AdManager

by Pearl Nail Casula · casula.pegasuslmk.com

Privacy Policy — AdManager

Last updated: May 8, 2026

Effective date: May 8, 2026

1. Introduction

Pearl Nail Casula ("we", "our", or "us") operates AdManager, a social media management application available at https://casula.pegasuslmk.com. This Privacy Policy explains how we collect, use, disclose, protect, and delete your information when you use our application.

By using AdManager, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the service.

2. Information We Collect

We collect the following categories of information:

2.1 Account Information

• Business name, contact email address, and phone number
• Instagram Business Account information (username, account ID, page ID) obtained via Meta Login
• TikTok account information (display name, open_id, union_id) obtained via TikTok Login

2.2 Authentication Tokens

• Facebook Page access tokens — used exclusively to publish content to Instagram on your behalf
• TikTok access tokens and refresh tokens — used exclusively to publish content to TikTok on your behalf
• These tokens are stored securely and are never shared with third parties outside of the respective platforms

2.3 Content Data

• Social media post content: captions, hashtags, and media files (images and videos) that you create or upload
• Scheduled post metadata: date, time, platform target, and post status
• Post performance data (likes, comments, reach, impressions) retrieved from connected platform APIs

2.4 Usage Data

• Application usage logs for debugging and service improvement purposes
• Error logs when posts fail to publish

3. How We Use Your Information

We use the collected information solely to:

• Authenticate your identity and verify your social media account ownership
• Publish posts to your Instagram Business Account on your behalf at your instruction
• Publish posts to your TikTok Business Account on your behalf at your instruction
• Schedule and manage your social media content according to your settings
• Display post performance analytics within the application
• Notify you of post success or failure
• Maintain and improve the AdManager service
• Respond to your support requests

We do not use your data for advertising, profiling, or any purpose other than operating the AdManager service.

4. TikTok Data — Special Disclosure

AdManager integrates with the TikTok Content Posting API. By connecting your TikTok account, you explicitly authorise us to access the following TikTok permissions:

• user.info.basic — to retrieve your TikTok display name and avatar for display within AdManager
• video.publish — to publish videos to your TikTok account on your behalf when you schedule or manually post
• video.upload — to upload video content as part of the publishing process

4.1 TikTok Data We Collect and Store

• TikTok open_id and union_id — to identify your account
• TikTok display name — displayed in the application interface
• TikTok access token and refresh token — stored securely to enable scheduled posting without requiring repeated login
• TikTok token expiry date — to manage token refresh

4.2 How TikTok Data Is Used

TikTok data is used solely to provide the content scheduling and publishing service to you. We do not sell, rent, trade, or share your TikTok data with any third parties for advertising, marketing, analytics resale, or any commercial purpose unrelated to operating AdManager.

4.3 TikTok Data Retention

TikTok access tokens are retained only while your account is active and connected. Upon disconnection or account deletion, TikTok tokens are permanently deleted from our database within 7 days.

4.4 Revoking TikTok Access

You can revoke AdManager's access to your TikTok account at any time by:

1. Opening the TikTok app on your mobile device
2. Going to Profile → ☰ Menu → Settings and Privacy → Security → Authorized Apps
3. Finding "AdManager" or "Pearl Nail Casula" and tapping Revoke Access

Alternatively, you can disconnect TikTok from within AdManager at https://casula.pegasuslmk.com/studio under the "Social Accounts" section.

5. Instagram / Meta Data

AdManager accesses your Instagram Business Account through Meta's Graph API using permissions you explicitly grant during the Meta Login flow:

• instagram_basic — to read your Instagram account username and ID
• instagram_content_publish — to publish photo and video posts on your behalf
• pages_show_list — to list your connected Facebook Pages
• pages_read_engagement — to retrieve engagement metrics on your posts

We store Facebook Page access tokens (which are permanent tokens issued by Meta) to enable scheduled posting without requiring repeated logins. These tokens are stored securely and used only to publish content at your instruction.

We do not sell, share, or use your Meta data for advertising or any purpose other than providing the AdManager service to you.

6. Data Storage and Security

Your data is stored in Supabase, a PostgreSQL database hosted on Amazon Web Services (AWS) infrastructure in a secure cloud environment. We implement the following security measures:

• Access tokens are stored in a restricted-access database table
• Database connections use TLS/SSL encryption in transit
• Access to production data is limited to authorised personnel only
• Application is hosted on Vercel with HTTPS enforced

While we implement appropriate security measures, no system is completely secure. We encourage you to use strong passwords and keep your social media credentials confidential.

7. Data Retention and Deletion

We retain your data for as long as your account is active and the service is in use.

To request deletion of your data:

1. Send an email to pearlnailcasula2170@gmail.com with the subject line: "Data Deletion Request — AdManager"
2. Include your business name and the email address associated with your account
3. We will permanently delete all your data (including access tokens, post history, and account information) within 30 days of receiving your request
4. We will send a confirmation email once deletion is complete

8. Data Sharing

We do not sell your personal data. We share data only with the following service providers who are necessary to operate AdManager:

• Meta (Facebook/Instagram) — to publish content to Instagram on your behalf via the Meta Graph API
• TikTok — to publish content to TikTok on your behalf via the TikTok Content Posting API
• Supabase, Inc. — for secure database storage of your account data and post content
• Vercel, Inc. — for application hosting and serverless function execution

All third-party service providers are bound by their own privacy policies and applicable data protection laws. We do not permit them to use your data for their own purposes.

We may disclose your information if required by law, court order, or government authority, or to protect the rights and safety of Pearl Nail Casula or others.

9. Cookies and Tracking

AdManager does not use advertising cookies or third-party tracking technologies. We may use essential session cookies to maintain your logged-in state within the application. We do not use cookies to track you across other websites.

10. Your Rights

You have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request permanent deletion of your data (see Section 7)
• Right to restriction: Request that we limit how we process your data
• Right to data portability: Request a copy of your data in a machine-readable format
• Right to revoke consent: Disconnect Instagram or TikTok at any time through the respective platform settings or through AdManager
• Right to object: Object to any processing of your data that is not strictly necessary for service delivery

To exercise any of these rights, contact us at pearlnailcasula2170@gmail.com. We will respond to your request within 30 days.

11. International Data Transfers

Our service is operated from Australia. Your data may be processed and stored on servers located in the United States (AWS, Vercel, Supabase infrastructure). By using AdManager, you consent to the transfer of your information to the United States and acknowledge that it will be handled in accordance with this Privacy Policy.

12. Children's Privacy

AdManager is a business tool intended for users aged 18 and over. We do not knowingly collect personal information from children under the age of 13. If we become aware that a child under 13 has provided personal data, we will delete it immediately. If you believe a minor has used our service, please contact us at pearlnailcasula2170@gmail.com.

13. Third-Party Links

AdManager may contain links to third-party platforms such as Instagram and TikTok. We are not responsible for the privacy practices of these external platforms. We encourage you to review their privacy policies before connecting your accounts.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of AdManager after changes have been posted constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: pearlnailcasula2170@gmail.com
Business: Pearl Nail Casula
Website: https://casula.pegasuslmk.com
Location: Shop 12, 1 Ingham Drive Casula 2170, Australia

We are committed to resolving any privacy concerns promptly and will respond to all inquiries within 30 days.