GoalDigger Privacy Policy
How we collect, use, and protect your information.
Introduction
GoalDigger respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect information when you use our platform. Our App supports sign-in via Google and Facebook OAuth and connects to Facebook, Instagram, and LinkedIn to provide content publishing and insights features.
1. Information We Collect
When you use our App, we collect information through third-party authentication providers and social media APIs based on the permissions you grant. We only access this information after you explicitly authorize our App.
Information Collected via Authentication Providers
When you sign in using a third-party authentication provider, we collect limited profile information necessary to create and manage your account:
- Google OAuth – Full name, email address, profile picture, and Google account identifier. We do not access Google Drive, Gmail, Google Contacts, or any other Google services beyond basic profile information.
- Facebook OAuth – Full name, email address, profile picture, and Facebook user identifier. This is separate from the Facebook Page and Instagram Business permissions described below.
This information is used solely for account creation, authentication, and displaying your profile within the App. We do not post to your personal social media accounts or access any data beyond what is listed above through these authentication providers.
Information Collected via Facebook APIs
- Facebook Pages List (
pages_show_list) Names, IDs, and basic information about Facebook Pages you manage. - Engagement Metrics (
pages_read_engagement) Post-level insights including likes, comments, shares, reach, impressions, and other engagement statistics. - Post Management (
pages_manage_posts) Content that you create, schedule, or publish through our App, including text, images, and videos. - Business Assets (
business_management) Access to Facebook Business Manager assets (such as Pages and related accounts) required to properly identify and manage eligible business resources.
Information Collected via Instagram APIs
- Account Information (
instagram_business_basic) Instagram Business Account ID, username, profile picture, and basic account details. - Content Publishing (
instagram_business_content_publish) Posts, stories, and reels that you create and publish through our App. - Performance Insights (
instagram_business_manage_insights) Media-level metrics including impressions, reach, engagement rate, saves, profile views, and follower demographics.
Information Collected via LinkedIn APIs
- Profile Information LinkedIn profile name, email address, profile picture, headline, and account identifier for the connected account.
- Content Publishing Posts that you create, schedule, or publish to your LinkedIn profile or company page through our App.
We collect only the minimum data necessary to provide automated content publishing and performance analytics services. We do not access or store personal messages, private conversations, friends lists, or any data unrelated to your business accounts.
Session Recordings
When you use the GoalDigger app while signed in, we record your sessions (the pages you open and what you do on them) to understand how the app is used and to improve it. Passwords are never recorded; other text you type may appear in a recording. Recordings are stored with our analytics provider PostHog for 30 days and are viewed only by the GoalDigger team. You can turn session recording off at any time in Settings → Security & privacy → Session recording.
2. How We Use Your Information
We use the collected data exclusively to provide and improve our core services. Specifically, your information is used to:
- Enable Account Connection Display and connect your Facebook Pages, Instagram Business Accounts, and LinkedIn profiles or company pages to our platform.
- Automated Content Publishing Create, schedule, and publish posts, stories, and reels to your connected Facebook, Instagram, and LinkedIn accounts on your behalf.
- Performance Analytics Retrieve and display engagement metrics, insights, and analytics to help you monitor and optimize your social media performance.
- Service Improvement Analyze aggregated and anonymized usage patterns to improve platform functionality and user experience.
We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for advertising outside of your own connected accounts.
3. Data Storage and Security
We are committed to protecting your data using industry-standard security measures, including encryption, secure data transmission (HTTPS/TLS), and strict access controls.
Data Retention
- Active Account Data Retained for as long as your social media accounts remain connected to our platform.
- Analytics Data Performance insights and metrics are stored for up to 90 days to provide historical analytics.
- Published Content Content metadata (not the actual media files) is retained for analytics purposes and can be deleted upon request.
- Account Deletion When you disconnect your social media accounts or delete your GoalDigger account, we delete or anonymize your data within 30 days, unless legal obligations require longer retention.
While we implement reasonable technical and organizational safeguards, no internet-based service can be guaranteed to be 100% secure.
4. Third-Party Sharing
We do not share your information with third parties except as necessary to operate our platform (for example, Google and Facebook for authentication, and Meta and LinkedIn APIs for content publishing and analytics). Your data is never sold or used for third-party advertising.
5. Your Rights and Choices
You have control over your data and may exercise the following rights:
- Access View the data collected from your connected accounts within the App.
- Disconnect Accounts Disconnect your Facebook, Instagram, or LinkedIn accounts at any time via App settings, which stops future data collection.
- Revoke Permissions
Revoke permissions through:
- Google: Google Account → Security → Third-party apps with account access → GoalDigger
- Facebook: Facebook Account Settings → Apps and Websites → GoalDigger
- LinkedIn: LinkedIn Settings → Data privacy → Permitted services → GoalDigger
- Data Deletion
Request deletion of your data by:
- Using the “Delete My Data” option in your account settings
- Contacting us at team@goaldigger.com
- Using Facebook’s User Data Deletion process after removing the App
- Session Recording Turn off the recording of your app sessions in Settings → Security & privacy.
- Data Portability Request a machine-readable copy of your data by contacting us.
We respond to verified requests within 30 days. Identity verification may be required before processing requests.
6. Children’s Privacy
Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children.
7. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised Effective Date.
8. Contact Us
If you have questions or requests regarding this Privacy Policy, please contact us at: