# Privacy Policy

Last updated: 8 October 2026

Marsjön respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how information is collected, used and stored when you use Marsjön's websites, services and CMS functionality, including integrations with third-party services such as Facebook and Instagram.

1. About Marsjön

Marsjön provides website, CMS and digital services for businesses and organizations.

The CMS may allow customers to connect external services such as Facebook and Instagram in order to manage and publish content directly from the CMS.

For questions regarding this Privacy Policy, please contact:

Marsjön
Website: https://marsjon.se
Email: hej@marsjon.se

2. Information we collect

Depending on how you use our services, we may process information such as:

• Name
• Email address
• Account information
• Organization or company information
• Technical information such as IP address and browser information
• Login and authentication information
• Information required to connect third-party services
• Facebook Page information
• Instagram Business or Creator account information
• Social media account identifiers
• Access tokens provided by Meta
• Content you choose to create, schedule or publish through the CMS

We only request information and permissions that are necessary to provide the functionality you choose to use.

3. Facebook and Instagram integration

Marsjön CMS may allow users to connect Facebook Pages and Instagram Business or Creator accounts through Meta's APIs.

The connection is always initiated by the customer. A customer must actively choose to connect their Facebook Page or Instagram account to Marsjön CMS and approve the permissions requested by Meta.

Marsjön does not connect to, access or publish to a customer's Facebook or Instagram account without the customer's authorization.

The customer remains in control of their connected social media accounts and decides what content is created, scheduled or published.

Marsjön CMS acts as a publishing and content management tool. Information received through Meta's APIs is used solely to provide functionality requested by the customer and is not used by Marsjön for independent advertising, profiling, marketing or other unrelated purposes.

When you connect a Facebook or Instagram account, Marsjön may receive information made available through Meta's APIs and the permissions you approve.

This may include:

• Facebook Page ID and Page name
• Instagram account ID and account name
• Profile information related to connected business accounts
• Access tokens
• Permissions granted to the application
• Content required for publishing posts
• Information about content published through Marsjön CMS

Marsjön uses this information only to provide features requested by the user.

For example, this may include allowing a customer to:

• Create social media posts
• Upload images or other supported media
• Publish posts to Facebook
• Publish posts to Instagram
• Schedule content for publication
• Manage connected social media accounts
• View the status of content published through the CMS

Marsjön does not independently choose what content is published. Publication is initiated or configured by an authorized user of the customer's account.

4. How we use information

Information may be used to:

• Provide and operate Marsjön CMS
• Authenticate users
• Connect third-party services
• Publish content requested by the user
• Maintain connected integrations
• Provide customer support
• Improve the security and reliability of the service
• Prevent unauthorized access or misuse
• Fulfil legal and regulatory obligations

We do not sell personal information.

We do not sell Facebook or Instagram user data.

5. Access tokens and authentication

When you connect Facebook or Instagram, Meta may provide Marsjön with an access token.

Access tokens are used to communicate securely with Meta's APIs and provide the functionality requested by the user.

Access tokens are treated as confidential information and are stored using appropriate technical security measures.

Users may disconnect their Facebook or Instagram integration at any time.

When an integration is disconnected, Marsjön will no longer use the associated access token to access the connected Meta account.

6. Sharing of information

Marsjön may share information with service providers when required to operate the service.

Examples may include:

• Microsoft Azure for application hosting and data storage
• Meta Platforms, Inc. for Facebook and Instagram integrations
• Email or communication providers
• Monitoring, security and backup providers

Information is only shared where necessary to provide the relevant service.

We do not sell personal information to third parties.

7. Hosting and data storage

Marsjön's systems are primarily hosted using Microsoft Azure.

Where possible, services and databases are hosted within the European Union.

Appropriate technical and organizational security measures are used to protect customer information against unauthorized access, loss, alteration or disclosure.

8. Data retention

Personal information is retained only for as long as necessary to provide the service, meet contractual obligations or fulfil legal requirements.

Information related to connected Facebook or Instagram accounts is retained only while necessary to maintain the integration or provide the requested functionality.

Users may disconnect integrations at any time.

9. Deleting your data

You may request deletion of personal information associated with your Marsjön account.

If you have connected Facebook or Instagram to Marsjön CMS, you may also request removal of information associated with the integration.

To request deletion, contact:

Email: hej@marsjon.se

Please include enough information for us to identify the relevant account.

You may also disconnect Marsjön from your Facebook or Instagram account through the relevant Meta account settings.

Once a valid deletion request has been processed, associated personal information will be deleted unless retention is required by law.

10. Your rights under GDPR

If the General Data Protection Regulation (GDPR) applies to you, you may have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of your information
• Restrict certain processing
• Object to certain processing
• Request transfer of your information
• Withdraw consent where processing is based on consent

You also have the right to lodge a complaint with the relevant data protection authority.

In Sweden, the supervisory authority is Integritetsskyddsmyndigheten (IMY).

11. Third-party services

Marsjön CMS integrates with services operated by third parties.

Your use of Facebook and Instagram is also governed by Meta's own terms, policies and privacy practices.

Marsjön does not control how third-party platforms independently process information.

12. Security

Marsjön uses reasonable technical and organizational measures designed to protect information.

These measures may include:

• Encrypted communication using HTTPS
• Access control
• Authentication and authorization
• Secure storage of credentials and tokens
• Backups
• Security updates
• Monitoring of systems and services

13. Changes to this Privacy Policy

We may update this Privacy Policy when our services, integrations or legal requirements change.

The latest version will always be published on this page.

14. Contact

For questions regarding privacy or personal information, contact:

Marsjön
Website: https://marsjon.se
Email: hej@marsjon.se