Privacy Policy

This policy explains what personal data JEP GLOBAL LLC (“Neosocios”, “we”, “us”) processes, why, who we share it with, how long we keep it and how you can control it. It applies to:

• our website, neosocios.com;
• the Neosocios Platform at app.neosocios.com, the web app our clients and our team use to work on their marketing, including its connection to Facebook and Instagram;
• our short links on neosoc.io and on the domains our clients connect to the Platform.

Neosocios is a brand of JEP GLOBAL LLC. For any privacy question or request, write to info@neosocios.com.

1. Our role

• For our website, our sales conversations and the accounts of people who use the Platform, we decide how the data is used (we are the data controller).
• For the data a client business brings into the Platform, such as its connected Facebook and Instagram accounts and its advertising data, we process it on behalf of that business and only to provide the service it asked for. If you are a customer or follower of one of our clients, that business is responsible for your data, and we help it answer your requests.

2. The data we collect

When you contact us or talk to us

• Your name, email, phone, company and what you tell us about your business when you write to us or book a call.
• If you agree to it being recorded, the transcript of a sales or discovery call with our team, which we use to prepare a proposal for you.

When you use the Platform

Access is by invitation only. We do not offer public sign-up.

• Account data: your name, email, password (stored hashed by our authentication provider; we never see it), language, role, the organizations you belong to, who invited you and when you last signed in.
• Content you create: tasks, comments, ideas, links and other work your team saves in its workspace.
• Feedback you send us: what you write, plus the page you were on and your browser’s type, language and screen size, so we can reproduce the problem. Any password or access token included by mistake is removed before it is stored.
• Records of administrative actions (for example, who invited whom), kept for security.

When you connect Facebook or Instagram

When an administrator of your organization connects a Facebook account through Facebook Login, you choose which Pages and Instagram professional account to share, and Meta shows you the permissions we request. Our access is read-only: we can see, but not change anything. The Platform never publishes, edits, deletes or sends anything on Facebook or Instagram, and it never manages ads.

With that connection we receive and store:

• your Facebook user ID and name;
• the ID and name of the Facebook Page you selected;
• the ID, username, name, profile picture and follower count of the connected Instagram professional account;
• an access token (the permission Meta gives us to read the account), stored encrypted.

We read nothing else from your account. With that connection, the Platform helps your team research content: it reads public information of other Instagram professional accounts that your team chooses to study, through an official Meta feature called Business Discovery:

• their public profile: username, name, biography, website, profile picture and follower, following and post counts;
• their public Reels: link, caption, publication date, thumbnail and the number of views, likes and comments.

We do not read private messages, private profiles, or data of personal (non-professional) Instagram accounts.

When your business shares an ad account with us

If your business gives Neosocios access to an ad account through Meta’s Business Manager, we read its advertising data, also read-only:

• the names, IDs and status of campaigns, ad sets and ads;
• performance figures such as spend, impressions, clicks and results;
• the account’s activity log, which includes the names of the people who made changes.

When someone clicks one of our short links

We record the country, the type of device, the page the click came from and whether it looks like a bot. We do not store the IP address. We store only a one-way, shortened fingerprint of the browser’s user agent, used to tell repeated clicks apart.

Technical data

• IP address: our servers and network provider use it to deliver the service, protect it against abuse and limit excessive requests. We do not keep it in our databases.
• Error reports: when something fails, our error monitoring receives technical details such as the page, the browser and request headers. Passwords, tokens, cookies and form contents are removed first.

Cookies and similar technologies

• Website: today the website does not use analytics or advertising cookies. If we add them, we will update this policy and ask for your consent where the law requires it.

• Platform: it uses only what it needs to work:

  • your session and preferences (such as language) stored in your browser;
  • a security cookie that lasts 10 minutes while you connect Facebook.

  The Platform has no advertising or analytics trackers.

3. How we use the data

• To provide the Platform: show your team its workspace, content research and advertising reports, and keep each organization’s data separate from the others.
• To prepare proposals and deliver the services you hired.
• To communicate with you: invitations, password links, notifications about your work in the Platform and answers to your requests.
• To keep the service secure, prevent abuse and fix errors.
• To comply with our legal obligations.

