Full0ption عربي

privacy policy

Privacy Policy

What we collect, why we collect it, who we share it with, and how you take back control of it at any time.

Last updated: 9 September 2026 · Effective: 9 September 2026

1 · Who we are

Full Option is a software company that builds and operates fopanel — a subscription platform used by businesses and retailers to manage their social platform accounts and their ad campaigns.

In this policy, "we" means Full Option, "the platform" means fopanel, and "you" means the subscribing business or the person who uses the platform or connects an account to it.

Data contact

Email: privacy@full0ption.com
WhatsApp: +20 109 785 1297
Website: full0ption.com

2 · Scope of this policy

This policy applies to:

  • Our website full0ption.com and its pages.
  • The fopanel platform and its dashboards.
  • Our integrations with the social platforms you connect your accounts to.

It does not apply to the social platforms themselves. Your relationship with them is governed by their own privacy policies, and we have listed those links in section 6.

3 · What we collect

3.1 Data you give us

  • Account details: company name, contact person's name, email address, phone or WhatsApp number.
  • Business details: brand name, the services you offer, booking number, visual identity (logo and colors).
  • Content: the text, images and video you create or upload inside the platform.
  • Your instructions: your notes on drafts, your approve and reject decisions, and the spend caps you set.

3.2 Data we receive from social platforms after you consent

When you connect an account, the platform in question gives us only what you agreed to on its own authorization screen — typically:

  • Access and refresh tokens (access token / refresh token) — stored encrypted.
  • Account ID, display name and profile picture.
  • A list of your public posts and their IDs — so you can pick the ones you want to promote.
  • Aggregate performance figures: views, engagement, reach, spend, results.
  • Public comments on your posts — if you enable comment management.
  • A list of the ad accounts you have granted us access to.

What we do not collect: we never ask for the password to any account and we will not accept one. We do not collect private messages, except within the WhatsApp Business integration that you explicitly enable to serve your own customers. We do not collect your follower lists or your followers' personal data. And we use no unofficial means of access — no browser emulation tools, no scraping.

3.3 Data collected automatically

  • Technical logs: IP address, browser type, request time, page requested — kept for security and fault diagnosis.
  • Cookies: we use the cookies required to run your session and keep you signed in. We do not use advertising tracking cookies on this site.

4 · How we use it

PurposeData used
Publishing the content you approved to your accountAccess token · account ID · content
Sending you drafts for approvalWhatsApp number · content
Creating and monitoring ad campaignsAccess token · ad account ID · spend caps
Stopping a campaign at your cap and notifying youSpend figures · WhatsApp number
Producing daily reportsAggregate performance figures
Managing comments on your postsPublic comments · access token
Technical support and fault diagnosisTechnical logs
Billing and subscription managementAccount details

What we never do with your data: sell or rent it to anyone; use it for third-party targeted advertising; train general-purpose AI models on it; build profiles of end users; or use it for any purpose not stated in this policy.

AI inside the platform

We use language models to write draft copy and suggest content ideas. Those drafts are never published automatically — they go through your approval. Your data is not used to train these models, and neither access tokens nor credentials are ever sent to them.

5 · Who we share it with

We share only what is necessary, and only with these categories:

  • Social platforms — we send them the content you approved and your campaign settings, because that is the core of the service.
  • Infrastructure providers — hosting, databases and file storage, under contracts that require them to protect the data and bar them from using it for their own purposes.
  • AI model providers — for drafting copy only, with no access tokens and no credentials.
  • Competent authorities — where there is an enforceable legal obligation.

If ownership of the company or its assets changes hands, the data transfers with it, and this commitment continues to bind whoever receives it. We will give you reasonable notice beforehand.

6 · Social platform data

When you connect an account, the platform in question becomes a party to the arrangement, and your relationship with it is governed by its own policies. Below are our commitments to each of them, and their official links.

