Privacy Policy

The data controller is Blue Strings Company, s.r.o., registered at Štefánikova 871/1, 058 01 Poprad, Slovakia, Company ID: 51794268. Contact: info@bluestrings.sk

EXMEE Flow (flow.exmee.com) is a workflow automation platform that allows users to build automated processes involving social media publishing, data processing, and third-party integrations — including Facebook Pages and Instagram Business accounts.

When you use EXMEE Flow, we may collect the following types of data:

• • Account data: email address, name, role within the platform
• • Facebook / Instagram data: when you connect your Facebook account via OAuth, we store Page Access Tokens, Facebook Page IDs, Page names, and Instagram Business Account IDs — solely to enable automated publishing on your behalf
• • Workflow data: flow configurations, execution logs, and results you create within the platform
• • Usage data: standard server logs (IP address, browser type, timestamps)

EXMEE Flow uses the Meta (Facebook) Graph API to publish content to Facebook Pages and Instagram Business accounts that you explicitly authorize. Specifically:

• • We request OAuth authorization from the account owner
• • We store Page Access Tokens in encrypted form in our database
• • These tokens are used exclusively to perform actions you configure in your automated workflows (e.g. publishing posts, reels, stories)
• • We do not sell, share, or use this data for advertising or any purpose other than executing your configured automations
• • We request the following permissions: pages_manage_posts, pages_read_engagement, pages_show_list, pages_manage_engagement, instagram_content_publish, instagram_basic, instagram_manage_comments

You can revoke access at any time by disconnecting your Facebook connection inside EXMEE Flow (Connections manager) or by removing the EXMEE app from your Facebook account at facebook.com/settings → Apps and Websites.

• • To operate and deliver the EXMEE Flow service
• • To execute automated workflows on your behalf (publishing, data processing)
• • To authenticate you and maintain your session
• • To ensure security and prevent abuse
• • To comply with legal obligations

We do not use your data for advertising, profiling, or sell it to third parties.

All data is stored on servers located in the European Union. Sensitive credentials (API tokens, access tokens) are stored encrypted using AES-256 encryption. We apply industry-standard security practices to protect your data from unauthorized access.

We retain your data for as long as your account is active. If you delete your account or disconnect an integration, the associated tokens and credentials are permanently deleted from our systems. Workflow execution logs are retained for 90 days for debugging purposes.

EXMEE Flow integrates with third-party services including:

• • Meta (Facebook, Instagram) — for social media publishing
• • Google (Sheets, Drive) — for data and file management
• • Dropbox — for file management
• • OpenAI / Anthropic — for AI-powered content generation
• • Resend / SMTP providers — for email delivery

Each of these services has its own privacy policy. We only transmit data required to perform your configured actions.

Under the General Data Protection Regulation (GDPR), you have the right to:

• • access your personal data
• • correct inaccurate data
• • request deletion of your data
• • restrict or object to processing
• • data portability
• • withdraw consent at any time
• • lodge a complaint with the Slovak Data Protection Authority (dataprotection.gov.sk)

To exercise your rights, contact us at info@bluestrings.sk.

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or in-app notification. Continued use of EXMEE Flow after changes constitutes acceptance of the updated policy.

For any questions regarding this Privacy Policy or how we handle your data:
Blue Strings Company, s.r.o.
Štefánikova 871/1, 058 01 Poprad, Slovakia
info@bluestrings.sk