Privacy policy

Last updated: October 12, 2026

Who operates Publivaro

Publivaro is operated by MMADEV AGENCY SRL, registration number J2025041689001, tax identification number (CUI) 51952758. Registered address: 10 Troiței Street, Mărgineni village, 617270, Romania.

For privacy requests, contact confidentialitate@subliniat.ro and mention Publivaro. For general support, contact contact@subliniat.ro. These are the operator's contact addresses, also used for its Subliniat service.

Data we process

• Your email address, hashed password, workspace memberships and account timestamps.
• Draft text, selected publishing accounts, publication status, Facebook post identifiers and publication timestamps.
• When you connect Facebook: your Facebook user identifier, Page identifiers, names, categories, granted permissions and Page access tokens. Page tokens are encrypted in our database. Temporary authorization data expires after ten minutes and is removed by a recurring cleanup process.
• Essential session and security cookies, and technical logs such as IP addresses, request paths, timestamps and response status codes.
• Information you provide when contacting support.

How we use data

We use this information to provide accounts and workspaces, connect the Pages you authorize, save drafts, publish posts you submit, show publication results, provide support and protect the service. We process account and publishing data to perform our agreement with you, security and operational data for our legitimate interests in maintaining a secure service, and records where needed to comply with legal obligations. Where processing relies on consent, you may withdraw that consent.

Facebook access

Publivaro requests pages_show_list to display Pages you manage, pages_read_engagement to verify Page access, and pages_manage_posts to publish your content. Facebook's authorization flow also includes basic public profile access. You choose the Pages to authorize. We do not request your Facebook password.

When you publish, the post text is sent to Meta for the selected Page. Content published on a public Page is visible to its audience under Meta's rules. We do not sell Facebook platform data or use it for advertising or AI model training.

Who receives data

Our hosting and infrastructure providers process data needed to operate the service. Authorized operator staff may access data when necessary for support, security or maintenance. Meta receives information required for connecting Pages and publishing posts. We may disclose information where required by law. Meta operates internationally and may process information outside the European Economic Area under its own applicable transfer arrangements; see Meta's privacy policy.

Retention and removal

We retain account data, drafts and publishing records while needed to provide your account, or until you request deletion, subject to legal retention requirements. Disconnecting a Page removes its saved connection and access token from Publivaro. It does not delete your drafts, publishing history or posts already on Facebook. Proxy access logs rotate daily with seven rotated files retained; other operational logs use size-based limits.

To remove Publivaro's permissions in Facebook, remove the app from Facebook's Business integrations settings. For deletion of data held by Publivaro, follow our data deletion instructions. Posts on Facebook must be managed on Facebook.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, object to certain processing and withdraw consent where applicable. We may need proportionate information to verify your identity. You may complain to Romania's data protection authority, ANSPDCP, or your local supervisory authority.

Cookies

Publivaro uses essential cookies for sign-in sessions and protection against forged requests. This version does not use advertising or analytics cookies. Facebook may set its own cookies when you visit its authorization pages.

Changes

We update this policy when the service or its data practices change. The date above identifies the current version.