Privacy Policy

Content Eleven (“Content Eleven”, “we”, “us”, or “our”) provides a platform that helps teams plan, collaborate on, approve, and publish social media content, including posts to Facebook Pages and Instagram accounts (the “Service”).

This Privacy Policy explains how we collect, use, disclose, and protect information in connection with our website, app, and related services (together, the “Platform”). It also explains the choices and rights you have in relation to your personal data.

By using Content Eleven, connecting your Facebook or Instagram accounts, or otherwise interacting with our Platform, you agree to the practices described in this Privacy Policy.

If you do not agree with this Privacy Policy, you should not use our Platform.

1. Controller and Contact Details

The Platform is operated by Content Eleven.

If you have any questions about this Privacy Policy or how we process your data, you can contact us at:

Email: hello@contenteleven.com
Subject line: Privacy request – Content Eleven

This email address is also used for exercising your data protection rights (access, deletion, etc.).

2. Scope

This Privacy Policy applies to:

• Visitors to our website (including the marketing site)
• Users who create a Content Eleven account
• Team members invited into a workspace
• People who connect Facebook Pages or Instagram accounts to Content Eleven
• People whose data is processed through connected social media accounts (for example, comments, usernames, and engagement metrics on posts published through Content Eleven)

This Policy does not apply to how Facebook, Instagram, or other third-party platforms process your data. Those services are governed by their own privacy policies.

3. Information We Collect

We collect information in three main ways:

1. Information you provide to us directly
2. Information we receive from Facebook and Instagram via their APIs
3. Information collected automatically when you use the Platform

3.1 Information You Provide Directly

When you use Content Eleven, we may collect:

Account information

• Name
• Email address
• Password (hashed — we never store plain-text passwords)
• Profile picture (if you upload one)

Workspace and organisation information

• Workspace name
• Role (e.g. admin, member, client)
• Team members you invite (names and email addresses)

Content and assets

• Text content for posts, captions, comments, and notes
• Images, graphics, PSD templates, and other media you upload
• Schedules, drafts, approvals, feedback, and version history
• Any other content you store or process through the Platform

Support and communication

• Messages you send us via email or in-app support
• Bug reports, feedback, and survey responses

3.2 Information from Facebook and Instagram

When you connect a Facebook Page or Instagram account to Content Eleven, we access certain information from Facebook and Instagram via the Meta Graph API, always in accordance with the permissions you grant during the connection process.

Depending on your configuration and the permissions you approve, this may include:

Account and Page details

• Facebook Page ID, name, and profile picture
• Instagram Business or Creator account ID, username, and profile image
• Information about which Facebook Pages and Instagram accounts you manage

Content and engagement data

• Posts and media published via Content Eleven
• Captions, hashtags, and metadata
• Basic engagement metrics (likes, reactions, comments, saves, shares, reach, impressions)
• Comments and replies on posts where you have granted read permissions

Access tokens

• Page and Instagram access tokens issued by Meta

These tokens are stored securely and used only to perform actions you explicitly request within the Platform (such as publishing posts or retrieving insights).

We do not access your personal Facebook profile timeline or private messages.

We only request the minimum permissions required for the features you use. These permissions are displayed to you by Facebook or Instagram during the connection flow.

You can revoke our access at any time through:

• Your Facebook settings
• Your Instagram settings
• Your Content Eleven workspace settings (by disconnecting channels)

3.3 Information Collected Automatically

When you use our Platform, we may automatically collect:

Usage data

• Actions you take in the app (e.g. creating or editing posts, publishing, approvals)
• Features used, timestamps, and interaction patterns

Technical and log data

• IP address
• Browser type and version
• Device information and operating system
• Referring and exit pages
• Dates and times of access
• Error logs and performance data

Cookies and similar technologies

We may use cookies, local storage, or similar technologies to:

• Keep you logged in
• Remember your preferences
• Measure performance and usage of the Platform

You can control cookies through your browser settings. Disabling essential cookies may affect login or core functionality.

