ContentKiln

Privacy Policy

Last updated:

This Privacy Policy explains how ContentKiln handles data. ContentKiln is an internal content publishing tool and API client operated by Trembita Digital LLC (“we”, “us”). It publishes content to social media accounts owned by Trembita Digital LLC and reads data about that content. It is not a public service and has no sign-up.

Operator and contact

ContentKiln is operated by Trembita Digital LLC. For any question about this policy or about your data, email hello@contentkiln.app.

Data we access

ContentKiln connects only to accounts owned by Trembita Digital LLC on TikTok, Instagram, Facebook and YouTube. Through the platforms’ official APIs, and only with the permissions granted by the account owner, it accesses:

  • OAuth access and refresh tokens issued by each platform, so the tool can act for the connected account.
  • Basic account profile information, such as the account or channel ID, name, username and profile picture.
  • The account’s own posts and videos, including their captions, titles, descriptions and publishing status.
  • Metrics for the account and its posts, such as views, likes, shares, comment counts and follower counts.
  • Comments on the account’s own posts, including the commenter’s public display name and the text of the comment.

We do not access private messages, contacts or data about accounts that are not owned by Trembita Digital LLC, other than the public comments left on our own posts.

How we use data

We use this data only to:

  • Authenticate the connected accounts and keep them connected.
  • Publish posts that a member of our staff has reviewed and approved.
  • Confirm that a post was published and show its status.
  • Measure how our own content performs, so we can decide what to create next.
  • Read and respond to comments on our own posts.

We do not use the data for advertising, profiling of individuals or any purpose unrelated to managing our own accounts.

Storage and security

Data is stored on a server operated by Trembita Digital LLC. OAuth tokens are encrypted at rest or kept in files readable only by the service’s owner account. Access to the server is limited to authorized staff of Trembita Digital LLC.

Retention and deletion

  • OAuth tokens are kept while an account is connected and are deleted when the account is disconnected or access is revoked.
  • Posts, metrics and comments are kept only as long as we need them to manage and evaluate our own content, and are deleted when no longer needed.
  • You can ask us to delete data about you at any time; we complete deletion requests within 30 days. See the data deletion page.

No sale or sharing

We do not sell, rent or share data obtained through ContentKiln with third parties. Data is sent only back to the platform it came from, to perform the actions described above, or disclosed where the law requires it.

YouTube

Stored authorized YouTube API data is refreshed or deleted within 30 days.

ContentKiln uses YouTube API Services. By using the YouTube features of ContentKiln, you agree to be bound by the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy.

ContentKiln uses YouTube API Services to upload videos to, and read data about, YouTube channels owned by Trembita Digital LLC: channel details, the channel’s own videos, their statistics and their comments. This data is used, stored and deleted as described in this policy.

You can revoke ContentKiln’s access to a Google account at any time on the Google security settings page: https://security.google.com/settings/security/permissions. After access is revoked we delete the stored tokens for that account.

TikTok

Data received from TikTok APIs (through Login Kit and the Content Posting API) is used only to publish content to, and read the content and metrics of, the TikTok accounts owned by Trembita Digital LLC that are connected to ContentKiln. It is not used for any other purpose or shared with anyone.

Meta (Instagram and Facebook)

Data received from Meta APIs (Instagram API with Instagram Login and Facebook Pages) is used only to publish content to, and read the content, metrics and comments of, the Instagram accounts and Facebook Pages owned by Trembita Digital LLC. To request deletion of your data or to remove the app from your account, follow the instructions on our data deletion page.

This website

This website does not use tracking cookies or analytics. Our hosting provider may process technical data, such as IP addresses, to deliver the site.

Changes to this policy

We may update this policy. The date at the top of this page shows when it was last changed.