Privacy notice — working draft

INTERNAL REVIEW DRAFT — NOT AN EFFECTIVE PRIVACY NOTICE.

This draft records intended processing and unresolved decisions. Do not publish it as a final notice or submit it for platform review until the details below are confirmed.

Operator and scope

Proposed operator: Autómata TI SAS, pending confirmation of its registered identity, address and privacy contact. The final notice must distinguish this commercial website, the authorization service and customer-operated WordPress sites.

Current preview

The inspected plugin version uses fictional posts and development account identifiers. It does not authorize real social accounts. This does not mean the commercial website processes no personal data: hosting logs, WordPress, installed plugins, cookies and any future forms need a separate inventory.

Intended product data flow

The planned authorization service handles the platform authorization exchange. The shared Meta App Secret is intended to remain there. Customer WordPress installations are intended to store encrypted social tokens, selected account identifiers and locally synchronized post content and media URLs. WordPress is intended to fetch subsequent feed updates directly. Exact scopes, service logs, temporary token handling and renewal behavior remain to be verified against the final implementation.

Disconnecting and deletion

In the development build, disconnecting a network removes its local connection record and saved posts. This behavior does not establish how platform permissions, future OAuth service records, hosting logs or backups will be removed. Separate verified procedures are needed for each.

Required before publication

• Confirm operator identity, NIT where applicable, registered address and an official privacy contact.
• Map actual data categories, purposes, applicable legal bases, controller/processor roles and rights procedures with qualified review.
• Confirm Hostinger, Google Cloud and any other providers actually used; processing locations, transfers and contractual arrangements.
• Approve retention and deletion periods for tokens, posts, authorization state, service logs, website logs, support records and backups.
• Audit cookies, analytics, marketing tools and forms; document any required controls.
• Validate security statements and publish an effective date and change process.

Website language preference

The language selector uses the functional pll_language cookie to remember your selected language. Changing language manually sets a maximum lifetime of one year; your browser may remove it earlier. This preference does not connect social accounts. The main entry point uses the browser’s preferred language when no saved choice is available.