Privacy policy

Effective 18 August 2026 · Last updated 18 August 2026

Stealth Installations Limited (“SIL”, “we”, “us”) operates CMS Admin (CMS-Marketing), a staff-only marketing tool used to draft, approve, and publish posts to the SIL Facebook Page and to work with product briefs. This policy explains what we process, why, and how you can ask us to delete it. It is written to meet Meta’s Privacy Policy expectations and section 4 of the Meta Platform Terms.

Who this app is for

This is not a public consumer app. Only people we create an account for (Super Admin, Admin, Editor, Viewer) may sign in. Members of the public do not create accounts here. Facebook visitors see posts on the SIL Page, not this tool.

What data we process

Staff accounts

Username, display name, role, and a hashed password
Login session tokens while you are signed in
The menus your role is allowed to open (set in Access)

Marketing work you create

Product briefs, campaign notes, Agent chat, and Studio media
Social draft copy, images, videos, schedule times, and approval history
Audit events (who approved or published, and when)

Meta / Facebook Platform Data

When a Super Admin or Admin connects the SIL Page and publishes, we process Platform Data only as needed to operate that Page:

Page ID, Page name, and Page access token
Meta App ID and App secret for the CMS - Marketing app (token exchange)
Post identifiers and permalinks returned after a successful publish
Read-only connection checks (token validity, days remaining, can-post)

We do not use Facebook Login for the public. We do not read your friends list, personal timeline, or other people’s Pages. We do not sell, license, or buy Platform Data. We do not use Platform Data for ads targeting, eligibility decisions, or surveillance.

xAI

If you use Agent, Studio, or dictation, the prompt, attachments, and generated text or media are sent to xAI (Grok) to provide that feature. xAI is a service provider acting on our instruction.

Technical logs

The server may record IP address, time, and URL of requests for security and debugging. We do not run advertising cookies on this app.

How we process it and why

Sign-in and Access — to authenticate staff and limit menus.
Drafting and approval — to prepare SIL marketing content.
Publishing to Facebook — to post approved content to the SIL Page via the Graph API, using a Page token. The Grok Agent cannot publish.
Support and security — to keep the tool running and investigate misuse.

Processing is on this development VM (New Zealand) in an encrypted database that is not committed to Git. Tokens and passwords are not stored in source control.

Who we share data with

Meta Platforms — only the Page token and the post content a human has Approved (or Publish live) when the live-publish switch is on.
xAI — prompts and files you submit in Agent, Studio, or dictation.
The law — if we are legally required to disclose.

We do not share Platform Data with other businesses for their own purposes. We do not operate this app as a tech provider for other companies’ Pages.

How to request deletion

Anyone who can access this app — and any person whose data we hold — may ask us to modify or delete their data. Email support@sil.kiwi.nz or call 04 232 9060. Say what you want deleted (account, chat, drafts, or Facebook connection).

We will delete or de-identify the requested data as soon as reasonably possible, unless New Zealand law requires us to keep it. If you ask us to disconnect Facebook, we delete the stored Page token from this app. Posts already on the SIL Page stay on Facebook until a Page admin removes them there.

Staff Super Admins can also disable an account under Access.

Retention

We keep staff accounts and marketing records while the account or campaign is active. We keep Facebook tokens only while the Page stays connected. We delete session tokens on sign-out or expiry.

Children

This app is not directed at children. We do not knowingly collect personal information from anyone under 16. It is a workplace tool for SIL staff.

Security

Passwords are stored as PBKDF2 hashes. Tenant data is encrypted at rest. Page tokens are treated as secrets. Report a security issue to support@sil.kiwi.nz.

Contact

Stealth Installations Limited (SIL)
Wellington, New Zealand
support@sil.kiwi.nz · 04 232 9060
https://www.sil.kiwi.nz

This policy does not override the Meta Platform Terms. If you use Facebook features in this app you also agree to Meta’s terms.