This Privacy Policy explains how Winning Funnel (also branded as WinningFunnel) handles information through Social Posting by Winning Funnel, our integration for authorized social publishing, advertising, and reporting.
The app may be used by Winning Funnel staff or by businesses that authorize us to manage their accounts, including through connected software such as Estate Engine. The information available to us depends on the features enabled and permissions granted. Connecting an account does not enable every feature described below.
1. Information we receive
- Account and business information: identifiers, names, and available profile or contact details for the people, Facebook Pages, Instagram professional accounts, ad accounts, and business portfolios connected to the service.
- Authorization information: access tokens, granted permissions, asset assignments, and connection status needed to make authorized API requests. We do not ask for or store your Facebook or Instagram password.
- Content and advertising information: scripts, captions, images, videos, drafts, published-post identifiers, campaign settings, budgets, schedules, and advertising or content performance metrics.
- Lead information, where enabled: information submitted through a connected lead form, such as name, email, phone number, and form answers, when a business has authorized lead retrieval or delivery to its CRM. This is separate from simply connecting a Page or reading ad statistics.
- Support and technical information: information you send us, operational records, API errors, timestamps, and web-server logs that may contain IP addresses and browser or device information.
2. How we use information
We use information to connect authorized accounts; prepare, publish, or schedule requested content; create or manage authorized advertisements; display performance reports; deliver leads to an authorized business or its connected CRM where that feature is enabled; respond to support requests; and maintain, secure, and troubleshoot the integration. We also use information when necessary to comply with applicable law and enforce our service terms.
We access Meta data only within the permissions and asset access granted to the app. We do not use Meta Platform Data to build unrelated profiles, sell it to data brokers, or train generalized AI models.
3. AI-assisted content creation
When you request AI-assisted writing, images, or other creative work, the prompts and content selected for that work may be processed by an AI service provider, such as OpenAI. This may include an image you provide as a creative reference. Do not include confidential or sensitive personal information in material submitted for creative generation unless you have the necessary authority and have agreed an appropriate handling process with us.
Connecting a Meta account does not by itself authorize sending all account data to an AI provider. Access credentials and lead contact records are not inputs to our creative-generation workflow.
4. Sharing and publication
We share information as needed with:
- Meta and connected services to carry out the publishing, advertising, reporting, or CRM actions you authorize.
- Your authorized business users and service team who need access to operate the integration or provide the agreed services.
- Service providers supporting hosting, storage, communications, security, or requested AI-assisted content work, to the extent needed for those services.
- Other recipients when required by law or necessary to protect legal rights, prevent fraud, or address a security incident.
We do not sell personal information obtained through this app or sell Meta Platform Data. We do not share that data for unrelated third-party advertising.
Content you authorize for publication is shared with the selected platform and its audience. Media prepared for publication may also be hosted at publicly accessible URLs so that Meta can retrieve it. Do not include private information in media intended for public posting. Meta’s own policies govern its handling of information on Facebook and Instagram.
5. Retention and security
We retain information for as long as reasonably needed to provide the authorized service, maintain your connection and requested reporting history, resolve support issues, and satisfy legal obligations. Retention depends on the type of information and the service relationship; we do not promise one fixed retention period for every record.
We use access controls and administrative and technical safeguards appropriate to the information and service. No storage or transmission method is completely secure. Access tokens and app secrets are confidential credentials and should never be included in public posts or ordinary support messages.
When information is no longer needed or a valid deletion request is fulfilled, we delete it or de-identify it as appropriate. Limited records may be retained where required by law or necessary for security or legal claims. Backup copies may remain until replaced through the backup lifecycle, with access restricted; a restoration must not reintroduce deleted data into active use.
6. Your choices and deletion requests
You can remove the app’s authorization in your Meta account’s Business Integrations or Apps and Websites settings. Revoking access prevents future authorized access through that connection, but does not automatically remove existing posts or ads on Meta, or erase records already stored by the integration.
To request access to, correction of, or deletion of information held by us, email nick@winningfunnel.com. Include the app name and enough information to identify the relevant account or business. We may verify your authority before acting. Please do not send passwords or access tokens.
See our data-deletion instructions for the request process, what can be deleted, and what may remain on other services. We aim to complete verified requests within 30 days, or within a shorter period if applicable law requires. If additional time or limited retention is necessary, we will explain why.
Depending on where you live and the law that applies, you may have additional rights to obtain a copy of your information, object to or restrict processing, withdraw consent, or complain to the relevant privacy authority. Contact us to exercise applicable rights.
7. Businesses, location, and children
When we process a client’s lead or customer information on that business’s instructions, the business is responsible for its own collection notices and lawful use of the information. You may also contact that business directly about its records. This app policy does not replace that business’s privacy policy.
Winning Funnel operates in the United States. Our systems and providers may process information in the United States or other countries where they operate. The app is intended for authorized adult business users and is not directed to children under 13. Contact us if you believe a child has provided information through the app.
8. Changes and contact
We will update this page and its effective date when this policy changes, and provide additional notice when required. For privacy questions or requests, contact Winning Funnel at nick@winningfunnel.com.