← Back to sign-in Türkçe

Privacy Policy

Last updated: 17.08.2026

1. General Information and Scope

NetaSocial is a multi-tenant customer communications and shared inbox service operated by NetaBilgi. Businesses can connect their own Facebook Pages, Instagram Professional accounts, and WhatsApp Business assets to manage customer messages, comments, and related communication records from a single interface.

2. Categories of Data We Process

Depending on how the service is used, the following categories of data may be processed:

  • NetaSocial account data: name, email address, role/permission information, company membership, and security records. Passwords are not stored in plain text; they are stored as one-way password hashes.
  • Meta authorization and business asset data: Facebook Page, Instagram Professional Account, Meta Business Portfolio, WhatsApp Business Account (WABA), phone number, similar asset identifiers, and connection/authorization status.
  • Authorization credentials: access tokens and similar credentials required for the service to operate. Sensitive tokens are stored in encrypted form in the application database.
  • Messaging data: messages sent and received through Facebook Messenger, Instagram Direct, and WhatsApp Business, including message status and platform message identifiers where required.
  • Comment and engagement data: comments associated with Facebook and Instagram posts, comment identifiers, replies, and content/media identifiers required to match comments.
  • End-user profile/contact data: profile name, profile picture, platform-specific user identifier (for example, PSID), and phone number in WhatsApp conversations, to the extent made available by the relevant platform.
  • Media and files: images, videos, audio files, and documents sent or received as part of messaging.
  • Ad-related comment matching data: when the feature is used, ad-account and advertising-object identifiers/metadata required to locate Facebook and Instagram comments originating from ads or dark posts may be processed on a read-only basis. NetaSocial does not create or modify advertisements for this purpose.
  • Technical and security records: session data, login attempts, IP address, error/audit records, and operational records required to secure the service.

3. Why We Use Data

Data is used only for purposes necessary to provide and securely operate the service. Primary purposes include:

  • allowing a business to connect and authorize its own Meta/WhatsApp assets in NetaSocial;
  • delivering Messenger, Instagram Direct, and WhatsApp messages to the business's shared inbox and enabling authorized representatives to reply;
  • displaying and matching Facebook/Instagram comments and enabling authorized users to reply to those comments;
  • managing the technical status, webhook subscriptions, and channel connections of connected Page/Instagram/WhatsApp assets;
  • providing customer relationship management, team assignment, notes, reminders, reporting, and operational records;
  • supporting security, abuse prevention, error diagnosis, audit activities, and legal obligations.

4. Meta Platform Data and Authorization

Facebook, Instagram, and WhatsApp Business connections are initiated by the user/business and the required permissions are granted through Meta's authorization screens. NetaSocial uses only the permissions and data required for the enabled features to operate. When a Facebook authorization is revoked, NetaSocial invalidates the relevant authorization record and stops using channel credentials associated with that authorization.

5. Data Sharing

NetaSocial exchanges data with Meta Platforms, Inc. and the relevant Facebook, Instagram, and WhatsApp services in order to provide messaging and social-platform integrations. Infrastructure/hosting providers required for technical delivery of the service may also process limited technical data. NetaSocial does not sell personal data to third parties for advertising purposes. Data is shared only as necessary to provide the service, maintain security, comply with legal obligations, or follow the explicit instructions of the user/business.

6. Retention and Security

Data is retained for as long as necessary to provide the service, while the relevant business account remains active, or for as long as required by applicable legal obligations. Sensitive access tokens are encrypted at the application level. Media files are not stored in directly public directories; access is provided through authorization controls. Security and audit records may be retained for periods appropriate to operational and legal requirements.

7. Data Deletion and Revocation of Access

You may revoke the authorization granted to NetaSocial through Facebook's app and website connection settings and may use the data-deletion request flow provided by Meta. When a valid data-deletion request is received from Meta, NetaSocial removes the authorization mapping and related access credentials associated with the Facebook user who granted the authorization and generates a confirmation code and status result for the request.

To request deletion of your NetaSocial account, company account, or other personal data held by NetaSocial, contact bozkurtserhat@gmail.com. To enable us to match the request to the correct account/tenant, include the email address used for your account and the relevant company name.

If you are a customer/end user of a business using NetaSocial, the conversation records are primarily under the control of the business with which you communicated. You may contact that business for such requests; where required, NetaSocial will technically implement the business's lawful deletion instructions.

8. Your Rights

Under Turkish Personal Data Protection Law No. 6698 (KVKK), and other applicable data-protection laws to the extent they apply, you may have rights including the right to learn whether your personal data is being processed, request information about processed data, request correction of inaccurate data, and request deletion or destruction when the applicable conditions are met. You may submit requests to bozkurtserhat@gmail.com.

9. Contact

For privacy, data-access, or data-deletion requests: NetaBilgi / NetaSocial
Email: bozkurtserhat@gmail.com

10. Changes

This Privacy Policy may be updated to reflect changes in NetaSocial features, integrations, or applicable law. The current version will be published on this page and identified by the revision date shown above.