Facebook & Instagram Data

1. Who we are

All Rounder BSS is an education and student-support service operating the All Rounder BSS Connect support portal. In this policy, “we”, “our” and “us” refer to All Rounder BSS.

2. Information we receive

Depending on how you interact with our Facebook Page or Instagram account, we may receive:

• your platform-scoped Facebook or Instagram identifier;
• your public display name or username when supplied by Meta;
• direct messages, message attachments and message timestamps;
• comments you post on our Facebook or Instagram content and our replies;
• technical webhook records needed to receive, secure and troubleshoot these interactions; and
• conversation status and the support team member handling the interaction.

We do not ask for or store your Facebook or Instagram password. Meta determines which information its APIs make available to us.

3. Why we use this information

We use this information only to:

• receive and respond to support questions and comments;
• maintain conversation continuity and prevent duplicate replies;
• route conversations to authorised support staff;
• protect the service from abuse and investigate delivery or security failures; and
• comply with applicable legal obligations.

We do not sell Facebook or Instagram message or comment data, and we do not use it for third-party advertising.

4. How information is obtained

Information is received from Meta through authorised Facebook and Instagram APIs and signed webhook events after you message our account, interact with our content, or otherwise initiate an interaction supported by Meta.

5. Sharing and access

Access is limited to authorised All Rounder BSS support and technical personnel who need the information to respond or maintain the service. Information may also be processed by infrastructure providers acting on our instructions, or disclosed when required by law. We do not permit such providers to use this information for their own marketing.

6. Security

We use access-controlled staff sessions, encrypted integration credentials, signed webhook verification, transport encryption and operational logging. No online service can guarantee absolute security, but we apply reasonable safeguards appropriate to the information processed.

7. Retention

We retain Facebook and Instagram conversation information only for as long as reasonably needed for support, security and legal purposes. When we approve a verified deletion request, the relevant Facebook or Instagram messages, comments, social identity and associated conversation records in the active support system are deleted or irreversibly anonymised within 30 days. Residual copies in restricted backups and security logs are removed through normal rotation, generally within 90 days, unless a longer period is legally required.

8. Your choices and deletion rights

You may request deletion of the Facebook or Instagram information associated with your interaction. To protect users from unauthorised deletion, we verify that the requester controls the relevant account or conversation before acting. Verification will never require your Facebook or Instagram password.

A social-data deletion request does not automatically delete an independently registered student account, purchases, payment records or legally required records. Those are handled separately under the applicable service terms.

9. Meta’s services

Facebook and Instagram are services provided by Meta. Meta processes information under its own terms and privacy policy. This policy describes only our processing after authorised information reaches All Rounder BSS.

10. Changes

We may update this policy when our integration, legal requirements or processing practices change. The effective date above will be revised when material changes are published.

11. Contact

For privacy questions or a social-data request, email info@allrounderbss.com. Please do not send passwords, one-time passwords, payment card details or unnecessary identity documents.