Privacy Policy
Last updated: June 1, 2025
At Big Bingo ("we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media management platform and related services (the "Service"). Please read this policy carefully. By using the Service, you consent to the practices described here.
1. Information We Collect
1.1 Information You Provide Directly
- Account registration details: name, email address, password, and profile photo.
- Billing and payment information (processed by our payment provider; we do not store full card numbers).
- Team and workspace details you enter within the platform.
- Support requests, feedback, and correspondence you send us.
1.2 Information Collected Automatically
- Log data: IP address, browser type, operating system, referring URLs, and pages visited.
- Usage data: features accessed, actions performed, and session duration.
- Device identifiers and cookies (see Section 9 — Cookies).
1.3 Information from Connected Social Media Profiles
A core feature of Big Bingo is the ability to connect your social media accounts. When you connect an account, we collect the data necessary to provide the Service, including:
Facebook & Instagram (Meta)
We connect to Meta platforms via the official Facebook Graph API and Instagram Graph API. We may collect:
- Page and profile identifiers, names, usernames, bios, and profile pictures.
- Published posts, stories, reels, and associated metadata (captions, media, timestamps, reach, impressions).
- Comments on your posts — including commenter names and comment text — for the Comments Manager feature.
- Audience demographics and engagement analytics (likes, shares, reactions, click-throughs).
- Access tokens required to perform actions on your behalf (scheduling posts, replying to comments, hiding comments).
- Ad account data where permissions are granted.
Use of data from Meta platforms is subject to Meta's Platform Terms and Meta's Privacy Policy.
We connect to LinkedIn via the official LinkedIn API. We may collect:
- Profile and company page identifiers, names, headlines, and profile images.
- Posts, articles, and associated engagement metrics (impressions, reactions, shares, comments).
- Follower and audience data provided by LinkedIn analytics endpoints.
- OAuth access tokens required to publish and retrieve content on your behalf.
Use of LinkedIn data is subject to LinkedIn's API Terms of Use.
YouTube (Google)
We connect to YouTube via the YouTube Data API v3. We may collect:
- Channel identifiers, names, descriptions, and thumbnails.
- Video metadata including titles, descriptions, tags, publish dates, and view/like/comment counts.
- Comments and replies on your videos for management purposes.
- Subscriber counts and audience analytics provided by the YouTube Analytics API.
- OAuth tokens required to upload videos and manage your channel on your behalf.
Our use of data from Google services is subject to Google's Privacy Policy. Big Bingo's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Google Business Profile
We connect to Google Business Profile via the Google My Business API. We may collect:
- Business location names, addresses, categories, and descriptions.
- Posts and updates published to your Google Business listing.
- Review data and response management where permissions are granted.
Twitter / X
We connect to Twitter / X via the official Twitter API. We may collect:
- Account identifiers, display names, usernames, and profile images.
- Tweets, threads, and associated engagement data (likes, retweets, replies, impressions).
- OAuth access tokens required to post and retrieve data on your behalf.
WhatsApp Business
We connect to WhatsApp via the official WhatsApp Business Platform. We may collect:
- WhatsApp Business Account and phone number identifiers.
- Message content sent and received through your connected WhatsApp number, for the purpose of displaying and enabling replies in your unified inbox.
- Contact identifiers (phone numbers) of individuals who message your WhatsApp Business number.
- Access tokens required to send and receive messages on your behalf.
Message content is retained only as long as needed to provide the inbox feature and is deleted within 30 days of account disconnection. We do not use WhatsApp message content for advertising or sell it to third parties. Use of WhatsApp Business data is subject to WhatsApp Business Policy.
Threads
We connect to Threads via the official Threads API. We may collect:
- Profile identifiers, usernames, and profile pictures.
- Published threads/posts and associated metadata.
- Replies and comments on your threads for the Comments Manager feature.
- Access tokens required to publish and retrieve content on your behalf.
Meta Ads & Lead Forms
Where you grant ad-related permissions, we may collect:
- Ad account identifiers, campaign, ad set, and ad performance data.
