Privacy Policy

Last updated: 2 November 2026

Who we are

This policy is published by What Bitcoin Taught Me ("WBTM", "we", "us"), the project behind this website, the Facebook Page "What Bitcoin Taught Me" and the Instagram account @wbtm.21. WBTM is the data controller for the processing described here.

Contact for anything privacy-related: privacy@what-bitcoin-taught-me.io

What this policy covers

WBTM runs a self-hosted social media tool, BrightBean Studio, at brightbean.wbtm.io. It connects through a Meta (Facebook) app to WBTM's own Facebook Page and Instagram account, and may later connect to the accounts of clients who ask us to manage their social media. We use it to schedule posts and to read and reply to comments and messages in one place.

This policy explains what data that tool handles when you interact with an account it is connected to — for example when you comment on a post or send a direct message.

What data we process

• Posts we publish, including text, images and video.
• Comments on those posts and direct messages sent to the connected accounts.
• The public profile information of people who comment or message: name, username, profile picture and account ID, as provided by Meta.
• Page and account insights: reach, engagement and follower statistics, which Meta provides in aggregate.
• Access tokens issued by Meta that let the tool act on the connected accounts. These are stored encrypted.

We only receive what Meta's platform makes available to the connected accounts. We do not collect passwords, payment details, or anything from your private profile.

Why we process it

• To publish and schedule posts on the connected accounts.
• To read and answer comments and direct messages.
• To understand how our content performs, using aggregate insights.

Under the EU General Data Protection Regulation (GDPR), our legal basis is our legitimate interest in running our social media accounts and replying to the people who contact us (Article 6(1)(f)). For client accounts, we act on the client's instructions as their processor.

Where it is stored

BrightBean Studio runs on hardware that WBTM owns and operates itself — not on a third-party cloud platform. Access is limited to WBTM. Access tokens are encrypted at rest.

How long we keep it

• Comments, messages and profile details are kept while the account they belong to is connected to the tool, so conversations keep their history.
• When an account is disconnected, its data and access tokens are deleted within 30 days.
• If you ask us to delete your data, we do so within 30 days (see below).

Sharing

We do not sell your data, and we do not share it with third parties for their own use. The data comes from Meta, and Meta's own privacy policy covers what Meta does with it. Our network provider carries traffic to and from our server but does not receive the data for its own purposes.

How to request deletion of your data

You can ask us to delete all data we hold about you at any time:

1. Email privacy@what-bitcoin-taught-me.io with the subject "Data deletion request".
2. Include your Facebook or Instagram name or username so we can find your comments and messages.
3. We confirm we've received your request within 7 days.
4. Within 30 days we delete your comments, messages and profile details from BrightBean Studio, and email you once it is done.

This deletes the copies held in our tool. Comments you posted publicly on Facebook or Instagram stay there until you remove them yourself, or until you ask us to remove them from our posts.

You can also remove our app's access at any time in your Facebook settings under Settings & privacy → Settings → Apps and websites.

Your rights (EU / GDPR)

If you are in the European Union or the European Economic Area, you have the right to:

• access the data we hold about you, and get a copy of it;
• correct data that is wrong;
• delete your data (see above);
• restrict or object to how we process it;
• receive your data in a portable format.

To use any of these rights, email privacy@what-bitcoin-taught-me.io. We reply within one month. You can also complain to your local data protection authority — in Luxembourg that is the Commission nationale pour la protection des données (CNPD).

This website

This website itself sets no cookies and uses no analytics. Icons and QR code tools are loaded from the public cdnjs network, which sees your IP address in order to deliver those files.

Changes

If we change this policy, we update it on this page and change the date at the top.