Visit Us In-Store: 2/322 Hobart Rd, Youngtown TAS
Hydro Oasis social media app privacy notice
Last updated: 26 October 2026
Hydro Oasis currently uses Social Media AI and the Hydro Oasis Marketing Manager integration to manage Hydro Oasis's Facebook Page, linked Instagram professional account and advertising. This notice explains how Hydro Oasis handles information through that integration. It supplements our store privacy policy, which covers our website, purchases and other services.
The integration is operated by authorised business users. Customers do not need to install the integration or provide an access token to contact or buy from Hydro Oasis.
Information handled
Depending on the permissions granted and the task being performed, the integration can access:
- Business-user, Page, Instagram and advertising account identifiers; account permissions; and connection credentials used by authorised operators.
- Posts, images, videos, captions, comments, replies, account names, usernames, interaction identifiers and timestamps available through our connected business accounts.
- Messages sent to our connected Facebook or Instagram business inboxes, including the message text and attachments made available by Meta, so that we can review and respond to enquiries.
- Campaigns, advertisements, targeting settings, budgets and performance information, such as reach, reactions, clicks and attributed conversions. Reports may be compared with website analytics or store information already held under our store privacy policy.
- Proposed changes, approvals, action records and API results needed to check what happened and recover from incomplete operations.
The integration's permissions do not give Hydro Oasis unrestricted access to someone's private Facebook or Instagram account. The information available depends on Meta's interfaces, the business assets connected and the permissions granted.
How we use this information
We use it to manage Hydro Oasis content and advertising, review marketing performance, moderate activity on our business content, respond to business enquiries and maintain records of authorised changes. A proposed action may be reviewed before it is applied. Information in a public post, comment or public reply is visible to the audience supported by that Meta feature.
Optional customer-list audience matching
If we separately enable customer-list audience matching, authorised customer identifiers may be prepared on a business computer, hashed and sent to Meta to match an advertising audience. This is a matching process, not a promise of anonymity. We do not treat this privacy notice as permission to upload an arbitrary contact list: the source and authority for a particular matching operation must be checked separately.
The planned matching workflow keeps its raw customer-list files, hashed matching files and private file-content records in machine-local storage outside the Dropbox workspace. Shared matching action records contain operational metadata, counts, file digests and status, rather than raw customer identifiers or individual matching hashes. Other social action journals may contain the message or comment evidence described elsewhere in this notice. No customer-list audience is stated to be active merely because this optional workflow is described here.
Systems and service providers
The integration runs on business computers. Connection tokens are kept in machine-local credential files outside the Dropbox project folder. Working reports and records of proposed or completed changes may be stored in our Dropbox-synchronised business workspace, including its backups and version history.
Authorised operators may use AI assistants, including OpenAI's Codex/ChatGPT and Anthropic's Claude, to help review information and prepare or carry out tasks. Relevant content can be processed by the assistant provider when an operator uses those services. Those providers' terms and account settings govern their processing. This notice does not promise that every AI account has the same storage, training or retention settings.
Meta processes information on Facebook and Instagram under its own terms and privacy information. Dropbox and other tools selected by Hydro Oasis may also process information needed to provide their services. Service providers may process information outside Australia. We do not claim that all copies are stored only in Australia.
Retention and disconnecting the app
Reports, approval records, action journals, any enabled customer-list matching files and backups are not currently erased by an automatic fixed retention timer. They may remain after an account connection is removed. We assess what needs to be retained for the task, business records, security and recovery, and consider requests to remove personal information.
Revoking a Meta app connection does not by itself erase existing reports, historical action records or information held independently by Meta or another service provider. It also does not automatically delete public posts or conversations from Facebook or Instagram.
Access, correction and deletion requests
You can ask us about information handled through this integration, request a correction or request deletion by emailing admin@hydrooasis.com.au. Please use the subject Social media app data request and include enough information to identify the relevant account or interaction, such as a profile/Page username and an approximate date. Do not send a password, access token or payment-card details.
We may need to verify that the request relates to you or that you are authorised to act for the relevant business. We will review the request and explain the action taken, or explain any information we need to retain and why. Deletion requests are reviewed manually; this integration does not provide an automated deletion callback or instant deletion facility.
See our social media app data deletion instructions for the request process. Information held by Meta independently may also need to be managed through your Facebook or Instagram settings.
Contact
Hydro Oasis: admin@hydrooasis.com.au. Our published general contact details are available on our contact information page.
We will update this notice when our relevant practices change.