Home Product Socials Resources Pricing Book a demo →
Legal

Privacy Policy

Effective 14 August 2026 · Last updated 14 August 2026

This Privacy Policy explains how FIFTH CORP FOR COMPUTER SYSTEMS & COMMUNICATION EQUIPMENT SOFTWARE DESIGN ("FIFTH," "we") collects, uses, stores, shares and deletes personal data in connection with ZYR (the "Service," registered with Meta as "Fifth Social OS"). It covers data obtained through Meta (Facebook & Instagram) as well as data you provide directly.

Who uses ZYR. ZYR is a social-media management platform used by marketing agencies to plan, schedule, publish and analyse social content on behalf of their clients. An agency connects a client's Facebook Page and linked Instagram Business Account - with that client's authorisation - so ZYR can publish approved posts and display analytics for that account.

1. Data we collect through Meta

When you connect a Facebook Page and its linked Instagram Business Account using Facebook Login for Business, we process the following, strictly to provide the features you use:

Data Meta permission Why
Pages you manage; Page identity pages_show_list Identify which Page has a linked IG Business Account.
IG Business Account profile instagram_basic Confirm the connection and show the linked account.
Page engagement & post performance pages_read_engagement Populate the analytics dashboard.
Publishing to the linked IG account instagram_content_publish Publish the posts you create and approve.
Access tokens (all of the above) Perform the above on your behalf. Stored encrypted.

We request data only for accounts you connect, and only the permissions listed. We do not collect your Meta password.

2. Other data we collect

  • Account data (name, email, agency details).
  • Content you create in ZYR (captions, creative, schedules).
  • Usage & technical data (logs, device/browser) to operate and secure the Service.

3. How we use data

  • Provide ZYR's core features: scheduling, publishing approved posts, and analytics.
  • Publishing is performed server-side using the stored token, only for posts you created and approved. ZYR does not autonomously post content you have not approved.
  • Secure, maintain and improve the Service.

We do not sell personal data, do not use Meta data to build profiles for unrelated purposes, and do not use it for advertising outside the account it belongs to.

4. Lawful bases (GDPR)

Where GDPR applies: performance of contract (Art. 6(1)(b)); consent to connect a Meta account and grant the permissions above (Art. 6(1)(a)), withdrawable any time by disconnecting; and legitimate interests (Art. 6(1)(f)) to secure and improve the Service.

5. Storage & security

  • Tokens and connected-account data stored encrypted at rest and access-controlled.
  • Data scoped to the agency tenant that connected the account.
  • Administrative and technical safeguards appropriate to sensitivity.

6. Retention & deletion

We retain connected-account data and tokens only while the account is connected. Deletion begins when you disconnect the account, your ZYR account is closed, you submit a deletion request, or we receive a data-deletion callback from Meta. We complete deletion from active systems within 30 days; backup copies are purged on our rotation cycle. Request deletion any time at hello@zyrforce.com.

7. Sharing & sub-processors

We share data only with providers that help us run ZYR - cloud hosting and infrastructure (Amazon Web Services and Vercel) — under agreements limiting their use to providing services to us. We do not sell data or share it for third-party advertising.

8. Agencies & their clients

Where an agency connects a client's account, the agency (and its client) act as the controller of the connected-account data, and FIFTH acts as a processor for that data. FIFTH is the controller of the ZYR account and usage data in Section 2.

9. Your rights

Depending on your location (including under GDPR and CCPA/CPRA) you may access, correct, delete or restrict processing, and object or withdraw consent. Contact hello@zyrforce.com. We do not sell or share personal information as defined under the CCPA/CPRA.

10. International transfers

Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the Standard Contractual Clauses (and the UK Addendum where applicable).

11. Contact

FIFTH CORP FOR COMPUTER SYSTEMS & COMMUNICATION EQUIPMENT SOFTWARE DESIGN
Privacy: hello@zyrforce.com
1606 Court Tower, Business Bay, Dubai, United Arab Emirates