children, and updates
Our providers may process information in countries other than your own. Available privacy protections and rights depend on the relevant law and provider arrangements. The administrator service is intended for adult business users and is not directed to children under 13. Contact us if you believe a child has submitted personal information directly to the service.
We may update this policy as the service or its requirements change. The current version will be published here with its effective date; material changes will be communicated where required. For questions, email support@excavationmarketingpros.com.