TikTok

  • We use TikTok data only for the authorized purposes: publishing the content you approved, managing comments on your posts, reading performance figures for your account and posts, and authorizing your posts for advertising use at your request.
  • We do not move your content to another platform, and we do not build any creator discovery or ranking service out of it.
  • You can disconnect our app from your TikTok settings on your phone at any time.

TikTok Privacy Policy · TikTok Developer Terms of Service

Facebook, Instagram and WhatsApp · Meta

  • We use Meta data only to run the service you asked for, and in line with the Meta Platform Terms.
  • You can remove our app from your account settings on Facebook or Instagram, or from our data deletion page.

Meta Privacy Policy

YouTube & Google

The platform uses YouTube API Services. By using this part of the service, you agree to the YouTube Terms of Service.

We also refer you to the Google Privacy Policy to understand how Google handles your data.

Revoking our access from Google. In addition to our usual data deletion procedures described in section 7, you can revoke our platform's access to your data at any time from the Google security settings page: https://security.google.com/settings/security/permissions

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements (Limited Use).

Snapchat

We use Snapchat data solely to manage your ad campaigns. Snap Privacy Policy

X

We use X data to publish the content you approved and to read its performance figures. If content is deleted or modified on X, or if the account owner or X asks us to do so, we delete or modify it on our side as soon as possible and within 24 hours at most. X Privacy Policy

7 · Retention and deletion

DataRetention period
Access and refresh tokensUntil you revoke access or your subscription ends — then deleted immediately
Data received from platform APIsRefreshed or deleted on a regular cycle, and no more than 30 days from the last refresh
Content and publishing historyFor the life of the subscription, then 90 days during which you can retrieve it
Aggregate performance figuresUp to 24 months, for season-over-season comparison
Technical logs90 days
Billing recordsFor the period the law requires

Deletion timelines on request

  • When you request deletion: we act as quickly as possible, and within 7 calendar days at most.
  • When you revoke access: we delete the data tied to that account within 30 calendar days of the revocation.
  • When we cannot verify that your authorization still stands: we delete within 30 days.

The full steps and the request form are on the data deletion page.

8 · Revoking access

The access you grant us can be revoked whenever you want, in three ways, all of them open to you:

  1. From your dashboard with us — the "Disconnect account" button next to each connected account.
  2. From the platform's own settings — every platform lets you remove the apps connected to your account.
  3. By contacting us — at privacy@full0ption.com or on WhatsApp.

The moment you revoke, all publishing and all reading from that account stops. The links are on the data deletion page.

9 · Data security

  • Connections to the website and the platform run over HTTPS exclusively.
  • Access tokens are stored encrypted in the database, and are automatically scrubbed from every log.
  • Each subscriber's data is isolated from every other subscriber's at the database level itself.
  • Access is limited to the members of our team who need it to do their job.
  • Encrypted backups.

No system is completely immune. If a breach affects your data, we will notify you and the competent authorities as the law requires, without undue delay.

10 · Your rights

  • Access the data we hold about you.
  • Correction if any of it is inaccurate.
  • Deletion — see the data deletion page.
  • Portability — a copy of your data in a machine-readable format.
  • Objection to a particular processing activity, or restriction of it.
  • Withdrawal of consent at any time, with no retroactive effect on what happened before the withdrawal.

We respond to any request within 30 days, and to deletion requests within 7 days. We charge nothing for this.

11 · Children

Our services are aimed at businesses and are not offered to anyone under 18 years old. We do not knowingly collect children's data. If we learn that we have collected data from a minor, we delete it immediately — and if you believe that has happened, please contact us.

12 · Changes to this policy

We may amend this policy whenever we add a service or an obligation on us changes. The last updated date appears at the top of the page. If a change is material — such as broadening what we collect or who we share it with — we will notify you by email or WhatsApp at least 14 days before it takes effect.

13 · Contact us

For any question or request about your data — access, correction, deletion or a complaint — reach us by any of the following, and we will reply within three business days:

And if our answer does not satisfy you, you have the right to lodge a complaint with the competent supervisory authority in your country.