Privacy Policy

Last updated: March 31, 2026

1. Introduction

contentzavod ("we", "our", "the Service") is a social media automation platform that allows users to schedule and publish content to Instagram. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. Data We Collect

Account and identity data

Telegram ID, Google account ID, or Yandex account ID — used solely to authenticate you and create your account.
Workspace name and timezone — set by you in account settings.
Instagram account data

Instagram user ID and username — obtained via the Instagram API when you connect an account.
Instagram access token — required to publish content on your behalf. Tokens are encrypted using AES-256-GCM before storage and are never exposed in API responses.
Content data

Video files you upload — stored temporarily on our servers while your post job is pending or processing. Files are deleted after publishing or upon your request.
Post captions, scheduling times, and publishing preferences — stored to fulfill your publishing requests.
Usage data

Post job statuses and error messages — retained to allow you to monitor and retry failed posts.
Request logs — retained for up to 30 days for debugging and security purposes.
3. How We Use Your Data

We use your data exclusively to:

Authenticate you and maintain your session
Connect to your Instagram account and publish content on your behalf
Notify you of publishing results, token expiry, and errors
Provide analytics on your publishing activity within the Service
We do not sell, rent, or share your data with third parties for advertising or marketing purposes.

4. Instagram API Data

This Service uses the Instagram Basic Display API and Content Publishing API. By connecting your Instagram account you authorize us to:

Read your Instagram user ID and username
Publish Reels to your Instagram account on your behalf
Access tokens are stored encrypted. You can disconnect your Instagram account at any time by deleting it in the Accounts section, which revokes our ability to publish on your behalf.

We comply with the Instagram Platform Policy and the Meta Platform Terms.

5. Data Retention

Data Retention
Instagram access tokens Until you delete the connected account
Uploaded video files Deleted after publishing or within 2 hours if unused
Post job records Indefinitely (you may delete via the API)
Request logs 30 days
Account data Until you delete your account
6. Data Security

Instagram access tokens are encrypted at rest using AES-256-GCM.
All API communication uses HTTPS (TLS 1.2+).
Database access is restricted to internal network only.
We do not log or store access tokens in plaintext at any point.
7. Your Rights

You may at any time:

Access your data via GET /v1/users/me and related API endpoints
Update your profile via PUT /v1/users/me
Disconnect an Instagram account via DELETE /v1/accounts/:id
Delete uploaded media via DELETE /v1/media/:id
Request full account deletion by contacting us at the address below
8. Third-Party Services

The Service interacts with:

Meta / Instagram — for account authorization and content publishing
Google — for optional login via Google OAuth
Yandex — for optional login via Yandex OAuth
Each third-party service is governed by its own privacy policy.

9. Children's Privacy

This Service is not directed at children under 13. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this policy. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related requests or questions:

contentzavod
Email: [Banchukovdmitrii@gmail.com]
Website: https://contentzavod.pro