Privacy Policy

Gravity Media Solutions — Tripoli, Libya · Last updated: July 2026

This policy explains how Gravity Media Solutions handles data when providing social-media management services to its business clients.

1. Data we access

When a client (a Page or business-account owner) engages us to manage their account and grants permission through Facebook Login, we access: the Page's name and its linked Instagram account, with their IDs; public performance metrics; the text of comments on the client's posts and the commenter's name; and messages people send to the client's Page or account on Messenger and Instagram. We never start a conversation, and we do not access any individual's personal messages, passwords or payment information.

2. How we use it

To publish the client's approved content on schedule; to show comments and messages to our team and reply on the client's behalf; and to report performance. Replies are written from the client's own information only. Prices and availability come from the price list or inventory the client provides, and a price is given only if the client allows prices. A staff member reviews every reply before it is sent, except where the client has agreed in writing to automatic replies to routine questions (location, opening hours, booking, delivery, thanks for a compliment, offers, and price and availability from the client's own inventory only), within daily limits and with a cancellation delay. Complaints and medical or legal questions always go to a person. Automated private messages say that they are automated.

We use data only to serve the account it was granted for. We never sell it or share it with third parties for marketing.

2a. Service providers and AI

We use Anthropic's Claude model to classify the topic of a comment or message and to suggest a reply. The model receives the text only, with the client's business information; it receives no names, IDs or profile data, and the text is not used to train models. We keep comment and message text for at most 90 days (30 days for messages to healthcare clients) and, for one year, a send log without names (our reply and when it was sent). A comment's text is deleted as soon as we learn it was removed on Facebook or Instagram, and in any case within 90 days.

3. Retention and deletion

We store metrics and access tokens on our secure servers for the duration of the service. A client may request deletion of their data and access token at any time, actioned within a reasonable period, and may revoke permission directly from their Facebook or Instagram settings.

4. Data protection

All data is transmitted over an encrypted connection (HTTPS). Access tokens are stored in protected, non-public files, accessible only to authorised staff.

5. Your rights

You may request access to, correction of, or deletion of your data, or withdraw consent. Contact: info@gravity.ly.

---

The Gravity OS staff app

This section covers Gravity OS, an internal tool for Gravity Media Solutions staff only. It is not available to the public or to clients. The sections above cover client social-media management, which is a separate matter.

Who can use it

The app creates no accounts and accepts no self-registration. Accounts are created internally for employees, and the app does nothing at all without a sign-in.

What it collects

• Your account: name, username, email, a profile photo if you upload one, and your role and permissions.
• Your work in the platform: tasks assigned to you, comments you write, documents you edit.
• An activity log: sign-in times and settings changes, for internal security and accountability.
• Notifications: if you turn them on, your device's push endpoint — an address issued by your own browser — is stored so alerts can reach you. It carries no phone number and no location.

The app does not access your location, contacts, camera, microphone or files. It shows no advertising and contains no third-party tracking or analytics.

Where it is stored

On Gravity's own servers, over an encrypted connection (HTTPS). Data is never sold and never shared with any third party for any purpose.

Retention and deletion

Staff data is kept for as long as the account exists. When employment ends the account is disabled and personal data deleted on request. You can turn notifications off from inside the app at any time, which deletes your device's push endpoint immediately.

Questions

To access, correct or delete your data: info@gravity.ly.