Privacy policy
Last updated: 7 October 2026 · Français
This page describes the data we process to provide our service, why we process it, and the rights you have. It is written to be read, not to be worked around.
Who is responsible
Nooplo is a trading name of Marostone FZ-LLC, registered with the Ras Al Khaimah Economic Zone Authority (licences no. 47032789 and 17008813), CWEP7223 Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Contact: hello@nooplo.com.
For the data of people who comment on our clients' posts, the client business is the controller: we process that data on its behalf, according to its choices (see below).
The data we process
If you ask for a free calendar
- What you write to us: your name, your email address, your business, its website and its social media accounts.
- What those accounts and that website show publicly: we read them to prepare a calendar that looks like you.
If you are a client
- Your name or your company's name, and your contact details: email address, phone number, postal address, website.
- The answers in your brand notebook: your business, your positioning, your tone, your goals, the publishing rhythm you want — for your company and, if you entrust them to us, for the personal profiles of its managers.
- The photographs, videos, logos and documents you send us.
- Your requests, written or dictated. When you dictate, your voice is transcribed as you speak: we keep the text, not the recording.
- The access to your social media accounts that you grant us, in order to publish on them (see below).
- If you write to us on Telegram, your conversation identifier.
For payment
- Your card is entered with our payment provider: we never see or store its number. We keep the billing name, the amount, the date and the invoice.
- If you are a business: your VAT number, where applicable.
What the service produces
- Your calendars, and the texts, visuals, videos, stories and documents prepared for you.
- The log of your comments: what we read, answered or hid, and what is waiting for your approval.
- The history of your edit requests and of your posts.
Cookies and trackers
- This website uses no cookies, no audience measurement and no advertising trackers. To show prices in your currency, it asks our host Cloudflare for the country you connect from; we do not record it. Its fonts are served by Google Fonts.
- The app sets a single cookie, needed to keep you signed in. It also remembers, in your browser, a few display preferences and your consent to notifications. None of this is used for advertising.
Why we process it
- To provide the service you entrust to us: prepare your posts, show them to you, correct them according to your feedback and publish them on your accounts.
- To reply on your behalf to comments left under your posts, according to the choices you make in your space.
- To send the document of your keyword to the people who ask for it. It is online at an address that search engines do not list, and that anyone with the link can open.
- To answer your free calendar request, and contact you about it.
- To invoice you and keep our accounts.
- To secure access to your space.
We do not sell, rent or use any data for advertising purposes.
Data we receive from Facebook, Instagram and LinkedIn
When you connect your Facebook Page, your Instagram professional account or your LinkedIn Page or profile in the Nooplo app, you give Nooplo (Marostone FZ-LLC) access through the official login of each network: Facebook Login for Business (Meta) and LinkedIn's authorisation screen. We never see or store your passwords.
What we receive
- an access token for each connected account;
- the identifier, name and picture of the Pages, Instagram accounts and LinkedIn Pages or profile you choose to connect;
- the identifiers and links of the posts we publish for you;
- statistics about your accounts and about those posts, such as reach, views, impressions, followers and the number of reactions, comments and shares.
- the comments left under those posts: their text, their date, their link and, when the network provides them, the public username and identifier of their author (see below).
We do not read your private conversations. On Instagram, we only send the private replies described below, to people who commented on your posts; to check that you gave us this permission, our service queries Instagram and keeps nothing from its answer. We collect nothing about the people who follow you or who react to your posts without commenting.
What we use it for
Only to publish the posts you have approved in the Nooplo app, to check that they are online, to show you your statistics, to prepare your next calendars, and to answer comments according to your choices: public replies, private replies on Instagram, unwanted advertising comments hidden. We never sell this data, never share it with other clients, never use it for advertising and never use it to train artificial intelligence models.
How long we keep it
Access tokens are kept while the account is connected. Statistics are kept for up to 12 months. All data received from these networks is deleted within 10 days when you disconnect the account, when your subscription ends, or when you ask us to delete it, except comments: see below. For LinkedIn data, we also apply LinkedIn's data storage requirements.
How to disconnect
In the Nooplo app, or directly from the network:
- Facebook and Instagram: Facebook › Settings & privacy › Settings › Security and login › Business Integrations › remove Nooplo (for a business portfolio: Business Settings › Integrations › Connected apps);
- LinkedIn: Me › Settings & Privacy › Data privacy › Other applications › Permitted services › Remove.