4. How We Use Your Information

We use the information we collect for the following purposes:

To provide and maintain the Platform

• Create and manage accounts and workspaces
• Allow you to connect and manage Facebook Pages and Instagram accounts
• Enable content creation, editing, approvals, scheduling, and publishing
• Publish content to connected social media channels when you instruct us to do so
• Retrieve analytics and engagement metrics

To secure the Platform

• Authenticate users and prevent unauthorised access
• Detect and prevent fraud, abuse, and misuse
• Monitor for security issues

To improve and develop the Platform

• Analyse usage and performance
• Debug issues and improve stability
• Develop new features and refine the user experience

To communicate with you

• Respond to support requests
• Send operational updates (security notices, policy changes, API or integration changes)
• Send optional product updates (you may opt out of non-essential emails)

To meet legal and regulatory obligations

• Maintain accounting and tax records
• Respond to lawful requests from authorities
• Enforce our Terms of Service and other agreements

Important clarification:

We do not use data obtained from Facebook or Instagram for advertising, profiling, or marketing purposes outside of providing the Service.

5. Legal Bases for Processing (EEA / UK / GDPR)

Where applicable, we process personal data on the following legal bases:

• Performance of a contract – to provide the Platform and its features
• Legitimate interests – to secure, improve, and operate the Platform
• Consent – for certain cookies and when you connect Facebook or Instagram accounts
• Legal obligations – to comply with applicable laws and regulations

6. How We Share Information

We do not sell your personal data, including data obtained through Facebook or Instagram integrations.

We may share information in the following limited circumstances:

Service providers

Trusted third-party providers (hosting, storage, email, analytics, error tracking) who process data on our behalf under contractual obligations.

Facebook and Instagram

When you publish or manage content through Content Eleven, data is transmitted to Facebook and Instagram via their APIs as required for core functionality and governed by their own policies.

Workspace collaborators

Content is shared with team members according to workspace permissions set by administrators.

Business transfers

In the event of a merger, acquisition, or sale, data may be transferred subject to appropriate safeguards.

Legal and safety

Where required to comply with law, enforce agreements, or protect rights, safety, and integrity.

7. International Data Transfers

Your data may be processed outside your country of residence. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) to protect your data.

8. Data Retention

We retain data only as long as necessary to provide the Service and meet legal obligations.

• Account data is retained while your account is active
• Content and publishing history are retained unless deleted by you
• Access tokens are stored only while required and invalidated upon disconnection
• Logs and analytics data are retained for limited periods

We may anonymise data for longer-term analysis.

9. Your Rights

Depending on your location, you may have rights including access, correction, deletion, restriction, portability, objection, and withdrawal of consent.

Requests can be made to hello@contenteleven.com. We may verify your identity before responding.

You also have the right to lodge a complaint with your local data protection authority. In France, this is the CNIL.

10. Data Deletion and Account Closure

You can disconnect your Facebook Page connection and delete all associated Facebook data stored in Content Eleven at any time using the "Disconnect & delete Facebook data" button in your Settings page. This action is immediate and will:

• Remove your Facebook Page connection from Content Eleven
• Delete all stored Facebook connection information (Page ID, Page name, and associated access tokens)
• Prevent future publishing to that Facebook Page through Content Eleven

You may also request full account deletion or deletion of other data by emailing hello@contenteleven.com with the subject line "Data deletion request".

Content already published to Facebook or Instagram must be managed directly on those platforms.

11. Security

We use reasonable technical and organisational safeguards, including encryption in transit, access controls, and monitoring.

No system is fully secure, but we continuously improve our protections.

12. Children’s Privacy

The Platform is not intended for children under 16. We do not knowingly collect data from children under 16.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the “Last updated” date and, where required, communicated to users.

14. How to Contact Us

Content Eleven
Email: hello@contenteleven.com