Last updated: 19 October 2026
This policy explains what personal data IGNIPOST collects, why we use it, who we share it with and how long we keep it. We collect what we need to run the service, we never sell your data, and you can delete your account at any time.
Who we are
IGNIPOST (https://ignipost.com) is operated by IGNITECH SARL AU, 13, Rue Ahmed El Majjati, Résidence Les Alpes, 1er étage N° 8, Quartier Maarif, Casablanca (Anfa), Morocco. ICE 002265699000050, R.C. 432325 (Casablanca), I.F. 34488439.
In this policy, "we", "us" and "our" mean IGNITECH SARL AU. "You" means the person who uses IGNIPOST, whether you own the account or were invited to a team workspace. For any privacy question, email [email protected].
Our two roles: controller and processor
The law gives us a different role depending on the data.
- Controller for your account data. We decide how and why your account data is used, and this policy covers it in full.
- Processor for the content and contacts you manage. Your social posts, inbox messages and contact lists belong to you. We handle them only on your instructions, under our Data Processing Addendum. You are responsible for having a legal basis for that data and for telling the people you message how you use it.
The data we collect
Account data
Your name, email address, password (stored only as a one-way hash, so we never see it), billing country and plan.
Connected-account access tokens
When you connect a social network, it gives us an access token. We encrypt these tokens at rest with AES-256 and use them only to do what the features you turned on need, such as publishing a post or loading new messages.
Content and media
The posts, drafts, schedules, images, videos and other files you create or upload, including your media library.
Messages and contact data from Meta
For the Facebook Pages and Instagram accounts you connect, we receive the messages and comments people send to them, and basic contact profile data: name, profile picture and page-scoped ID.
Usage and security logs
Records of how the service is used and of security events, including IP address and user agent. We keep these logs for up to 90 days.
Payment data
Payments are handled by our payment provider. We never store card numbers. We receive the payment status and the details we need to issue your invoice.
How we use your data and our legal bases
We process personal data under Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data, supervised by the CNDP. If you are in the European Economic Area or the United Kingdom, the GDPR or UK GDPR also applies, and we rely on these legal bases:
- To provide the service (contract): creating your account, publishing and scheduling posts, showing your inbox, running the automations you set up and managing team workspaces.
- To bill you (contract and legal obligation): charging your plan, issuing invoices and keeping accounting records.
- To keep the service safe (legitimate interests): detecting abuse, preventing fraud, investigating security events and enforcing our Acceptable Use Policy.
- To contact you about your account (contract): password resets, billing notices and changes that affect how you use IGNIPOST.
- To understand how the service is used (consent): analytics run only if you accept analytics cookies. See our Cookie Policy.
- To meet legal duties (legal obligation): answering lawful requests from authorities and keeping records the law requires.
AI writing assistance
AI features are optional. Text is sent to an AI provider only when you ask for it, for example when you click a button to draft or rewrite a post. We send the text and instructions you give, and the provider returns a result. Please do not put sensitive personal data into AI requests.
Data we receive from the Meta Platform
- We use data from Meta APIs only to provide the features you turned on.
- We never sell it, and we never use it to build advertising profiles.
- We delete it when you disconnect the Page or account, or when you delete your IGNIPOST account.
- Messaging follows Meta's policies: automated replies only within 24 hours of the person's last message, human agent replies up to 7 days, and one private reply per comment.
Who we share data with
We share personal data only with the service providers (sub-processors) that help us run IGNIPOST, and only as far as each one needs:
| Sub-processor | What it does for us | Location |
|---|---|---|
| Cloudflare | Content delivery, security filtering and file storage (Cloudflare R2) | Global network |
| Our hosting provider | Runs the servers that host the application and database | Germany (European Union) |
| Payment provider (Stripe or PayPal, as you choose at checkout) | Processes payments and stores card details | Set by the provider |
| Email delivery provider | Sends account, security and billing emails | Set by the provider |
| AI providers (optional) | Generate or rewrite text, only when a user asks for it | Set by the provider |
| Social networks you connect | Receive the content you publish and send messages and comments back to the inbox | Set by each network |
A current list of sub-processors is available on request at [email protected]. We may also disclose data when the law requires it, for example to answer a valid court order. We do not sell personal data.
Where your data is stored
Our servers are in the European Union (Germany), behind Cloudflare. Files are stored on Cloudflare R2. Our team works from Morocco, and some sub-processors operate in other countries. When the GDPR or UK GDPR applies and personal data leaves the EEA or the UK for a country without an adequacy decision, we use the European Commission's Standard Contractual Clauses (and the UK addendum where needed) or another lawful transfer mechanism.
How long we keep data
- Account data: while your account is open.
- After you delete your account: we erase your data within 30 days, and backups roll off within 35 days.
- Invoices: 10 years, as Moroccan accounting law requires.
- Inbox messages: while your account is open, unless you delete them sooner.
- Usage and security logs: up to 90 days.
- Data from Meta: until you disconnect the Page or account, or delete your IGNIPOST account.
How we protect data
We use encryption in transit and at rest, encrypt access tokens with AES-256, hash passwords and limit staff access. Read our Security page for details.
Your rights
Depending on where you live, you can ask us to:
- give you a copy of your personal data;
- correct data that is wrong or incomplete;
- delete your data;
- restrict or object to how we use it;
- send your data to you or another provider in a portable format;
- withdraw your consent at any time, where we rely on consent.
Moroccan Law 09-08 gives you the rights of access, rectification and objection. To use any right, email [email protected]. We may ask you to confirm your identity. Where the GDPR applies, we reply within one month.
If you messaged a business that uses IGNIPOST, that business controls your data. Contact it first, and we will help it answer you. You can also follow our Data Deletion Instructions.
You can complain to the CNDP in Morocco, or to the data protection authority where you live or work in the EEA or the UK (the ICO in the United Kingdom). We would like the chance to fix the issue first, so please write to us.
Children
IGNIPOST is a tool for businesses and is not directed at children. We do not knowingly collect children's data as account holders.
Changes to this policy
We will update this page when our practices change and change the date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.
Contact us
Privacy questions: [email protected]. Other questions: [email protected]. Post: IGNITECH SARL AU, 13, Rue Ahmed El Majjati, Résidence Les Alpes, 1er étage N° 8, Quartier Maarif, Casablanca (Anfa), Morocco.
Questions about this page? Write to [email protected].