Privacy policy

Data controller: Kazi Digital MB (brand Boostery), providing the App for the Lrytas newsroom.

Privacy contact: kris@boostery.io

This policy applies when you use the App in a browser, including email/password sign-in, article processing, social post generation, and optional Meta (Facebook / Instagram) connection and publishing.

The App is for authorized editorial users. It is not intended for children under 16.

We may process:

• Account data: the email and password you use to sign in to the App. App login is our own email/password flow — it is not Facebook Login.
• Session data: authentication cookies used to keep you signed in.
• Content data: article URLs, titles, body text, metadata, and images you submit or that we extract to generate posts.
• Generated content: social posts, headlines, captions, and related editing settings.
• Brand settings: template, color, and other visual configuration.
• Meta / Facebook Login data (optional): if you choose Connect with Facebook, we receive a short-lived Facebook user access token from the Facebook Login JavaScript SDK. We then request Page tokens and store the connected Facebook Page ID, Page name, Page access token, and linked Instagram professional account ID and username so we can publish on your behalf. We do not request or store Facebook email, friends, gender, birthday, or other personal profile fields. public_profile is used only to complete the Facebook Login session.
• Technical data: IP address, browser type, device information, server logs, and error diagnostics.

• authenticate users and provide access to the App;
• extract article content and generate social posts;
• apply brand and template settings;
• connect Facebook Pages and linked Instagram professional accounts via Facebook Login, then publish or schedule organic posts to those accounts when you ask us to;
• keep the App secure, stable, and debuggable;
• meet legal obligations.

• Contract: providing the App to you or your organization;
• Legitimate interest: security, abuse prevention, and service improvement;
• Consent: when you voluntarily connect a Meta account with Facebook Login;
• Legal obligation: when we must retain or disclose data.

We use authentication cookies (Supabase Auth) required for secure sign-in. The App cannot work without them.

Brand settings, generation history, and Meta connection data are stored in our database and isolated by company (tenant).

We use trusted processors that handle data under their own policies:

• Vercel, Inc. — hosting. Vercel privacy policy
• Supabase — authentication and database. Supabase privacy policy
• OpenAI — article analysis and post generation. OpenAI privacy policy
• Meta Platforms (Facebook / Instagram) — Facebook Login, Page/Instagram connection, and publishing. Meta privacy policy
• Google Fonts — font loading. Google privacy policy

We do not sell personal data. Data is shared with third parties only as needed to operate the App.

• Session cookie: up to 7 days or until you log out.
• Meta Page tokens: until you disconnect Facebook in the App or the token expires.
• Server logs: a limited period needed for security and troubleshooting.

We use HTTPS, secure session cookies (HttpOnly, SameSite, Secure in production), and access control. No transmission or storage system is perfectly secure.

Some processors (for example Vercel, OpenAI, Meta, Google) may process data outside the EEA. Where required we rely on appropriate safeguards such as Standard Contractual Clauses.

Under GDPR you may request access, correction, deletion, restriction, objection, and portability, and you may withdraw Facebook Login consent by disconnecting Meta in the App or by writing to us. You may also complain to your local data protection authority.

Requests: kris@boostery.io. We respond within 30 days unless the law allows longer.

The App uses AI to draft social posts. A person always reviews and publishes. We do not make automated decisions with legal or similarly significant effects.

We may update this policy. Material changes will be shown in the App or through another appropriate channel.

Privacy questions: kris@boostery.io