We do not sell personal data, and we do not use data from Facebook or Instagram to build advertising profiles, to target ads or for any purpose other than providing the Platform to the business that connected it.

4. Artificial intelligence

Some Platform features use an AI provider to write text for our team:

• Advertising reports: the AI receives only aggregated performance figures (for example, spend, results and costs for a period). It does not receive the names of people, ads or accounts.
• Sales proposals: the AI receives the transcript of a sales call, when that call was recorded with consent.

Instagram data is not sent to AI providers. The AI provider processes the data only to return the result, under terms that do not allow it to use the data to train its models. We do not use your data to train AI models either.

5. Who we share data with

• Your organization: the members of your organization can see its workspace, according to the role and tools your administrator gives them.
• The Neosocios team: team members assigned to your account can see it to deliver our services.
• Service providers who help us run the website and the Platform. We share with them only what each service needs, under written agreements that require them to use the data only on our instructions. They are:
  • cloud hosting and database;
  • user authentication and email delivery;
  • network delivery and security;
  • error monitoring;
  • AI text generation;
  • meeting recording and transcription.
• Meta: your browser loads Instagram images and videos directly from Meta’s servers. Meta’s own Privacy Policy applies to what you do on Facebook and Instagram.
• Authorities: when the law requires it, or to protect the rights and safety of people or of Neosocios.
• Business transfers: if JEP GLOBAL LLC is merged or acquired, the data may be transferred under this policy and with the approvals the law and the platforms we use require.

6. Where the data is stored

Our servers and databases are in the United States. If you use our services from another country, such as Colombia, your data is transferred to and processed in the United States, with the protections described in this policy.

7. How long we keep it

• Facebook and Instagram connection: the access token and the connected account details are deleted immediately when an administrator disconnects the integration in the Platform. Connection tokens also expire on their own after about 60 days unless they are renewed.
• Content research: the public profiles and Reels your team saved stay in your workspace until your team removes them or you ask us to delete them.
• Advertising data: kept while your business keeps its ad account shared with Neosocios and uses the reports and, after that, until you ask us to delete it.
• Account and workspace data: kept while your organization uses the Platform and, after that, until you ask us to delete it.
• Contact and sales data: kept while we have a commercial relationship or until you ask us to delete it.
• Short-link click statistics: kept while the organization that owns the link uses the Platform, or until it asks us to delete them.

We delete data sooner when it is no longer needed for the purpose we collected it for. Deleted data disappears from our backups when they rotate. We keep something longer only if the law requires it, for example invoices.

8. Your rights and choices

Depending on where you live, for example under Colombia’s Law 1581 of 2012, the European GDPR or US state privacy laws, you can:

• access the personal data we have about you, and get a copy;
• correct it or update it;
• ask us to delete it;
• object to or restrict a use, or withdraw a consent you gave us;
• file a complaint with your data protection authority.

You can also:

• disconnect Facebook and Instagram at any time from the Platform’s integrations page;
• remove Neosocios from your Facebook settings, under Business Integrations, which stops our access immediately.

To exercise any right, write to info@neosocios.com. We may ask you to confirm your identity. We answer and complete your request within 15 business days. If the law requires us to keep part of the data, we tell you what and why.

The steps to delete data from Facebook and Instagram are on our data deletion page.

9. How we protect the data

• Encrypted connections (HTTPS) for the website and the Platform.
• Access tokens from connected Facebook accounts are encrypted before they are stored, and they are never shown in the app or written to our logs.
• Each organization’s data is separated at the database level: one client cannot see another client’s data.
• Access by invitation only, with roles that limit what each person can see and do.
• Records of administrative actions, and automatic removal of passwords and tokens from error reports.

No system is completely secure. If a security incident affects your personal data, we will notify you and the authorities as the law requires.

10. Children

Our website and the Platform are meant for businesses and professionals. They are not directed to people under 18, and we do not knowingly collect their data.

11. Changes to this policy

When we change this policy, we update the date at the top of this page. If the change is important, we also let Platform users know by email or inside the app before it takes effect.

12. Contact

JEP GLOBAL LLC (Neosocios) Email: info@neosocios.com

This policy is also available in Spanish.