Privacy Policy for POST REPORTS

Effective date: 23 July 2026

This Privacy Policy explains how NET ADVANCE EOOD (“NET ADVANCE”, “we”, “us” or “our”) processes information through the POST REPORTS application and the protected reporting pages available on netadvance.eu.

1. Data controller

NET ADVANCE EOOD
UIC: 201463373
Registered address: 60A Michur Street, Mramor, Sofia, Bulgaria
Email: office@netadvance.eu
Telephone: +359 898 585 877

2. Purpose of POST REPORTS

POST REPORTS is a business reporting tool used by NET ADVANCE and its clients. It retrieves content and aggregated performance information for Facebook Pages and Instagram professional accounts that have been lawfully assigned to NET ADVANCE through Meta Business tools.

The application presents this information in password-protected client dashboards. It is not intended for public consumer use.

3. Information we process

Depending on the permissions granted through Meta and the services used, POST REPORTS may process:

  • Facebook Page and Instagram professional account identifiers, names, usernames, profile pictures and follower counts;

  • published Facebook and Instagram content, including captions, images, videos, Reels, Stories, publication dates and permalinks;

  • aggregated content performance metrics, including views, reach, reactions, likes, comments, shares, saves, clicks, interactions and video watch time;

  • active Instagram Story media and available Story performance metrics;

  • Meta access tokens and technical identifiers required to establish the authorised server-to-server connection;

  • WordPress account information for authorised dashboard users, such as name, email address, internal user ID and access permissions;

  • standard technical and security information generated when a person accesses netadvance.eu, such as IP address, browser information, access time and server logs.

POST REPORTS is designed to process account-level, content-level and aggregated reporting data. We do not use the application to create profiles of individual Facebook or Instagram users. We do not intentionally retrieve or store lists containing the identities of people who viewed, liked or otherwise interacted with content.

4. Sources of information

Information is obtained from:

  • Meta Platforms Ireland Limited and the Meta Graph API;

  • Facebook Pages and Instagram professional accounts authorised through Meta Business tools;

  • NET ADVANCE clients and authorised WordPress users;

  • the hosting and security systems supporting netadvance.eu.

5. Why we process information

We process information for the following purposes:

  • to provide social media reporting services requested by our clients;

  • to display Facebook and Instagram content performance in protected dashboards;

  • to compare content performance over selected reporting periods;

  • to maintain a historical archive of Instagram Stories after they expire from the platform;

  • to administer user access and prevent unauthorised access;

  • to maintain, troubleshoot and secure POST REPORTS;

  • to comply with applicable legal obligations.

6. Legal bases

Where the General Data Protection Regulation applies, we rely on one or more of the following legal bases:

  • performance of a contract or taking steps at the request of a client before entering into a contract;

  • our legitimate interests and the legitimate interests of our clients in measuring, reporting and improving their social media communications;

  • compliance with a legal obligation;

  • consent, where consent is specifically required by applicable law.

7. Access and recipients

Access to POST REPORTS dashboards is limited to authorised NET ADVANCE personnel, the relevant client and service providers that support the secure operation of the website.

Information may be processed by:

  • Meta Platforms Ireland Limited and other Meta entities under Meta’s applicable terms and privacy policy;

  • our website hosting, infrastructure, security and technical support providers;

  • professional advisers or competent authorities where disclosure is required by law.

Each client receives access only to the reporting page assigned to that client. We do not sell personal information.

8. International data transfers

Meta and some technical service providers may process information outside Bulgaria or the European Economic Area. Where required, such transfers are carried out using an applicable legal transfer mechanism, including adequacy decisions or standard contractual clauses.

For information about Meta’s processing practices, please consult Meta’s Privacy Policy:
https://www.facebook.com/privacy/policy/

9. Retention

POST REPORTS applies the following general retention rules:

  • Facebook and Instagram post and Reel information is normally retrieved on demand and cached for up to 15 minutes;

  • archived Instagram Story content and metrics may be retained for up to 400 days for reporting purposes;

  • WordPress client accounts and access assignments are retained for the duration of the client relationship or until access is withdrawn;

  • Meta access tokens are retained until they are replaced, revoked or no longer required;

  • security logs are retained in accordance with our hosting and security practices;

  • information required for legal, accounting or dispute-resolution purposes may be retained for the period required by applicable law.

We may delete information earlier when it is no longer necessary for the purposes described in this Policy.

10. Security

We use reasonable technical and organisational measures designed to protect information against unauthorised access, loss, alteration or disclosure. These measures include:

  • password-protected client dashboards;

  • user-level access restrictions;

  • server-side API requests;

  • encryption of stored Meta access tokens using WordPress security salts;

  • restricted administrative access;

  • noindex and nofollow directives for reporting pages;

  • routine software, hosting and security maintenance.

No internet-based system can be guaranteed to be completely secure.

11. Your rights

Subject to applicable law, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • request data portability where applicable;

  • withdraw consent where processing is based on consent;

  • lodge a complaint with a competent data protection authority.

Requests may be sent to office@netadvance.eu. We may request additional information to verify the identity and authority of the requester.

The competent supervisory authority in Bulgaria is:

Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: https://www.cpdp.bg/

12. Data deletion

Instructions for requesting deletion of data processed through POST REPORTS are available at:

https://netadvance.eu/post-reports-data-deletion/

Removing POST REPORTS data does not automatically delete source content or insights held by Facebook, Instagram or Meta. Requests concerning information controlled by Meta should also be submitted through the relevant Meta account and privacy tools.

13. Children

POST REPORTS is a business reporting service and is not directed to children. We do not knowingly use the application to collect personal information directly from children.

14. Changes to this Policy

We may update this Privacy Policy when the application, legal requirements or our processing practices change. The effective date at the top of this page identifies the latest version.

15. Contact

For questions about this Privacy Policy or the processing of information through POST REPORTS, contact:

NET ADVANCE EOOD
Email: office@netadvance.eu
Telephone: +359 898 585 877