Privacy policy of the social media app

Who is responsible for your data

The Plano Base social media app belongs to Plano Base Arquitectos S.A.S., a company domiciled in Cali, Colombia, which is the data controller for the data described here.

• NIT (tax ID): 901603373-9.
• Address: Calle 18 # 61-29, Cali, Valle del Cauca, Colombia.
• Email: proyectos@planobase.co
• Phone: +57 301 426 4603

Requests, queries and complaints about these data are handled by the Projects Office, at proyectos@planobase.co.

Who uses the app

Today it is used only by studio staff with named access, to publish on the accounts and Pages of Plano Base. The app is not open to the public and is not offered to third parties. If it is ever opened to other people or companies, this policy will be updated before they can connect their accounts.

What data it receives from each platform

When an authorized person connects an account, the platform asks for their permission on its own screen and gives the app an access token. With it, the app reads only what it needs to know which account it is publishing to:

• Instagram: the ID and username of the professional account.
• Facebook: the ID and name of each Page the person manages and can create content on, and that Page's access token.
• Threads: the ID and username of the account.
• TikTok: the account ID (open_id), its display name and username and, before each post, the privacy options the account allows.
• LinkedIn: the ID and name of each company Page the person administers.
• X: the ID, name and username of the account.

For each post it also stores the text, the images or video, the date and time, the platform, the result (published or failed) and the ID or link the platform returns. For each person using the app it stores their studio email, to know who scheduled or approved each post.

The app does not read private messages, does not collect data about followers or other people, does not read insights and never receives the password of any account. If it ever asks for another permission, this policy will say so first.

What it uses them for

• Showing studio staff which accounts are connected.
• Publishing, at the scheduled time, the content the studio approved, on the chosen account and platform.
• Knowing whether each post went out, retrying if the platform failed and keeping its link.
• Renewing each account's token before it expires, so that scheduled posts are not lost.

Platform data are not used for advertising, are not sold, are not shared with third parties and are not used to train artificial intelligence models.

Where they are stored and who else handles them

Platform tokens are stored encrypted (256-bit AES-GCM) with a key known only to the server. These providers handle them on the studio's behalf, without using them for their own purposes:

• Cloudflare, Inc., processing in the United States and other countries: the app server, its database, image and video storage and the publishing queue.
• Vercel Inc. and Supabase Inc., processing in the United States: the site panel where studio staff schedule and review the calendar, and its sign-in.

Instagram, Facebook and Threads (Meta Platforms), TikTok, LinkedIn and X receive what the studio publishes because the studio instructs it. They are not processors of Plano Base: each handles it under its own policy.

Colombia's data protection authority, the Superintendencia de Industria y Comercio, lists the United States among the countries with an adequate level of personal data protection (Circular Externa 005 de 2017).

How long it keeps them

• Platform tokens: while the account stays connected. They stop working if the platform revokes them or if the app's access is removed from the platform, and they are deleted when you ask.
• Account data and post history: while they are needed to run the studio's calendar, and they are deleted when you ask.

How to ask for deletion

The full instructions are at planobase.co/en/app-de-redes/eliminar-datos. In short: remove the app's access from the platform's settings and write to proyectos@planobase.co with the subject "Delete my data from the social media app". We handle it within fifteen business days at most.

Your rights

As the data subject you have the rights in article 8 of Ley 1581 de 2012 (Colombia's data protection law): to access, update, correct and delete your data, to ask for proof of your consent, to know how they were used, to withdraw consent and to complain to the Superintendencia de Industria y Comercio. They are exercised as the "How to exercise them" section of the studio's general policy explains, with the same time limits.

Changes to this policy

If it changes, we will publish the new version here with its number and date. If the change affects the data the app receives from the platforms or what it uses them for, it is published before it applies.

Effective date

• This version takes effect on: 7 October 2026. Version 1.0.