Privacy policy

This policy describes how Sus Hi, LLC, doing business as Sus Hi Eatstation, handles personal information in Social HQ. It covers data from Facebook Pages, Instagram, and Messenger. Contact funly@sushieatstation.com.

Last updated October 23, 2026.

Who we are

Social HQ is the social planner Sus Hi uses for its restaurants. The operator is Sus Hi, LLC (Sus Hi Eatstation). This policy applies to Social HQ and to the Meta accounts a Sus Hi user connects to it.

Data from Meta

When a Facebook Page, Instagram professional account, or Messenger inbox is connected, Social HQ can store:

• Page, Instagram, and Messenger access tokens, and when those tokens expire.
• The Page id, Instagram account id, app-scoped user id, and the name or handle of the connected account.
• Posts and captions Social HQ sends to Facebook Pages or Instagram, plus the network post id and permalink Meta returns.
• Insights, such as follower counts and impressions.
• Comments on those posts, when Social HQ retrieves them.
• Messenger messages, sender ids, and message times, when Social HQ retrieves a Page inbox.

Tokens are encrypted with AES-256-GCM before they are stored. They are not sent to the browser.

Why we use it

We use this data to draft, approve, schedule, and publish posts for Sus Hi, and to show account and post metrics to people who are allowed to see that brand. We use Messenger data only to operate the Page inbox for that brand. We do not use Meta data to advertise to people outside that work.

Retention

• Tokens and the connected-account record stay only while that Facebook, Instagram, or Messenger connection is active.
• We delete them when the connection is removed, when Meta sends a valid data-deletion callback, or when you email funly@sushieatstation.com.
• Insights, comments, and messages for that connection are deleted with it. We do not keep them after the Meta account is removed.
• Drafts a Sus Hi user wrote in the planner stay until that team deletes them. Delivery details that exist only for the removed Meta account are deleted with the request.
• We keep a deletion receipt: a confirmation code, the time, how many records were removed, and a hash of the Meta user id. We do not keep the raw Meta user id in that receipt. The receipt exists so the status page can answer a later check.

Deletion

You can ask us to delete the Meta data listed above. The steps are on the data deletion page. A valid request removes the stored tokens, connected account, post delivery details, insights, comments, and messages for that person. Disconnecting YouTube or TikTok, or emailing us, removes those tokens as well.

YouTube and other Google data

When a YouTube channel is connected, Social HQ can store the channel id, channel name, video titles, public statistics, and the tokens used to upload a video that channel's owner asked us to publish. Google sign-in, when it is turned on, provides the email address and name Google confirms.

We use that information only to show a brand its own YouTube activity and to upload videos or Shorts the brand asks Social HQ to publish. We do not use Google user data to serve ads, and we do not sell it. We do not allow humans to read it except when you ask for support, when we need to investigate a security or abuse issue, or when the law requires it. We do not transfer it except to provide or improve these user-facing features, for security, to comply with the law, or as part of a merger with notice to you.

Social HQ's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

TikTok

When a TikTok account is connected, Social HQ can store the access token, the account's open id and username, video statistics, and the privacy and interaction settings TikTok returns at the moment you publish. We use them to show that account's analytics and to publish a video you asked to post, with the privacy level you selected. We do not sell TikTok data.

We do not sell data

Sus Hi, LLC does not sell personal information. Social HQ does not sell Facebook, Instagram, Messenger, YouTube, or TikTok data. We do not share it with data brokers, and we do not share it for cross-context behavioral advertising.

Who else receives it

Meta receives content you ask Social HQ to publish, because publishing uses Meta's APIs. Our host and our file storage hold the data needed to run Social HQ. People with a role on that brand inside Social HQ can see the brand's posts and metrics. We do not give Meta data to other businesses.

Security

Access to Social HQ is limited to signed-in users and is checked per brand. Session cookies are httpOnly. A deletion callback is accepted only when its signed request matches the Meta app secret.

Contact

Email funly@sushieatstation.com for a copy of this policy, a correction, or a deletion request. Sus Hi, LLC (Sus Hi Eatstation) is the operator of Social HQ.