Privacy Policy for WS API for Brands
WS API for Brands is a Meta app (app ID 1362112994926323) built and operated by Wyatt Solutions, LLC, a Maryland company. We use it to manage the Facebook Pages, Instagram professional accounts, Threads profiles and Meta ad accounts of the businesses we work for, including The Listening Room, Inc. It is an internal tool. It is not offered to the public, and nobody signs up for it.
This policy covers what data the app accesses through Meta's platform, how we use it, who else handles it, and how to have it deleted.
Who is responsible
Each business we work for controls the data in its own accounts. For The Listening Room's accounts, The Listening Room, Inc. is the data controller and Wyatt Solutions, LLC processes the data on its behalf. Questions about this app or this policy go to Wyatt Solutions at damon@wyattsolutions.com.
What the app accesses
The app only works with accounts whose administrators have connected it through Facebook Login for Business. Through those connections it accesses:
- Access tokens for the connected Pages, Instagram accounts, Threads profiles and ad accounts, plus their IDs and names.
- The content we publish for those businesses (posts, photos, videos, Reels, Stories, captions and first comments) and the IDs and links Meta returns for it.
- Performance figures for those accounts and their posts and ads, such as reach, impressions, views, likes, shares, follower counts, clicks and spend. These are counts and totals, not data about individual people.
- Comments left on the business's own recent Instagram posts, including the comment text and the commenter's username, so the business can see which comments still need a reply.
- The public names, Page IDs and usernames of other businesses we mention or tag in a post, for example the manufacturer of a product shown in it.
- For The Listening Room only: a customer-list audience for its advertising. Email addresses of customers who have agreed to receive The Listening Room's marketing email are converted to SHA-256 hashes on our computer before upload, so Meta receives the hashes and never the addresses. Anyone on The Listening Room's do-not-advertise list is left out and removed from the audience.
- For The Listening Room only: the app asks Meta to build advertising audiences in The Listening Room's ad account from people who visited its website (through the Meta Pixel), engaged with its Facebook Page or Instagram account, or watched its videos, plus lookalike audiences based on them. Meta builds and holds these audiences. The app sees only each audience's name and approximate size, never the people in it.
The app does not read private messages, does not log anyone into a website or app, and does not use comments to build profiles of people or to target advertising.
How we use it
We use this data to publish each business's approved content on schedule, to tag the Pages and accounts a post is about, to report results back to that business, and to run that business's own advertising. We do not sell data, share it with data brokers, or use one business's data for another business.
Where it is stored and who else handles it
Access tokens are kept in files on Wyatt Solutions computers and, for one client's reporting dashboard, in the environment settings of a private Vercel project. Content calendars and reports are kept in Google Workspace (Google LLC), in private GitHub repositories (GitHub, Inc.) and in private dashboards hosted by Vercel Inc. We use AI tools from Anthropic, PBC to help draft and run this work, so Anthropic may process content, comments and performance figures handled by the app. These companies act as our service providers in the United States. Hashed customer lists go only to Meta.
How long we keep it
We keep an access token until the business disconnects the app or ends its work with us, whichever comes first. Records of what we published and how it performed are kept as part of that business's records for as long as we work with it. We do not keep the customer email hashes after they are uploaded.
Deleting your data
A business can disconnect the app at any time: in Facebook, open Settings, then Business Integrations, and remove WS API for Brands. That ends the app's access immediately.
To have us delete the data we hold about you, your Page or your account, or to ask what we hold, email damon@wyattsolutions.com with your name, username, or the Page or account name. We will confirm the deletion by email within 30 days. If you are a customer of The Listening Room and want to be removed from its advertising audiences, contact The Listening Room or email us, and we will remove you from those audiences.
Changes
If we change how the app uses data, we will update this page and the date at the top.