Welcome to Odd Infotech (“Company”, “we”, “us”, or “our”). We are committed to protecting the privacy and security of our users, clients, and visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.oddinfotech.com or use our services, including our social media scheduling and publishing application (“SocialmindApp”). By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services

• Name, email address, and contact details when you fill out our contact or quote forms
• Payment information when you purchase our services (processed securely via third-party payment
  gateways)
• Design files, logos, images, and other creative assets submitted for digitizing or design work
•  Account credentials when you register for or connect to SocialmindApp

• IP address, browser type, operating system, and referring URLs
• Pages visited, time spent on pages, and clickstream data
• Cookies and similar tracking technologies (see Section 8

When you connect your Facebook or Instagram accounts to SocialmindApp, we access and collect the following data through Meta’s APIs, solely to provide our services:

• Your Facebook Page(s) name, ID, access tokens, and page details
• Your Instagram Business or Creator account details
• Posts, videos, images, and media content that you explicitly authorise us to publish
• Basic profile information such as account name and profile photo
• Engagement metrics (likes, comments, reach) for posts published via our platform

We access this data only with your explicit authorisation and only to perform the services you request. We do not sell or share your Meta platform data with any third parties for advertising or marketing purposes.

Before connecting your Facebook or Instagram account to SocialmindApp, we will explicitly request
your permission to access page and post data, manage content, and publish on your behalf. This
consent is obtained prior to any data collection.
You may withdraw consent at any time via Facebook Settings > Apps and Websites, or by emailing
Info@oddinfotech.com.

We use the information we collect for the following purposes:

• To provide, operate, and improve our services including embroidery digitising, graphic design, and
  social media publishing
• To publish content to your connected Facebook Pages and Instagram accounts on your behalf, as
  authorised by you
• To process payments and send order confirmations and invoices
• To respond to your enquiries, support requests, and feedback
• To send service-related communications and updates
• To comply with legal obligations and enforce our Terms of Service
• To detect, prevent, and address technical issues or fraudulent activity
• We do not perform automated posting outside of user-scheduled times
• We do not read private messages, comments, or private content unless explicitly required and
  authorised by you

In connection with our use of Meta’s Facebook and Instagram APIs, we affirm the following:

• We only request permissions that are necessary to deliver the features you use
• We use instagram_content_publish and pages_manage_posts solely to publish content you create
  and schedule within our platform
• We do not use Meta platform data to build or augment user profiles for advertising purposes
• We do not transfer Meta platform data to any data broker or advertising network
• We do not use Meta access tokens to access any data beyond what is required to publish scheduled
  content
• Tokens are never shared with any other application, service, or user
• We store Meta access tokens securely and only as long as necessary to deliver the service
• You may revoke our access to your Meta accounts at any time through your Facebook or Instagram
  account settings

For users located in the European Union or United Kingdom, we process your personal data on the following
legal grounds under the UK/EU GDPR:

• Consent: When you connect your Meta account and explicitly authorise access to your data
• Contractual Necessity: To provide the social media publishing and scheduling services you have
  requested
• Legal Obligations: Where we are required to process data to comply with applicable law
• Legitimate Interests: For security monitoring, service analytics, and platform improvement, where
  these do not override your fundamental rights

We do not sell, trade, or rent your personal information to third parties. We may share your information only in
the following circumstances:

With trusted vendors who assist in operating our website, processing payments, or delivering services. All
such providers are bound by confidentiality agreements and are not permitted to use your data for any other
purpose.

Meta platform data may be processed through secure cloud infrastructure providers (e.g., AWS,
Google Cloud) located in India and/or the United States. All sub-processors are contractually bound
by data protection obligations and are prohibited from using your data for any purpose other than
providing the contracted services to Odd Infotech.

When you connect Facebook or Instagram, we interact with Meta’s APIs under their Platform Terms and policies.

If required by law, court order, or governmental authority.

In the event of a merger, acquisition, or sale of business assets, your information may be transferred. We will
notify you in advance of such a transfer.

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy or as
required by applicable law. You may request deletion of your data at any time by contacting us at
Info@oddinfotech.com.

Meta platform data (including access tokens and associated content) is deleted automatically within
30 days of account disconnection, or upon a verified user deletion request — whichever is earlier. Any
backups containing Meta platform data are purged within the same 30-day period.

We use cookies and similar technologies to enhance your browsing experience. The types of cookies we use
are as follows:

• Essential Cookies: Required for the website and application to function properly
• Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics)
• Preference Cookies: Remember your settings and preferences

You may disable cookies through your browser settings; however, some features may not function correctly
as a result.

We implement industry-standard technical and organisational measures to protect your information from
unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted data transmission using HTTPS / TLS for all communications
• Meta access tokens are encrypted at rest and never stored or logged in plain text
• Tokens are transmitted only over TLS and usage is restricted to authenticated API calls only
• Restricted access controls ensuring only authorised personnel can access sensitive data
• Tokens are rotated periodically as a security precaution

No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are
committed to protecting your data to the best of our ability.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data (‘right to be forgotten’)
• Restriction: Request that we limit how we process your data
• Portability: Request a copy of your data in a machine-readable format
• Objection: Object to our processing of your personal data

To exercise any of these rights, please contact us at Info@oddinfotech.com. We will respond within 30 days
of receiving your request.

If you wish to delete the data Odd Infotech has collected through your Facebook or Instagram account
connection, you may:

• Email us at Info@oddinfotech.com with the subject line ‘Data Deletion Request’
• Revoke our application’s access directly via Facebook Settings > Apps and Websites > Remove Odd
  Infotech / SocialmindApp

Upon receiving a verified deletion request, we will permanently delete all associated Meta platform data within
30 days and confirm deletion via email.

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal
information from children. If you believe we have inadvertently collected such information, please contact us
immediately at Info@oddinfotech.com and we will delete it promptly.

Our website may contain links to third-party websites or services. We are not responsible for the privacy
practices of those sites and encourage you to review their privacy policies independently.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating
the ‘Last Updated’ date at the top of this document. Continued use of our services after changes are posted
constitutes your acceptance of the updated policy.

The following table confirms this policy meets Meta’s App Review requirements for apps using
pages_manage_posts and instagram_content_publish permissions:

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: Info@oddinfotech.com
Phone: +91 9894189152
Website: www.oddinfotech.com