Mind+ is the publishing tool Lean Hippo Consulting uses to schedule and publish posts on the Facebook Pages and Instagram accounts we manage for our clients. It's an internal tool, not a public app. Only our own team signs in to it, and it collects nothing from the people who visit or follow those Pages.
This page explains what Mind+ can see through Meta's platform, what we do with it, and how a client can remove it.
1What Mind+ accesses
Only for the Pages and Instagram accounts a client has given us permission to manage:
- the name and ID of each Page and Instagram account, and the access tokens Meta issues so we can post to them
- the photos, videos and captions we publish, and the post IDs and publishing status Meta sends back
- performance figures Meta reports as totals, such as follower counts, reach, views, likes and the hours when followers tend to be online
Those figures are totals for an account or a post. They don't identify anyone. Mind+ doesn't read private messages, doesn't look at the profiles of people who follow or react to a Page, and doesn't collect or store comments people leave. The only comments it handles are ones it posts itself, on our client's own posts.
2What we use it for
We use it to publish content the client has approved, at the times agreed with them, and to report back on how that content did. We don't use it for advertising, we don't build profiles of anyone, and we never sell it.
3Where it's kept
On Lean Hippo's own systems, with a few service providers that run them:
- GitHub holds our private code and the record of what was scheduled and published.
- Google Drive holds the client's photos and videos before they're posted.
- Cloudflare holds a short-lived copy of each image or video, because Instagram needs a link to fetch the file from. Each copy is deleted once the post is published, and anything left behind is cleared within 24 hours.
Access tokens are kept as encrypted secrets and on Lean Hippo's own computers. They are never put in public code or shared outside the company.
4Who can see it
Our team, and the client whose account it is. We don't share it with anyone else unless the law requires us to.
5How long we keep it
Access tokens are kept only while we manage the account. We delete them when our work with the client ends or when the client removes our access. Records of what we published and how it performed are kept as part of our business records for that client. Temporary media copies on Cloudflare last 24 hours at most.
6Removing access and deleting data
A client can cut Mind+ off at any time:
- In the business portfolio settings, open Integrations, then Connected apps, and remove Mind+.
- From a personal Facebook account, open Settings and privacy, then Settings, then Business integrations, and remove Mind+.
To have us delete what we hold about a Page or Instagram account, email leanhippoconsulting@gmail.com with the account's name. We'll delete it within 30 days and reply to confirm when it's done.
7Changes to this policy
If the way Mind+ works changes, we'll update this page and the date at the top.
8Contact
Lean Hippo Consulting, Dhaka, Bangladesh
leanhippoconsulting@gmail.com