Privacy Policy

1. Who we are

UAB IT LIFE, Lithuania (EU), operates content.is and the content.is Planner at app.content.is (the “Service”). Contact: admin@content.is.

2. What we collect

• Account: name and e-mail address from Google sign-in; for customer accounts the workspace members you invite.
• Brands: brand name, website, time zone, campaign tags.
• Posts and media you create or import: texts, links, images, videos, schedules, per-network settings.
• Connected accounts: for each social account you connect through the network’s official login — the account id and name, the OAuth access token (and refresh token where the network issues one), its scopes and expiry.
• Statistics the networks report for your own accounts and posts (followers, views, reach, likes, comments, shares, saves) and your own website visit and order counts that you choose to feed in (for example from your payment provider’s API with a read-only key you create).
• Technical logs: request logs without query parameters, cookies or tokens; an audit log of actions in your workspace (who connected, uploaded, deleted what, and when).

3. How we use it

To publish the posts you schedule to the accounts you connected, to show you the results, to keep the Service secure and to answer your requests. We do not sell data, do not use it for advertising and do not use it to train AI models.

4. Networks we connect to (official APIs only)

Meta (Facebook Pages, Instagram), Threads, Google (YouTube), LinkedIn, Pinterest, TikTok. Each network processes your data under its own terms when we publish or read on your behalf. You can revoke our access in each network’s settings at any time; we also delete the stored token when you disconnect.

5. Google and YouTube

content.is Planner’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use YouTube API Services; by connecting a YouTube channel you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy. You can revoke access through Google security settings. YouTube data stored by the Service is refreshed or deleted at least every 30 days.

6. Meta and Threads

Facebook, Instagram and Threads data is accessed through Meta’s Graph API and Threads API with the permissions you grant. If you remove the app in Facebook, Instagram or Threads settings, Meta sends us a data deletion request; we delete the connections, posts’ results and statistics tied to that account and give you a confirmation code with a status page at app.content.is/deletion.

7. Storage and security

Servers in the European Union. Access tokens are encrypted at rest with keys kept outside the application. Only the owner of a workspace and the people they invite can see its data. Request logs never contain tokens, authorisation codes or cookies.

8. Retention

Posts, media and connections: as long as your workspace exists. Network statistics: refreshed while a connection is active, deleted with the connection, YouTube data at the latest after 30 days without refresh. Audit log and deletion records: 12 months. Backups: 14 days.

9. Content.is Monitor — monitoring of public Facebook Pages

UAB IT LIFE (Lithuania) operates Content.is Monitor, a private tool that reads the public posts of selected business Facebook Pages through Meta’s API and shows a weekly business monitoring dashboard to its client.

Data: for each public Page post — publication time, text, link, and the public numbers of reactions, comments and shares. We do not collect comment text, the identities of people who react or comment, user profiles, or any non-public content.

Purpose: weekly analysis and display of what the monitored businesses publish and how much engagement it receives, for the client’s authorized users only.

Storage: our own server in the European Union. The client’s authorized users see the data in a sign-in protected dashboard.

OpenAI: when an authorized user asks the dashboard assistant a question, OpenAI, L.L.C. (USA) processes the dashboard content, including these posts, on our behalf. OpenAI does not use API data to train its models by default and keeps abuse-monitoring logs for up to 30 days. OpenAI processes data in the United States and in the other countries named in its sub-processor list.

Telegram: a weekly summary with short excerpts of the post text (up to 70 characters) and the counts is delivered to the operator’s own Telegram chat. Telegram Messenger Inc. processes messages as an independent controller under its own privacy policy: for users in the EEA it stores data in the Netherlands and may share it with its group companies in the British Virgin Islands and the United Arab Emirates. Delivered messages stay in that chat until deleted.

No other use: we do not sell the data, use it for advertising, or use it to train AI models.

Retention: data stored on our server is deleted automatically 12 months after collection, or earlier on request. This does not cover OpenAI’s logs (up to 30 days, see above) or messages already delivered through Telegram.

Requests: a Page owner may ask for its Page to be excluded and its data deleted by writing to admin@content.is. Requests from public authorities are checked for legality, challenged where unlawful, answered with the minimum data necessary and documented.

10. Your rights

Access, correction, export, deletion (self-service: delete a workspace in Settings or write to admin@content.is; status page app.content.is/deletion), objection and complaint to the State Data Protection Inspectorate of Lithuania. Requests from public authorities are checked for legality and documented.

11. Cookies and analytics

A session cookie for sign-in and a short-lived cookie that protects the network connection flow. On content.is we use Google Analytics 4 only after you accept it in the cookie banner (consent is remembered in your browser; you can change it under “Cookies” in the footer). With your consent Google LLC processes usage data (pages viewed, approximate location, device) on our behalf under Google’s terms; IP addresses are shortened. Without consent nothing is sent to Google. No advertising cookies. The planner at app.content.is uses no analytics.

12. Changes

We announce material changes in the Service and by e-mail.