Privacy Policy

GX Culture Media Co., Ltd.　Taiwan Business ID 62072247　Effective 2026-09-15

1. Scope

This policy describes how GX Culture Media Data Tool (Meta App ID 1055799074019255), an internal tool developed by GX Culture Media Co., Ltd. ("we"), collects, uses and retains data. The tool has no public sign-up and is not available to the general public; it is used only by our own employees.

2. What we collect and from where

The tool accesses only those Facebook Pages and Instagram professional accounts that a client has contracted us to operate and for which the client has appointed our staff as an administrator through Meta Business Suite. It does not and cannot access any account we have not been appointed to.

We collect: account profile and follower counts; the client's own posts, videos and stories; insights (reach, impressions, engagement, watch time, aggregated follower country and city distribution); comments left on the client's content and messages received by the client's account; and, where the client has separately granted access to their ad account, ad spend and delivery metrics.

Comments and messages may contain the name, username and message content of the person who wrote them. We treat these as third-party personal data and handle them under sections 4 and 5.

We do not collect passwords, financial account details or identity documents; we do not store the photo, video or audio attachments of messages (only whether an attachment was present); and we do not collect the client's personal browsing, search, like history or contact list.

3. How we use it

To produce the client's performance report and our internal dashboard; to let our community managers see new comments and messages promptly so they can reply during business hours; and to inform future content decisions.

We do not sell data, share it with third parties, publish it, or use it for advertising targeting.

On automated replies: we may reply to common enquiries with an automated message, limited to providing a download link, our official LINE account, or a standard description of a product or service. All other replies are written by a human. We do not use automated messages for marketing broadcasts.

4. Who can see it

Data is stored in our company Google Workspace shared drive and on the computer of the staff member who operates the pipeline (that machine requires a login password). It is rendered in an internal dashboard hosted on Cloudflare Pages, restricted by Cloudflare Access to accounts in our company Google Workspace domain (@gxcotw.com) — currently six employees. Each client receives only the report concerning their own accounts.

5. Retention and deletion

Performance data is retained for the duration of the engagement so that long-term trends remain visible. Within 90 days of an engagement ending we remove all of that client's data. The removal is carried out by a member of staff; when an account is marked as ended, our internal system raises a recurring reminder until the removal is completed, so that it is not overlooked. A client may request earlier deletion at any time — see Data Deletion Instructions.

6. Security

Access tokens are stored in owner-only local files and are never committed to source control. The internal dashboard requires Google authentication and is restricted to our company domain. Our webhook receiver verifies the signature of every incoming request and discards anything that does not match.

7. Contact

GX Culture Media Co., Ltd.
30F-2, No. 3, Ziqiang 3rd Road, Lingya District, Kaohsiung City, Taiwan
Email: jixing@gxcotw.com