How to ask for deletion: see our data deletion page or write to hello@nooplo.com.
Use of Google services
Our service uses Google APIs, in particular Google Drive, to store and read the photographs you entrust to us and the visuals we produce for you.
Nooplo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
In practice: we only access the folders needed for your service, we do not use this data to train models, and we do not pass it on to anyone outside the providers listed below.
Who this data is shared with
We work with providers, each for a specific task:
- hosting of our services, file storage and email, including Google;
- writing tools, including to read comments and prepare our replies, visual and video creation tools, and transcription tools;
- organisation of your calendar and the technical workflow of the service;
- publishing on your accounts, reading comments and sending our replies, and then the social networks themselves, under their own rules;
- reading public posts and ads, to prepare a calendar and follow your competitors;
- card payment and invoicing;
- instant messaging, if you choose that channel to write to us.
Some of these tools rely on artificial intelligence. We use them under their business plans, whose terms forbid reusing your data to train their models.
These providers only access what they need, and may not use your data for their own purposes. Several host their services outside the United Arab Emirates, notably in the European Union and the United States; these transfers are governed by their contractual commitments, including the European Commission's standard contractual clauses where they apply. The named list of our providers is available on request.
People who comment
Our clients entrust us with replying to their comments. If you write under a post by one of our clients, this is what we do with your data.
Who decides
The client business is the controller of this data: it chooses, in its space, what we do. We process it on its behalf, according to its choices, and for nothing else: never for another client, never for advertising. Our providers (see above) only access it for these tasks.
What we receive
- Under the posts we publish for it: the text of your comment, its date, its link and, when the network provides them, your public username and its identifier. We do not read your profile, your followers or your messages.
What we do with it
- We read your comment to understand what you are saying (thanks, a question, a price request, a complaint…) and answer it on behalf of the business. Depending on what the business has chosen, the reply goes out directly or waits for its approval; a sensitive subject is always passed on to the business, with no reply from us.
- On Instagram, we write to you in a private message only if you asked a question that calls for a private exchange, or if you wrote the word requested to receive a document. The message that sends you the document ends with the mention “Sent automatically, at your request.” The rest of the conversation is with the business: we do not read your answers.
- We hide unwanted advertising comments, and insults if the business has chosen so.
- We show the business the comments that are waiting for its answer, with your username, and we prepare for it the list of questions that come up often, with a few short examples from which we remove usernames, links, addresses and numbers.
On what basis
Answering a comment left under its own posts falls under the business's legitimate interest in answering the people who write to it. The private message and the document answer your own request.
How long we keep it
Your username, its identifier, the text of your comment, its link, our reply and our private message are erased after ninety days, or earlier if the business clears its log. We then keep only the technical identifier of the comment and what we did with it, so that we never answer it twice. The examples of frequent questions cover the last thirty days and are rebuilt every day.
Your rights
You can ask the business concerned, or us at hello@nooplo.com, to access this data, correct it, erase it or object to its processing. If you write to us, we pass your request on to the business and help it answer you. You can also delete your comment yourself, on the network.
How long we keep it
- A free calendar request with no follow-up: twelve months, then deletion.
- Your account, your notebook and your content: as long as your account exists, including during a suspension and after the subscription ends, so that the work can resume if you come back. They are deleted three years after your last activity, or earlier if you ask.
- Data received from Facebook, Instagram and LinkedIn: see above — deleted within 10 days of disconnection, end of subscription or request; statistics kept for 12 months at most.
- Comments and our replies: the personal data they contain is erased after ninety days, or earlier if you clear your log (see above).
- Your dictations: the recording is never kept.
- Invoices and accounting records: for the period required by law.
Your rights
You can ask us to access your data, correct it, delete it, restrict its use, object to its processing, or receive a usable copy of it. Just write to hello@nooplo.com: we answer within thirty days.
These rights are granted to you by the UAE federal law on personal data protection (Decree-Law No. 45 of 2021). If you live in the European Union, they are also guaranteed by the General Data Protection Regulation, and you may contact the supervisory authority of your country.
If you commented on a post by one of our clients, see above.
Security
Your space opens with a one-time code sent to your email address: no password to remember, or to have stolen. Access to your data is personal and limited to the people who need it. Each client's files are kept in a space of their own, separate from other clients'. Exchanges with our services are encrypted.
Changes
We may update this policy. The date at the top of the page shows the latest version. If a change is significant, we tell you directly.