MSSG Publisher: Privacy and data deletion

Who is responsible

Mitchell Strategic Solutions Group (MSSG), registered in Spain under NIF Z0827204Z, is responsible for personal data processed through this integration. Contact info@mitchellgroup.eu for privacy questions or requests.

Information the integration uses

• Authorised account and Page identifiers, names, usernames, linked Instagram account details and granted permissions.
• Access credentials needed to communicate with Meta. These are stored separately from public content and are not published.
• Approved captions, photographs, videos, publication times, and the usernames of people tagged or invited as collaborators. Content may contain identifiable people and their voices.
• Publishing records: upload and post identifiers, processing status, published links, error codes and audit timestamps. Account and publication insights may be retrieved when authorised for performance checks.

The current publisher does not collect private messages, contact lists or payment information, and does not operate advertising campaigns. An ordinary viewer does not need to connect a Meta account to this tool.

Why we use this information

We use it to identify the correct accounts, upload approved material, schedule publication, invite collaborators, check publication status, prevent duplicate posts and investigate failures. Our basis for operating and securing our own communications is our legitimate interest in running MSSG’s public channels. Where consent is required for particular content, that content requires the relevant permission separately; connecting an account does not provide consent on behalf of everyone shown in a video.

Storage and sharing

The publisher runs on Cloudflare Workers. Its database stores publishing jobs and audit records; Cloudflare R2 stores media supplied for publication. Access is restricted to authorised administration. Temporary signed media links allow Meta to retrieve uploads. Working copies of content and operational records may also be held on our controlled devices and in Google Drive.

Meta receives the information necessary to publish on Facebook and Instagram. Published content and collaborator invitations are then handled under Meta’s platform rules and privacy policies. Public posts can be viewed, shared or copied by others according to their platform visibility. MSSG does not sell information obtained through this integration.

Our separate LinkedIn publishing workflow uses Buffer. It is not a recipient of the Facebook or Instagram access credentials held by MSSG Publisher. Providers may process information outside your country; their applicable contractual data-protection and transfer arrangements govern that processing.

Retention and access

There is currently no automatic fixed-period purge of publishing jobs, media or audit records. We retain working material for publication, reuse and troubleshooting, and assess removal when it is no longer needed or a deletion request is received. Credentials are retained while the integration is authorised and needed, and must be revoked or replaced when access ends. A post already published on Meta is separate from its working copy in this tool.

Request deletion or disconnect the integration

Email info@mitchellgroup.eu with the subject “MSSG Publisher data deletion”. Tell us the relevant account username, post link or material and what you want removed. Do not send passwords or access tokens. We may ask for limited information to verify that you are entitled to make the request.

We will assess your request, remove relevant data from systems we control where required, and explain any retention required by law or for legal claims. You can also request access, correction, restriction or portability where applicable, or object to processing based on legitimate interests. You may complain to the Spanish Data Protection Agency (AEPD) or your competent supervisory authority.

An authorised account administrator can revoke the app’s permissions in Meta’s business or integration settings. Revocation stops future authorised access; it does not by itself delete existing posts or copies held by other people. If you also want a public MSSG post removed, identify it in your request so we can address it separately.