Effective date: July 20, 2026

Privacy Policy

Introduction

Herniel CoS (“Herniel CoS,” “we,” “us,” or “our”) is a service operated by ZIKLAG HOLDINGS, LLC under its Hapibit brand, available at herniel.hapibit.com. Herniel CoS lets authorized business users connect their Facebook Page and Instagram Business account, then publish organic Instagram content to that account — currently single-photo feed posts, with scheduling and additional formats such as reels and stories planned.

This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to the Herniel CoS website and application at the address above and to the related APIs we operate.

Information We Collect

We collect only the minimum information needed to connect your accounts and publish the content you ask us to publish:

• Account connection data from Meta (only with your permission): your Facebook user ID and basic public profile; the ID and name of the Facebook Pages you choose to connect; the ID and username of your Instagram Business account; and your Business Portfolio ID.
• Access tokensissued by Meta so that Herniel CoS can act on the accounts you connected. These are stored securely (see “Access Tokens and Security” below).
• Content you submit for publishing: media URLs and captions.
• Publishing logs: media URL, caption, publish status, resulting post ID, timestamps, and error logs.
• Support communications: if you contact us, we receive your email address and the contents of your message.

Herniel CoS never sees or stores your Facebook or Instagram password. Authentication happens on Meta’s own login screens.

How We Use Information

We use the information described above to:

• connect and maintain the link between your Facebook Page, your Instagram Business account, and Herniel CoS;
• publish the content you create;
• confirm the result of each publish and troubleshoot failed publishes;
• secure and operate the service and prevent abuse; and
• comply with applicable legal obligations.

We do not sell user data. We do not use user data for advertising targeting.

Meta / Facebook / Instagram Permissions

Herniel CoS requests only the Meta permissions it needs to work. You grant them when you connect your accounts, and you can review or revoke them at any time in your Facebook or Instagram settings.

• public_profile — identifies your Facebook account inside Herniel CoS.
• pages_show_list — lists the Facebook Pages you manage so you can choose which Page to connect.
• business_management — lets you connect Pages and Instagram accounts that belong to your Meta Business Portfolio.
• instagram_basic — reads the ID and username of the Instagram account linked to your connected Page.
• instagram_business_basic — the equivalent basic-profile permission, applicable if your Instagram professional account is connected directly through Instagram login rather than Facebook Login.
• instagram_content_publish — publishes the organic content you create to your connected Instagram professional account.

We access Meta data only as authorized by you, and only to provide account connection, content publishing, scheduling, and the operational logs that support those features. We do not use these permissions for any other purpose.

Access Tokens and Security

Access tokens are the credentials Meta issues so Herniel CoS can act on your connected accounts. We store them server-side, never expose them to your browser or to other users, and use them only to call Meta’s APIs for the features described in this policy. All communication with our service and with Meta’s APIs is encrypted in transit (HTTPS/TLS), and internal access to stored tokens is restricted.

If you disconnect your account or revoke Herniel CoS’s access in your Facebook settings, the associated tokens stop working and are deleted as described under “Data Retention.” No method of storage or transmission is completely secure, but we work to protect your information using appropriate technical and organizational measures.

Data Sharing

We do not sell your information, and we do not share it for advertising. We share information only:

• with Meta, necessarily, when we call its APIs on your instruction (for example, to publish a post you scheduled);
• with service providers that host our infrastructure and store data on our behalf, under obligations to protect it and use it only to provide services to us;
• when required by law, such as to comply with a legal process or to protect the rights, safety, and security of our users, our company, or the public; and
• as part of a business transfer, such as a merger or acquisition, in which case this policy continues to apply to your information.

Data Retention

We keep account connection data and access tokens only while your account remains connected to Herniel CoS. Publishing logs are kept for a limited operational period so you can review history and we can troubleshoot issues.

When you disconnect your accounts or request deletion, we delete the associated data within 30 days, unless a longer retention period is required for legal, security, or fraud-prevention reasons. Where data is retained for such a reason, it is kept only as long as necessary for that purpose.

User Data Deletion

You can have your data deleted in either of two ways:

• By email — send a request to support@hapibit.com with the subject line “Data Deletion Request.” See our Data Deletion page for exactly what to include.
• Through Meta— remove Herniel CoS from your Facebook settings (Settings & Privacy → Settings → Apps and Websites). Meta then sends us an automated data deletion request, and we delete your data and provide a confirmation code with a status URL you can check.

In both cases we delete your account connection data, access tokens, and publishing logs within 30 days, subject to the legal, security, and fraud-prevention exceptions described under “Data Retention.”

Children’s Privacy

Herniel CoS is a business tool intended for adults managing business accounts. It is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact support@hapibit.com and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the effective date at the top. If a change is material, we will provide additional notice, such as a notice on our website.

Contact Us

ZIKLAG HOLDINGS, LLC (Hapibit) operates Herniel CoS. For privacy questions or requests, contact us at support@hapibit.com.