Privacy Policy

We collect the following categories of information:

• Account & organization data: your name, email address, and the details of the newsroom/organization you create or join.
• Content you create: articles, posts, media (images, audio, video), categories, and related metadata you upload or generate on the Service.
• Connected social accounts: when you link a social account (e.g. a Facebook Page, X, Instagram, or TikTok account), we receive access tokens and basic account/page information needed to publish on your behalf. Access tokens are stored encrypted and used only to perform the actions you request.
• Usage & device data: log data, approximate location, browser/device information, and analytics about how you use the Service.

If you connect a Facebook Page, we request only the permissions required to list your Pages, publish content you approve, and retrieve supported post performance metrics ("pages_show_list", "pages_read_engagement", "pages_manage_posts", and "read_insights"). We use this access to post content you create or approve within press.lk to the Page(s) you choose, report supported performance metrics, and keep the connection working (including refreshing tokens). We do not post without an action initiated or approved through the Service, and we do not sell social data or use it for advertising. The same principle applies to other connected platforms.

For Instagram and Threads, we use the account, publishing, and insights permissions you authorize to discover your profile, publish approved content, and retrieve available post metrics. Threads also supports deleting posts when authorized. We store destination names, identifiers, profile pictures, publication records, and supported metrics for your organization. Metrics differ by platform; unavailable metrics are not treated as zero.

Telegram connections use a bot token and channel administrator rights. WhatsApp Channel automation uses your own Whapi.Cloud account and API token, not Meta's WhatsApp Business messaging service. When you enable that connection, approved captions, media links, and channel identifiers are sent to Whapi.Cloud to publish your updates and retrieve available reaction counts. Whapi.Cloud operates a linked WhatsApp session under its own terms and privacy policy. You manage that account and any subscription directly with the provider.

You can disconnect any platform at any time from Social → Connections, which revokes our stored access for that account.

• Provide, operate, and maintain the Service.
• Publish and schedule the content you create to the destinations you connect and approve.
• Authenticate you and secure your account.
• Improve the Service and provide support.
• Comply with legal obligations.

We do not sell your personal information. We share it only:

• With platforms you connect: to publish the content you direct us to publish (e.g. Meta/Facebook).
• With service providers: infrastructure, hosting, and analytics vendors who process data on our behalf under confidentiality obligations.
• For legal reasons: where required by law or to protect our rights, users, or the public.

We retain your information for as long as your account is active or as needed to provide the Service, then delete or anonymize it, except where a longer retention period is required by law.

You may access, correct, export, or delete your data. To delete your account and associated data, including data obtained from connected social accounts, either:

• disconnect the platform in Social → Connections and delete your account from your account settings, or
• email us at privacy@press.lk with the subject "Data deletion request" and we will delete your data within 30 days.

We use industry-standard measures, including encryption of access tokens at rest, to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We use cookies and similar technologies to keep you signed in and to understand how the Service is used. You can control cookies through your browser settings.

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, notify you of material changes.

Questions about this policy or your data? Contact us at privacy@press.lk.