AROBM app iconAROBMArkansas Online Business Management

Privacy Policy

Effective: August 16, 2026

Arkansas Online Business Management (AROBM) is a service operated by Rivets Software LLC, an Arkansas limited liability company (“Rivets Software,” “we”). This policy explains how we handle information when businesses connect accounts, manage content, communicate with prospective customers, or use the AROBM client portal at arobm.com.

Information we collect

We process account and business contact information, service settings, connected-account identifiers and authorization tokens, content drafts, publishing results, website and chat leads, appointment requests, support messages, and operational logs. Connected-provider passwords are never requested or stored by AROBM.

How information is used

Information is used to deliver requested services, authenticate connected platforms, publish approved content, respond to customer inquiries, provide reports, prevent abuse, and maintain security. We do not sell personal information.

For a connected Facebook Page, we read engagement information for posts — such as reactions, comments, and shares — and aggregated post and Page insights. We use this information only to show the business how its posts are performing in its AROBM reports.

Website measurement

AROBM uses first-party measurement to record page visits and important actions such as call, email, chat, booking, and form interactions. These records may include the visited page, referring page, campaign labels, a temporary session identifier, the action taken, and the time. The website does not store an IP address in its marketing analytics table and respects supported browser Do Not Track settings.

Connected platforms

When a user connects Google Business Profile, Search Console, Gmail, YouTube, Meta, Instagram, or TikTok, AROBM requests only the permissions needed for the selected service. For TikTok, Login Kit identifies the connected account with basic profile information. The Content Posting API acts only after the authorized user chooses content and selects either Direct Post or Send as Draft. Draft uploads require the user to open TikTok and complete the post from the inbox notification. Authorization tokens are encrypted at rest. Users can disconnect an account from the provider or request removal through AROBM.

When you connect a Facebook Page or Instagram account, we receive and store your Facebook user ID; the Page’s name, ID, category, and profile picture; a Page access token for that Page; and, if an Instagram professional account is linked to the Page, that account’s ID and username. We also store the posts we create for you and the results of publishing them.

Information we receive from Meta platforms is used only to provide AROBM services to the business that connected the account. We do not sell it, use it for advertising, or share it with other AROBM clients.

AI receptionist and content

Approved business training information, chat messages, and content instructions may be sent to Google Gemini to generate a response or draft. Visitors are instructed not to provide sensitive information. Contact details are saved as a lead only after the visitor gives permission to be contacted.

Email and SMS

Marketing email enrollment requires recorded permission and provides an unsubscribe option. Review follow-up text messages require recorded SMS consent and honor STOP requests. Delivery and response events are retained for compliance and service reporting.

Sharing and retention

Information is shared only with service providers needed to operate AROBM or when required by law. Data is retained while an account or client engagement is active and for a reasonable period afterward for security, legal, and operational purposes.

When you disconnect a Facebook Page or Instagram account, we delete its stored access token immediately. The Meta identifiers and publishing records for a disconnected account are deleted within 30 days of disconnection or the end of your subscription, whichever is later, except for records we must keep for billing, security, or legal compliance.

Your choices

You may request access, correction, deletion, or disconnection of your information. Platform permissions can also be revoked directly through the connected platform.

Deleting data received from Facebook and Instagram

If you connected a Facebook Page or Instagram account to AROBM, you can delete the data we received from Meta in any of these ways:

  1. In AROBM, open Settings, then Connected accounts, and choose Disconnect for the Page or Instagram account. Disconnecting immediately and permanently deletes the access tokens we stored for that account.
  2. In Facebook, go to Settings, then Apps and Websites, select AROBM, and choose Remove. Then email us at [email protected] with the subject “Meta data deletion” so we can delete the remaining records associated with your Page.
  3. Email [email protected] at any time and ask us to delete your Meta data.

We complete deletion of Meta platform data — stored tokens, the Page and Instagram identifiers we hold for your account, and associated publishing records we are not required to keep for billing, security, or legal compliance — within 30 days of a request, and we confirm by email when deletion is complete.

Contact

Privacy questions and data requests may be sent to [email protected].

Rivets Software LLC, 1847 Riggans Rd, Malvern, AR 72104