Privacy Policy

KAILASA Publishing Studio (“the Service”, “we”, “us”), operated by Life Bliss FZCO, is a social-media publishing tool. It lets you connect your own accounts on social platforms — Facebook, Instagram, Threads, YouTube, Pinterest, TikTok, and others — and publish or schedule content to them from a single place. This policy explains what data we handle, why, and how you can remove it.

1. What we collect

• Account & identity data. When you sign up we store your name, email address, and organization membership. Passwords are stored only as a salted hash.
• Connected-platform data. When you connect a social account we store the access tokens the platform issues, plus the connected profile’s public identifiers (page/channel/profile id, display name, username, avatar). Tokens are held encrypted at rest.
• Content you create. The posts, captions, media, and schedules you compose in order to publish them to your connected accounts.
• Operational logs. Timestamps and status of publish attempts and token health checks, so we can show you what succeeded, retry what failed, and warn you before a token expires.

2. How we use it

We use your data solely to operate the Service: to authenticate you, to publish and schedule the content you ask us to, to report success or failure, and to keep your connections working. We do not sell your data, and we do not use it for advertising.

3. Cookies & similar technologies

We use one essential, first-party cookie to keep you signed in (a session identifier; it carries no readable data itself — see Section 8 for how session tokens are stored). It is strictly necessary for the Service to function and cannot be disabled without signing you out. We do not use advertising, tracking, or third-party cookies, and we do not place or read cookies on your device on behalf of any connected platform.

4. Google user data — Limited Use

This application uses YouTube API Services. Our use of information received from Google APIs (including YouTube Data API access obtained through Google OAuth) adheres to the Google API Services User Data Policy, including its Limited Use requirements. By using the Service’s YouTube features you also agree to the YouTube Terms of Service.

What we access. Your YouTube channel’s identity (channel ID, name, and avatar); the video content and metadata you publish or manage through the Service (titles, descriptions, thumbnails, and privacy status); comments on your videos; and channel and video statistics (subscriber and view counts).

How we use it, and who we share it with. We access this data only to provide and improve the publishing features you request; we do not transfer or use it for serving advertisements; we do not allow humans to read it except with your explicit consent, to comply with law, or as needed for security; we do not use it to train or improve any artificial intelligence or machine learning models, generalized or otherwise; we do not share, transfer, or disclose this data to any third party, other than the Google/YouTube APIs it originates from and the infrastructure providers that host the Service on our behalf under confidentiality obligations; and we do not use it for any purpose other than the publishing functionality you enabled.

Protection of sensitive data. The YouTube data we access under sensitive Google API scopes — publishing and managing your videos, moderating and posting comments, and editing your channel’s branding — is sensitive user data under Google’s API Services User Data Policy, and we protect it accordingly: it is encrypted in transit (TLS) between your device, our servers, and the YouTube API, and encrypted at rest on our infrastructure; access is restricted to the small number of authorized personnel who operate the Service and need it to provide the Service to you; it is never sold, shared with advertisers, or used to train or improve AI or machine learning models; and it is retained only while your YouTube connection is active, and deleted when you disconnect the account or delete your Service account (see Section 9).

Revoking access and deleting data. You can disconnect a YouTube channel at any time from Dashboard → Accounts in the Service — this immediately deletes its stored access token and every video, comment, and statistic we had mirrored for it. You can also revoke the Service’s access directly from your Google Account at any time, independent of our app, at myaccount.google.com/connections. You can request deletion of your entire Service account at any time — see Section 9.

5. Meta (Facebook, Instagram, Threads) data

This Service uses the Facebook Graph API and the Instagram Graph API. When you connect a Meta account we request only the permissions needed to publish on your behalf and to show the connection’s status. We store the Page/Instagram/Threads tokens and identifiers required to do so.

Revoking access and deleting data. You can disconnect a Facebook, Instagram, or Threads account at any time from Dashboard → Accounts in the Service — this immediately deletes its stored access token and every post, comment, and statistic we had mirrored for it. You can also revoke the Service’s access directly from Meta, independent of our app, at facebook.com/settings?tab=applications (Facebook, and any linked Instagram/Threads access granted through it), or directly on Instagram at instagram.com/accounts/manage_access. You can request deletion of your entire Service account at any time — see Section 9.

6. Pinterest data

When you connect a Pinterest account we request only the permissions needed to publish on your behalf and to report on what we published: reading your account so we can show which profile is connected, reading your boards so you can choose where a pin goes, creating pins, and reading analytics for your account and for the pins we created. We store the access and refresh tokens and the account identifier required to do so. We do not read your feed, your followers, or pins we did not create; we do not use Pinterest data for advertising, and we never sell it. You can revoke our access at any time from your Pinterest account settings, and you can request deletion here at any time.

7. TikTok data

This Service uses the TikTok Content Posting API. When you connect a TikTok account we request five permissions and use them only as follows: to identify which account is connected and show its name and avatar; to post the videos you compose, with the audience and interaction settings you choose; and to read your profile details, your engagement statistics, and the posts we published, so we can report how they performed. We store the access and refresh tokens and the account identifier required to do this.

Before you post we ask TikTok which options your account actually permits, and we offer only those. We do not request permission to upload drafts, and we do not read your messages, your feed, or videos we did not publish. We do not use TikTok data for advertising, and we never sell it.

Revoking access and deleting data. You can disconnect a TikTok account at any time from Dashboard → Accounts in the Service — this immediately deletes its stored tokens and everything we had mirrored for it. TikTok does not currently provide a direct web link for revoking third-party access, so to revoke it independent of our app, open the TikTok app and go to Profile → Settings and privacy → Security and login → Manage app permissions. You can request deletion of your entire Service account at any time — see Section 9.

8. Storage & security

We encrypt data both in transit and at rest. All traffic between your device, our servers, and the connected platforms’ APIs (including Google/YouTube, Meta, and others) is encrypted with TLS. At rest: access tokens are encrypted with envelope encryption; session and reset tokens are stored hashed; and the profile data, content, and metadata we retrieve from connected accounts — not just the tokens used to fetch them — are stored on encrypted infrastructure. Access to production data, including data obtained through connected accounts, is restricted to the operators of the Service who need it to provide the Service to you, and is never used to train or improve AI or machine learning models.

9. Retention & deletion

We keep your data for as long as your account is active. Disconnecting a social account (Dashboard → Accounts → Disconnect) is immediate and deletes that account’s stored tokens along with every post, comment, and statistic we had mirrored for it — nothing lingers behind. To delete your entire Service account and all associated data, follow the steps on our Data Deletion page or email us at developers@lifebliss.app. We honour verified deletion requests promptly.

10. Third parties

We share data only with the platforms you connect (to publish your content) and with infrastructure providers that host the Service on our behalf under confidentiality obligations. We do not share your data with advertisers or data brokers.

11. Changes

We may update this policy as the Service evolves. Material changes will be reflected by the “Last updated” date above.

12. Contact

This Service is operated by Life Bliss FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. For any privacy question or request, contact developers@lifebliss.app.