Privacy Policy

Dulmaa (app.dulmaa.com) is a marketing portal operated by Webhiine, a digital marketing agency in Ulaanbaatar, Mongolia (webhiine.com). Our marketing managers use it to prepare, approve and publish social media content and ads for the businesses we work for. This policy explains what data we process and why.

Who uses the portal

Business owners can sign up themselves on the sign-up page (with an email and password, Google or Facebook); each new account gets its own brand workspace. Webhiine's managers get their account by an invitation from Webhiine.

Data we collect

• Account data: name, email address and role of each user (Facebook sign-up gives us no email address — we keep the Facebook user id instead); login sessions.
• Business content: briefs, brand assets (logos, colours, fonts, music), notes, templates and the posts, images and videos created in the portal.
• Facebook and Instagram data (only when a business connects its Page): the Page and Instagram account identifiers and names, a Page access token, the Page's own posts (text, images, reactions counts) to avoid duplicate posts and to learn the brand's visual style, and ad account data (campaigns, budgets and results such as spend, clicks and messages) for the ads the business runs with us.

We do not collect data about the people who follow or message the Page, and we do not sell or rent any data.

How we use it

• To create, review, schedule and publish posts and videos on the business's own Page after the business approves them.
• To create, start, pause and report on ads for the business's own ad account when the business asks for it.
• To show the business its own results inside the portal.

Service providers

We use Supabase (database, file storage and login), Vercel (hosting of the portal), Hostinger (our processing server), Google Cloud Vertex AI (Gemini models that write and draw the content) and Resend (email). They process data only to run the portal. Access tokens are stored encrypted and are never shown in the portal.

Retention and deletion

We keep the data while we work with the business. A business can disconnect its Facebook Page at any time in the portal (Brand → Facebook & Instagram → Disconnect), which deletes the stored tokens. To delete all data, see our data deletion instructions or email us. Removing the app in Facebook (Settings → Business Integrations) also sends us a deletion request automatically.

Your rights

You can ask for a copy, a correction or the deletion of your data at any time.

Contact

Webhiine · Ulaanbaatar, Mongolia · support@dulmaa.com