Privacy Policy — BenomCORE

This is a courtesy translation provided for convenience. The legally binding version of this document is the Turkish original.

Last updated: 24.07.2026

This policy explains how the BenomCORE application (the ERP and digital operations platform operated by Benom Yazılım) processes data relating to the social media accounts (Instagram, Facebook, LinkedIn) that users connect. By using the application, you accept this policy.

1. Data Controller

MELİH CAN TOKER (sole proprietorship) — BenomCORE / Benom Yazılım
Ateşbaz Veli Mah. Şehit Mehmet Akdemir Sk. No: 16, Meram / KONYA 42140, Türkiye · Tax ID: 8470202037
Email: destek@benomyazilim.com · Phone: 0850 309 40 53

2. What Data We Process

When you explicitly connect an Instagram/Facebook/LinkedIn account to our application, we access the following data through that platform's official API and only within the scope of the permissions you have granted:

Data	Purpose	Permission
Account ID, username, profile information	To identify the connected account and display it in the panel	`instagram_business_basic`
Publishing posts/media (image, video, text)	To publish/schedule content on your behalf	`instagram_business_content_publish`
Comments	To view and manage comments	`instagram_business_manage_comments`
Direct messages	To manage the inbox from a single panel	`instagram_business_manage_messages`
Access token	To authorize API calls on your behalf	—

We never see, store or transmit your Instagram/Facebook account password to our servers. The connection is established through Meta's official OAuth flow; only an encrypted access token is stored.

3. How We Use the Data

Only to carry out the actions you initiate (publishing posts, scheduling, managing comments/messages).
To refresh the token automatically in order to maintain the connected account's access period (as required by Meta rules).
We do not engage in advertising, profiling or the sale of data to third parties.

4. Storage and Security

Access tokens are stored in the database encrypted with AES-256-GCM.
All communication takes place over HTTPS/TLS.
Only authorized users of the relevant company can access the data (multi-tenant isolation).

5. Data Sharing

We share your data only with the APIs of the relevant platforms (Meta, LinkedIn) — in order to carry out the action you have requested. Apart from this, we do not share it with any third party.

6. Retention Period and Data Deletion

When you remove an account from the panel or revoke the application's access, the access token and the associated data for that account are deleted. In addition:

Removing the application: When you remove the application's access from your Instagram/Facebook settings, Meta automatically sends us a notification (/instagram/deauthorize) and your account is disconnected.
Data deletion request: You can request the deletion of all your data by writing to destek@benomyazilim.com or by submitting a data deletion request through Instagram. The request is processed automatically and you are provided with a confirmation code and a status link.

7. Meta Platform Compliance

This application operates in compliance with the Meta Platform Terms, the Developer Policies and the Instagram Platform Policy. Data obtained from Meta is used only for the purposes set out in this policy.

8. Changes

This policy may be updated from time to time; the current version is always published on this page.

9. Contact

For your questions: destek@benomyazilim.com · 0850 309 40 53