Privacy Policy
This Privacy Policy explains how Bright Victory Trading Limited ("we", "us") collects, uses, stores and deletes information when you use YiFanFa (the "App"), a web application at app.yifanfa.com for scheduling and publishing content to Facebook Pages you manage.
1. Information we collect
Account information
Your name, email address and password (stored only in hashed form by our sign-in provider), used to create and secure your YiFanFa account.
Information from Facebook (Meta Platform Data)
When you choose "Connect Facebook" and grant permissions, we receive, only for the Pages you select:
- the list of Pages you manage, their names and IDs (pages_show_list);
- Page access tokens that allow the App to publish on your behalf (pages_manage_posts);
- your Page's recent posts and their share counts, shown to you in the App (pages_read_engagement);
- view counts of those posts, shown to you in the App (read_insights);
- reaction and comment counts of those posts, and the comments on a post (commenter name, profile picture, text and time) when you open them in the App (pages_read_user_content). Comments are read from Facebook each time you open them and are not stored by us;
- access to Pages that belong to a business portfolio you manage, so they can be listed (business_management);
- your Facebook user ID and name, and a user access token used to list your Pages.
We do not receive or store your Facebook password, and we do not access your personal profile, friends or messages.
Content you upload
Videos, images, captions, links and schedules you create in the App. Uploaded files are stored privately and temporarily so that Meta can fetch them when you publish; they are deleted automatically within 2 days.
Technical information
Browser type, IP address and error logs, used to keep the App working and secure.
2. How we use information
- to publish or schedule the content you have uploaded and confirmed, to the Pages you selected;
- to show you the status and performance of your posts;
- to provide support, keep the App secure and fix problems.
We use Meta Platform Data only to provide the App's features to you, as directed by you. We do not sell, license or rent it, we do not use it for advertising, and we do not use one customer's data to provide services to another customer. Each user's data is kept separate.
3. Where data is stored
Your account, connected Pages, access tokens and publishing history are stored in databases operated by our hosting providers in the United States; uploaded files are stored temporarily in Hong Kong. Access tokens are encrypted at rest with AES-256 and are never sent to your browser.
4. Sharing
We share information only with service providers that help us run the App (Vercel for hosting and file storage, Neon for the database, Clerk for sign-in and account emails, and Resend for publish-failure notification emails, which receives only your email address and the Page name, time and beginning of the caption of the failed posts), under contracts that restrict their use of it, when required by law, or when you ask us to. When you publish, your content is sent to Meta as part of the service.
5. Retention
We keep information only while it is needed to provide the service. When you disconnect a Facebook account, we delete its access tokens and its Pages. Uploaded files are deleted automatically within 2 days. When you delete your account or ask us to delete your data, we delete it within 30 days, unless the law requires us to keep it.
6. Your choices and rights
- Disconnect any Page at any time in the App, or remove YiFanFa in your Facebook settings (Settings & privacy → Settings → Business integrations / Apps and websites).
- Request access to, correction of or deletion of your data: see our Data Deletion Instructions or email admin@yifanfa.com.
These rights are available to every user of the App, wherever you are.
7. Security
We use industry-standard safeguards, including encryption of access tokens, least-privilege access and activity logs. To report a security issue, email admin@yifanfa.com.
8. Children
The App is a business tool and is not intended for anyone under 18.
9. Changes
We will post any changes on this page and update the date above. Material changes will also be notified in the App.
10. Applicable law
We handle personal data in accordance with the Personal Data (Privacy) Ordinance of Hong Kong and other laws that apply to you, including the Personal Information Protection Law of the People's Republic of China for users in mainland China. Where your information is stored outside your region, we will tell you and ask for your consent where the law requires it.
11. Contact
Bright Victory Trading Limited · admin@yifanfa.com