Privacy Policy
Last updated: September 4, 2026.
Who we are
SocialPeggy is a panel for Facebook Page administrators that lets you read and send Page messages, view and reply to comments, and publish posts — via the official Meta Graph API.
Data we process
- Your account e-mail address and a secure password hash (scrypt) — we never store plaintext passwords.
- After connecting Facebook: your Facebook user ID and name.
- The list of Pages you manage and those Pages' access tokens.
- Content fetched on your request from the Graph API: Page messages, comments and posts. We display it in the panel and do not store it permanently, except for webhook notifications described below.
- Webhook notifications from Meta (e.g. a new message or comment), stored short-term to refresh the panel and deleted automatically after 7 days.
Account, e-mail and passwords
You create an account with an e-mail address and password. Passwords are stored only as scrypt hashes with a per-user salt. We e-mail you only what the account needs: an address-confirmation link and a password-reset link (valid for 1 hour). No newsletters, no ads. Changing your password invalidates all previous sessions. Facebook is connected separately (OAuth) — solely to access your Pages.
How we protect data
- Page tokens are encrypted with AES-256-GCM before being stored.
- Sessions are cryptographically signed and sent only in httpOnly cookies.
- All connections to the Graph API and your browser use HTTPS.
- Page data is accessible only to the logged-in administrator of that Page.
What we don't do
- We do not sell or share data with third parties.
- We do not use data for advertising or profiling.
Cookies
We use strictly necessary cookies only: session (httpOnly), login protection (state) and language preference. No analytics or advertising cookies.
Data retention
Account data and Page tokens are kept while you use the app. Webhook events are deleted automatically after 7 days. When you delete your account, all data is removed immediately.
Data deletion
You can delete all your data in two ways: with the "Delete account & data" button in the panel, or by removing the SocialPeggy app in your Facebook settings (Settings → Apps and Websites) — Facebook then calls our automated deletion endpoint. Details: data deletion instructions.
Contact
For privacy and data matters, contact us at: support@socialpeggy.com.