Privacy Policy

FrikaSocial — operated by Frikatek Technologies

Last updated: June 5, 2026 · Effective date: June 5, 2026

Introduction

Frikatek Technologies ("we", "us", "our") operates FrikaSocial, a service that helps small businesses in Tanzania post to their Instagram accounts from WhatsApp. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over your data.

By using FrikaSocial, you agree to the practices described here. If you do not agree, please do not use the service.

Contact

1. What Information We Collect

We collect only the information needed to provide the service.

Account information you give us

• Your email address (for signup and login)
• Your password (stored encrypted, never visible to us)
• Your WhatsApp phone number (so we can identify you when you message our bot)
• Your business name, contact phone number, brand voice description, and caption template (so we can generate captions for your posts)

Information from Meta when you connect Instagram

• Your Facebook account ID (only used to confirm your identity during connection)
• Your linked Instagram Business Account ID
• A long-lived access token from Meta that lets us post to your Instagram account on your behalf

We do NOT collect from Meta

• Your Facebook friends list
• Personal Facebook profile data beyond what is needed to confirm the connection
• Instagram followers' personal data
• Any data from people who comment on your posts

Information you send via WhatsApp

• Photos and videos you send to our bot for posting
• Text messages and instructions you send (such as caption requests, scheduling commands)
• Your WhatsApp phone number (provided automatically by WhatsApp)

Information we generate

• Records of which posts you scheduled, approved, and published
• Conversation history between you and our bot, to maintain context across messages

We do NOT collect

• Location data
• Device IDs or advertising identifiers
• Browsing activity outside FrikaSocial
• Information from your Instagram audience

2. How We Use Your Information

We use your information solely to provide the service:

• To authenticate you when you log in to the FrikaSocial dashboard
• To identify you when you message our WhatsApp bot
• To generate captions for your Instagram posts using AI, based on your settings
• To publish your photos and videos to your Instagram account when you approve them
• To send you WhatsApp messages requesting approval before publishing
• To schedule posts to publish at times you specify

We do NOT

• Sell your personal data to anyone
• Share your data with advertisers
• Use your photos or content for any purpose other than posting them to your Instagram
• Use your data to train AI models
• Send marketing messages without your consent

3. Who We Share Your Data With

We share data only with the providers needed to operate the service:

• Meta Platforms (Facebook and Instagram) — when you connect your Instagram account, we share necessary data with Meta to publish posts on your behalf. Their use of your data is governed by Meta's privacy policy.
• WhatsApp (Meta) — we send and receive WhatsApp messages through Meta's WhatsApp Business Platform.
• Appwrite Cloud — our database provider. Your account information and connection details are stored in their EU data centers.
• Cloudinary — we upload your photos and videos to Cloudinary for delivery to Instagram.
• OpenAI — we send your caption template and instruction text to OpenAI to generate captions. We do NOT send your photos or videos.

We do not share your data with any other third parties.

4. Where Your Data Is Stored

• Account information and OAuth tokens: Appwrite Cloud, EU region
• Photos and videos: Cloudinary, processed and stored on their content delivery network
• WhatsApp messages: Meta's WhatsApp Business Platform infrastructure

Some of our service providers may process data outside Tanzania. They are bound by their own data protection commitments.

5. How Long We Keep Your Data

• Account information: kept while your account is active. Deleted within 30 days of account deletion.
• Photos and videos: temporary processing only. Removed from our systems after posting completes.
• WhatsApp messages: kept for 90 days for service quality and support, then deleted.
• Instagram access tokens: kept while your account is connected. Deleted when you disconnect or delete your account.

6. Your Rights

Under the Tanzania Personal Data Protection Act (PDPA) 2022, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (see Data Deletion page)
• Object to processing for specific purposes
• Receive your data in a portable format
• Withdraw consent at any time (by disconnecting Instagram or deleting your account)

To exercise any of these rights, email admin@frikasocial.online. We respond within 30 days.

7. Security

We protect your data with industry-standard measures:

• All communication encrypted with HTTPS/TLS
• Passwords stored using one-way hashing (we cannot read them)
• OAuth tokens stored with restricted database permissions
• API keys and secrets stored server-side, never exposed to your browser
• Access to production systems limited to authorized personnel

No system is perfectly secure, but we take reasonable steps to protect your data.

8. Children's Privacy

FrikaSocial is intended for users 18 years or older. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Cookies

We use only essential cookies needed to keep you logged in. We do not use tracking cookies, analytics cookies, or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will email you and update the "Last updated" date above. Continued use of FrikaSocial after changes means you accept the updated policy.

11. Contact Us

For privacy questions, complaints, or data requests:

If you are not satisfied with our response, you may also contact the Tanzania Personal Data Protection Commission.