Privacy Policy

Effective: September 15, 2026

Full Site Solutions LLC (“FullSite,” “we,” “us,” or “our”) operates FullSite Social, a business service that helps customers create content, connect eligible social-media accounts, and publish at the customer’s direction. This policy applies to fullsite.social and the service.

Information we collect

• Account and contact data: username, email, business name, preferences, and policy-consent records.
• Customer content: instructions, prompts, hashtags, uploaded images, generated drafts, approvals, schedules, and publishing history.
• Connected-platform data: platform user and account identifiers, Page or professional-account names and types, permissions, connection status, token expiration, and provider post identifiers and results.
• Credentials: encrypted access and refresh tokens supplied by a platform. We do not ask for or store Facebook or Instagram passwords. OAuth authorization codes are exchanged and not retained.
• Transactions: purchase type, credit or subscription status, payment-provider transaction identifiers, and accounting records. FullSite does not store full payment-card numbers.
• Technical and security data: IP address, browser and device information, login attempts, OAuth and security events, timestamps, and diagnostic logs.

Sources and purposes

We receive data from you, authorized users, connected platforms such as Meta, payment and infrastructure providers, and normal use of the service. We use it to provide and secure accounts; connect platforms; generate, review, schedule, and publish content; process purchases; support users; diagnose failures; prevent fraud and abuse; enforce our terms; and meet legal obligations. Where applicable, our bases are performance of a contract, your instructions or consent, legitimate interests in a secure and reliable service, and compliance with law.

Meta Platform Data

We use Meta Platform Data only to provide and support features the user requested and authorized: identifying an eligible publishing destination, verifying the connection, publishing approved content, displaying results, and revoking the connection. We do not sell Meta Platform Data, use it for unrelated advertising, build unrelated profiles, or disclose it to data brokers. Access is limited to personnel and providers that need it to operate or secure the service and are subject to data-protection obligations.

Disclosure

We may disclose information to providers of hosting, storage, security, email, analytics, content generation, and payments acting for us; connected platforms when carrying out your instructions; professional advisers; authorities when we reasonably believe disclosure is legally required; and a successor in a merger, financing, reorganization, or sale, subject to appropriate protections. We do not sell or rent personal information or share it for cross-context behavioral advertising.

Retention and deletion

We keep information only while reasonably needed for the purposes above. Platform credentials remain while a connection is active or until expiration, revocation, disconnection, or deletion. Temporary OAuth state and account-selection data expire after a short period. Customer content and account records generally remain while an account is active. Transaction, consent, security, and non-secret audit records may remain longer for accounting, fraud prevention, disputes, enforcement, backups, or law. Backups are overwritten on a controlled cycle. When retention is no longer justified, we delete, de-identify, or securely dispose of data.

Disconnecting immediately disables future publishing through that connection, deletes its locally stored platform credentials, and attempts provider revocation where supported. See our Data Deletion instructions.

Your choices and rights

You may disconnect a platform, remove content through available controls, or ask us to access, correct, export, or delete personal information. Depending on your location, you may also have rights to restrict or object to processing, withdraw consent, appeal a decision, opt out of sale or targeted advertising, and receive equal service when exercising a privacy right. Because we do not sell personal information or use it for cross-context behavioral advertising, no sale opt-out is necessary. We honor legally required browser-based opt-out signals where applicable. We may verify identity and authority and may retain data where an exception applies.

Cookies and communications

We use essential session cookies and similar technology for login, security, preferences, and core operation. We may send transactional messages about enrollment, security, purchases, publishing, or support. You may opt out of marketing without affecting transactional messages.

Security and incidents

We use safeguards appropriate to the data, including HTTPS, authenticated encryption for platform credentials, access controls, secure cookies, CSRF and OAuth-state protection, login throttling, secret redaction, audit records, and provider review. No system is completely secure. We investigate suspected incidents and provide notices when applicable law requires.

International processing, children, and changes

FullSite is based in the United States. Information may be processed in the United States and other places where providers operate, using recognized safeguards where required. The service is for businesses and adults and is not directed to children under 13; we do not knowingly collect their personal information. We may update this policy by posting a revised effective date and may give additional notice of material changes.

Contact

Email questions or requests to privacy@fullsite.social. Full Site Solutions LLC, United States. You may also complain to your local privacy regulator where applicable.