Privacy Policy

Last updated: May 3, 2025

Arabic version available: An Arabic translation of this policy is available upon request at support@dghat.com.

1. Who We Are

DGHat ("we", "us", or "our") is an AI-powered social media marketing platform operated by DGHat, based in Egypt. Our platform enables businesses to create professional social media content, manage brand profiles, and run advertising campaigns on Facebook and Instagram.

Website: https://www.dghat.com
Contact: support@dghat.com

2. Data We Collect

We collect the following categories of data:

2.1 Account Data

Full name, email address, and phone number (provided at registration)
Business/brand name and logo
Password (stored as a bcrypt hash — never plain text)

2.2 Facebook & Instagram Data (via Meta Login)

When you connect your Facebook or Instagram account to DGHat, we request the following permissions and collect the associated data:

Permission	What We Access	Why We Need It
pages_show_list	List of Facebook Pages you manage	To let you select which page DGHat should publish to
pages_read_engagement	Page posts and engagement metrics	To display content performance in your dashboard
pages_manage_posts	Ability to publish posts to your page	To post AI-generated content on your behalf
pages_manage_ads	Ad management on your pages	To create and manage ad campaigns on your behalf
ads_management	Ad accounts, campaigns, ad sets, and ads	To create, monitor, and optimize Facebook/Instagram ads
ads_read	Ad performance data	To display ad results and metrics in your dashboard
business_management	Business Manager assets you own or are assigned to	To manage ads under the correct business account
catalog_management	Product catalog (if applicable)	To create catalog-based ad campaigns for e-commerce clients

We only request permissions that are directly required for the services you use. You may disconnect your Facebook account at any time from your DGHat dashboard or Facebook settings.

2.3 Content Data

Brand briefing answers (industry, target audience, tone of voice, etc.)
Uploaded logos and product images
AI-generated social media posts and captions
Order history and campaign details

2.4 Technical Data

IP address, browser type, and device information (via server logs)
Session tokens (stored in secure HTTP-only cookies)
Usage analytics (pages visited, features used)

3. How We Use Your Data

To provide and operate the DGHat platform and services
To generate AI-powered social media content for your brand
To publish posts and manage ad campaigns on your Facebook/Instagram pages only when explicitly authorized by you
To display performance metrics and analytics for your campaigns
To send transactional notifications (order status, delivery confirmations)
To improve our AI models and platform quality (using anonymized, aggregated data only)
To comply with legal obligations

We do NOT sell your personal data or Facebook/Instagram data to any third party. Ever.

4. Facebook & Instagram Data — Specific Terms

In accordance with the Meta Platform Policy, we commit to the following:

We only access what you authorize. We request the minimum permissions necessary to deliver the features you use.
We do not use your Facebook data for ad targeting against you. Your page data is used solely to manage campaigns you have explicitly requested.
Page Access Tokens are encrypted at rest using AES-256 encryption and are never exposed to other users or third parties.
We do not share your Facebook pages, ad accounts, or business data with any third-party service other than Meta's own APIs.
Data retention: We retain your Facebook connection data only while your DGHat account is active. Disconnecting your Facebook account or deleting your DGHat account permanently removes all associated tokens and data.

5. Data Retention

We retain your data for the following periods:

Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
Facebook/Instagram tokens and connection data: Deleted immediately upon disconnection or account deletion.
AI-generated content and orders: Retained for 12 months after order completion for reference and support purposes, then permanently deleted.
Server logs: Retained for 90 days for security and debugging purposes.

6. Your Right to Data Deletion

You have the right to request deletion of your personal data at any time. You can:

Delete your Facebook connection: Go to your DGHat Dashboard → Settings → Connected Accounts → Disconnect Facebook. This immediately revokes access and deletes all stored tokens.
Delete your DGHat account: Contact us at support@dghat.com and we will permanently delete your account and all associated data within 30 days.
Facebook-initiated deletion: If you remove DGHat from your Facebook app settings, Facebook will automatically notify us via our Data Deletion Callback and all your Facebook data will be removed immediately.

Data Deletion Request URL (for Meta): https://www.dghat.com/api/meta/data-deletion

7. Data Sharing & Third Parties

We share data only with the following service providers, solely to operate our platform:

Meta (Facebook/Instagram): To publish posts and manage ad campaigns via the Graph API
OpenAI / fal.ai: To generate AI content (anonymized brand context only — no personal identifiers)
Vercel: Cloud hosting and file storage (Vercel Blob)
Paymob: Payment processing (we do not store card details)

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

8. Security

All data is transmitted over HTTPS/TLS encryption
Facebook Page Access Tokens are encrypted at rest using AES-256
Passwords are hashed using bcrypt (minimum 12 rounds)
Access to production databases is restricted to authorized personnel only
We regularly audit our security practices

9. Children's Privacy

DGHat is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at support@dghat.com.

10. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will notify you via email and display a notice in your dashboard. Continued use of DGHat after the effective date constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions, data requests, or concerns:

DGHat

Email: support@dghat.com

Website: https://www.dghat.com

Response time: within 48 hours