Privacy Policy – Ray Matthews Marketing

Ray Matthews Marketing (the “Application”) is a private publishing tool operated by Shorebreak Dynamics LLC (“we,” “us,” or “our”). We use it to share the photography of the late Ray Matthews, shown at raymatthews.com, by publishing his photographs and their captions to the Ray Matthews Photography Facebook Page and Instagram professional account through the Meta Graph API.

The Application is for our internal use only. It is not offered to the public, it does not use Facebook Login, and it does not ask anyone else to connect a Facebook or Instagram account.

This policy covers only the Application. It does not describe the separate raymatthews.com website, such as the website’s optional email form for print-availability notices or the third-party scripts and fonts the website loads.

The Application handles the following information:

• Account identifiers. The Facebook Page ID and Instagram professional account ID of the Ray Matthews Photography Page and Instagram account that we manage.
• Access tokens. A Meta access token issued to us for those accounts. When publishing or reading post data, the Application exchanges it for a Page access token, which is held only in the memory of the running server process and is not written to the Application’s database.
• Photographs and captions. Ray Matthews’ photographs, titles, descriptions, and post captions, including resized copies prepared to meet Facebook and Instagram image requirements.
• Publishing metadata. For each post: the platform (Facebook or Instagram), the publish time, and the post or media ID returned by Meta.
• Post content and engagement insights. When an authorized user opens the dashboard’s insights or recent-posts views, the Application retrieves recent posts from the managed Page and Instagram account (post text, image links, permalinks, and timestamps) along with aggregate counts such as views, reach, reactions or likes, number of comments, shares, and saves.
• Dashboard sign-in information. The email address and sign-in credentials of each authorized administrator, managed by our hosting provider’s sign-in service.
• Operational logs. Server logs of Meta API requests and responses (with access tokens redacted), captions, post IDs, and error messages, used for troubleshooting.

The Application does not request or store personal profile information, friend or follower lists, private messages, or the text or authors of comments. Engagement figures are aggregate counts provided by Meta and do not identify the people who viewed or interacted with a post.

We use this information only to manage the Ray Matthews Photography Facebook Page and Instagram account, specifically to:

• publish authorized photographs and captions to the Page and Instagram account;
• keep a record of drafts and published posts so photographs are not reposted unintentionally;
• diagnose and fix publishing errors; and
• review how published posts perform to guide future posts.

We do not sell information obtained from Meta, and we do not use it for advertising targeting or to build profiles of individuals.

We share information only as described below:

• Meta. Photographs and captions are sent to Meta so they can be published on Facebook and Instagram. Once published, that content is handled under Meta’s own terms and policies.
• Hosting provider. The Application runs on Amazon Web Services (AWS), which provides its servers, database, file storage, sign-in service, and content delivery.
• AI service providers. To help select photographs and draft captions, the Application sends Ray Matthews’ photographs and descriptive text to Anthropic, OpenAI, and Google. Access tokens, account identifiers, and engagement insights retrieved from Meta are not sent to these providers.
• Legal requirements. We may disclose information if required by law.

• The Application is hosted on Amazon Web Services in the United States.
• Dashboard access is limited to administrator accounts that we create. Public sign-up is disabled, and the Application’s data and publishing functions require an authenticated sign-in.
• The Meta access token is kept in server-side configuration. It is not sent to web browsers, and it is redacted from server logs.
• The dashboard is served only over HTTPS, and all requests to the Meta Graph API use HTTPS.
• The AWS database and file storage services used by the Application encrypt stored data by default.

No method of transmission or storage is completely secure, but we take reasonable steps to protect the information the Application handles.

• Post records (photograph reference, caption, status, and publishing metadata) are kept as a publishing history so photographs are not reposted, until they are deleted or the Application is retired.
• Resized photograph copies prepared for Facebook and Instagram are kept in file storage until they are deleted.
• Engagement insights are retrieved from Meta when viewed and are not stored in the Application’s database. We may occasionally save summaries for our own performance analysis.
• Page access tokens exist only in memory for the life of a server process. Our Meta access token is kept until it is revoked or replaced.
• Operational logs do not currently have an automatic expiration period and are kept until they are deleted.

If we remove the Application’s access in Meta’s business settings, the Application can no longer retrieve or publish information on Facebook or Instagram.

Because the Application works only with the Ray Matthews Photography Page and Instagram account that we manage, it generally does not hold personal information about other people. If you believe it holds information about you, you may ask what is held, ask for a correction, or ask for it to be deleted. You may also have additional rights under the laws where you live.

See the Data Deletion Instructions for how to make a request. Information that Meta holds about you is managed through your Facebook and Instagram account settings.

Questions or requests about this policy can be sent to Shorebreak Dynamics LLC at raymatthews.photog@gmail.com.

We may update this policy when the Application or our data practices change. The “Last Updated” date at the top of this page shows when it was last revised.