workspaceClient login

Legal

Privacy Policy

Last updated 7 November 2026

This policy explains how Red Stripe Digital (“we”) handles personal data in the Red Stripe Digital client workspace at app.redstripedigital.com (the “workspace”). The workspace is used by our staff and invited clients to manage advertising, Facebook Pages and Instagram accounts for brands growing overseas. Our marketing website has its own policy at redstripedigital.com/en/privacy.

Who can use the workspace

Accounts are created by our administrators. There is no public sign-up. We store each user’s name, work email, role and a salted password hash, plus session records used to keep them signed in.

Data we receive from Meta

When a user connects their Facebook account with Facebook Login for Business, Meta shares data according to the permissions the user grants. Depending on those permissions we access:

  • The user’s app-scoped Facebook ID, name and the list of permissions granted.
  • Businesses, ad accounts, campaigns, ad sets, ads, creatives, audiences, pixels, catalogs and ad performance insights the user manages.
  • Facebook Pages and linked Instagram professional accounts the user manages: details, posts, media, insights, ratings and reviews.
  • Comments, mentions and messages sent to those Pages and Instagram accounts, including the names and profile pictures of the people who sent them.
  • Leads submitted through the Pages’ Instant Forms.

How we use it

  • To show and manage the connected assets on the user’s behalf: creating and editing ads, posts and catalogs, publishing to Instagram, replying to and moderating comments and messages, and retrieving leads.
  • To produce reports of ad, Page and Instagram performance, including a scheduled sync of ad insights.
  • To keep the service secure and to diagnose errors. We log which Meta API endpoints are called and whether they succeeded; the log does not contain message or comment content.

We do not sell Meta Platform data, use it for advertising profiles, or share it with data brokers. We do not use it for any purpose other than providing the workspace to the business that connected it.

Storage and security

Access tokens are kept on our servers only, never sent to the browser, and encrypted at rest with AES-256-GCM. Data is stored with our hosting providers (Vercel for the application and Neon for the database) and transmitted over HTTPS.

Retention and deletion

  • Comments, messages, posts and insights are read from Meta when a page is viewed and are not kept, except webhook events, synced ad insights and retrieved leads, which are kept while the connection exists.
  • Disconnecting Meta in Settings revokes the app’s access and deletes every token and asset record we hold for that user.
  • Removing the app from your Facebook settings, or sending a data deletion request through Facebook, deletes the same data automatically. See Data deletion.
  • Workspace accounts are deleted on request by an administrator.

Your rights and contact

You can ask to access, correct or delete your personal data. Contact us through redstripedigital.com/en/contact. Red Stripe Digital is based in mainland China with an office in Hong Kong.