- Lead form submissions retrieved via the Leads Retrieval API, which may include the name, email address, and phone number of individuals who submitted a lead form on your Page or ad — these individuals are not Big Bingo users, and their data is processed solely on your behalf and at your direction as our customer.
Lead data is retained only as long as you keep it within the Service and is deleted within 30 days of you deleting it or disconnecting the associated ad account or Page.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service.
- Schedule and publish content to your connected social media profiles on your behalf.
- Retrieve, display, and help you manage comments and messages across connected platforms.
- Generate analytics and performance reports for your social media accounts.
- Process payments and manage your subscription.
- Send transactional and service-related communications (e.g., account alerts, payment receipts).
- Send marketing communications where you have given consent (you may opt out at any time).
- Detect, prevent, and address fraud, abuse, and security issues.
- Comply with applicable legal obligations.
We do not sell your personal data or the data from your connected social media accounts to third parties. Data obtained from social media APIs is used exclusively to provide the features you have requested.
3. Social Media Token Storage and Security
When you connect a social media account, we store the OAuth access tokens issued by those platforms. These tokens allow Big Bingo to act on your behalf (e.g., publish posts, read analytics). We protect these tokens by:
- Storing tokens encrypted at rest in our database.
- Transmitting tokens exclusively over HTTPS/TLS encrypted connections.
- Restricting access to tokens to only the processes and personnel that need them to operate the Service.
- Automatically invalidating tokens when you disconnect a social account from Big Bingo.
You can revoke Big Bingo's access at any time by disconnecting the account within Settings or by revoking permissions directly through the respective social media platform's security settings.
4. Sharing of Information
We do not sell your personal information. We may share your information with:
- Service providers — third parties that help us operate the Service (e.g., cloud hosting, payment processors, email delivery). These providers are contractually required to protect your data.
- Social media platforms — when you instruct us to publish content or perform actions on your behalf, we transmit the required data to those platforms through their official APIs.
- Legal authorities — if required by law, court order, or governmental authority.
- Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. Platform data synced from connected social media, messaging, advertising, and Threads accounts (posts, comments, messages, insights, lead form submissions) is retained only to power the corresponding dashboard feature. If you disconnect a platform account, or if the platform notifies us that you have revoked our access (for example, via a Facebook deauthorization callback), we delete the associated platform-sourced data and access tokens within 30 days. When you delete your Big Bingo account, we delete or anonymize your personal data within 30 days, except where retention is required by law or legitimate business necessity (e.g., billing records, dispute resolution).
6. Your Rights and Choices
Depending on your location, you may have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your personal data, subject to legal obligations.
- Portability — receive your data in a machine-readable format.
- Objection / Restriction — object to or restrict certain types of processing.
- Withdraw Consent — where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
7. Data Security
We implement commercially reasonable technical and organizational safeguards to protect your personal information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords and enable multi-factor authentication where available.
8. International Data Transfers
Big Bingo operates globally. Your information may be transferred to and processed in countries other than your own. Where required, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with applicable data protection law.
9. Cookies and Tracking Technologies
We use cookies and similar technologies to authenticate users, remember preferences, and analyze usage. Types of cookies we use:
- Essential cookies — required for the Service to function (e.g., session authentication).
- Analytics cookies — help us understand how the Service is used so we can improve it.
- Preference cookies — remember your settings and choices.
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.
10. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information. If you believe a child has submitted information to us, please contact us immediately.
11. Third-Party Links and Services
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites or services you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, by sending you an email notification or an in-app alert. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.
13. How to Delete Your Data
You can request deletion of your data at any time by:
- Disconnecting an individual social media account from Settings → Connected Accounts, which deletes the associated platform data and access token within 30 days.
- Deleting your Big Bingo account entirely from Settings → Account → Delete Account, which deletes all your personal data and platform-sourced data within 30 days.
- Emailing [email protected] with a deletion request; we will confirm completion within 30 days.
If you connected Big Bingo via Facebook Login and remove the app from your Facebook, Instagram, WhatsApp, or Meta Ads settings, Meta notifies us automatically and we delete your platform-sourced data within 30 days without further action on your part.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: