Privacy Policy

XPress IL ("XPress", "the service") is a media-relations and PR management system operated by Maximedia-PR ("we", "us"). It is used by Maximedia-PR's team and users it authorizes to manage contacts, send email and WhatsApp campaigns, and publish and schedule posts on social networks. This policy explains what information is collected, how it is used and how it can be deleted.

1. Information we collect

• Users of the service: name, email address and password (stored as a one-way hash), and a log of actions taken in the service.
• Contacts: professional contact details entered or imported by the team — such as name, phone, email, organization and role — for PR work.
• Social media accounts (Facebook, Instagram, LinkedIn): when a user connects an account, we store the account or Page ID, name, profile picture and the access token issued by the network. Access tokens are stored encrypted. We never receive or store passwords for social media accounts.
• Post content: the text, links, images and videos users upload for publishing, scheduled times, and publishing results (such as a link to the published post).
• Messages and campaigns: email and WhatsApp campaign content, delivery status, and WhatsApp messages received from contacts.

2. How we use information

• To operate the service: managing contacts, sending campaigns, and publishing and scheduling posts on connected accounts — only when an authorized user requests it.
• To show history, status and results of campaigns and posts.
• For security, support and troubleshooting.

We do not sell data, do not use it for advertising, and do not use data received from social networks for any purpose other than the actions a user requested.

3. Sharing with third parties

Information is shared only with services needed to operate XPress, and only for the requested action:

• Meta (Facebook, Instagram, WhatsApp) and LinkedIn — post and message content a user chose to publish or send.
• SendGrid — sending email campaigns.
• Amazon Web Services (AWS) — hosting and database.

Use of data by the social networks is also subject to their own privacy policies.

4. Security

Access to the service requires a username and password, traffic is encrypted (HTTPS), and social media access tokens are stored encrypted. Files uploaded for posts are stored under random names.

5. Retention

Information is kept as long as it is needed for the service. Disconnecting a social media account immediately deletes its access token. Full deletion can be requested — see Data Deletion.

6. Your rights

You may ask to access, correct or delete your information by contacting us.

7. Contact

Maximedia-PR · maxi@maximedia-pr.co.il