ZeolaiLog in

Privacy Policy

Last updated: September 21, 2026

This Privacy Policy explains how SMMfarm ("we", "us") collects, uses and protects information when you use Zeolai (the "Service"), a tool for planning and automatically publishing content to Instagram professional accounts, TikTok accounts and YouTube channels through the official Instagram API provided by Meta Platforms, Inc., the TikTok Login Kit and Content Posting API provided by TikTok, and the YouTube API Services provided by Google LLC.

1. Information we collect

Account information

  • Email address, name (optional) and a securely hashed password.
  • Your time zone, used to display the content calendar.

Information from Instagram (via Meta)

When you connect an Instagram account using Instagram Login, and only with your explicit permission, we receive:

  • Your Instagram professional account ID, username, name, account type and profile picture URL (instagram_business_basic).
  • An access token that allows the Service to publish content you schedule (instagram_business_content_publish).
  • IDs and permalinks of media the Service publishes on your behalf.

We never receive or store your Instagram password.

Information from TikTok

When you connect a TikTok account using Login with TikTok, and only with your explicit permission, we receive:

  • Your TikTok open ID, display name, username and avatar (user.info.basic).
  • Access and refresh tokens that allow the Service to publish the videos you schedule, and your current posting options (allowed privacy levels, whether comments/duets/stitches are enabled, maximum video length) (video.publish).
  • Publish IDs, status and post IDs of content the Service publishes on your behalf.

We never receive or store your TikTok password.

Information from Google (Sign in with Google)

If you choose “Continue with Google”, we receive your Google account ID, email address, name and profile picture (openid, email, profile) to create and sign in to your Zeolai account.

Information from YouTube (YouTube API Services)

When you connect a YouTube channel, and only with your explicit permission, we receive:

  • Your channel ID, title, handle and thumbnail (youtube.readonly) to show which channel is connected.
  • Access and refresh tokens that allow the Service to upload the videos and Shorts you schedule, with the title, description, tags, category, visibility and audience settings you choose (youtube.upload).
  • IDs and links of videos the Service uploads on your behalf.

Zeolai uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

Limited Use: Zeolai's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not use it to train AI models.

Content you upload

  • Images, videos, captions and scheduling times you create in the Service.

Technical data

  • A session cookie required to keep you logged in. We do not use advertising or tracking cookies.
  • Standard server logs (IP address, browser user agent, timestamps) kept for security and debugging.

2. How we use information

  • To publish posts, carousels, reels and stories to your Instagram account at the times you choose.
  • To publish videos to your TikTok account at the times you choose, with the privacy and interaction settings you select.
  • To upload videos and Shorts to your YouTube channel at the times you choose, and to let you sign in with Google.
  • To display your connected accounts, content calendar and publishing status.
  • To refresh access tokens so scheduled publishing keeps working.
  • To provide support, secure the Service and comply with legal obligations.

We do not sell your data, use it for advertising, or share it with data brokers. Data obtained from Instagram and TikTok is used only to provide the features you requested, in accordance with the Meta Platform Terms and the TikTok Developer Terms of Service.

3. Sharing

We share data only with:

  • Meta Platforms (Instagram) — the media and captions you schedule are sent to Instagram when published.
  • TikTok — the videos, captions and post settings you schedule are sent to TikTok when published.
  • Google (YouTube) — the videos, titles, descriptions and settings you schedule are sent to YouTube when published.
  • Infrastructure providers (hosting and database) who process data on our behalf under confidentiality obligations.
  • Authorities, when required by law.

4. Storage and security

Access tokens are encrypted at rest using AES-256-GCM. Passwords are hashed with bcrypt. All traffic is served over HTTPS. Access to production systems is restricted.

5. Retention

  • Account and content data is kept while your account is active.
  • When you disconnect an Instagram, TikTok or YouTube account, its access tokens and scheduled posts are deleted immediately, and TikTok and Google tokens are revoked.
  • When you delete your account, all associated data is deleted within 30 days (usually immediately).
  • Content already published to Instagram, TikTok or YouTube remains there and is governed by that platform's policies.

6. Your rights

Depending on where you live (for example under the GDPR or CCPA) you may have the right to access, correct, export or delete your personal data, and to object to or restrict processing. You can delete your data at any time — see User Data Deletion — or contact us at michaellytvyn.master@gmail.com.

You can also revoke Zeolai's access at any time from Instagram (Settings → Website permissions → Apps and websites), from TikTok (Settings and privacy → Security and permissions → Apps and services permissions) and from your Google account at myaccount.google.com/permissions.

7. Children

The Service is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

8. International transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

9. Changes

We may update this policy. Material changes will be announced in the Service or by email before they take effect.

10. Contact

SMMfarm — michaellytvyn.master@gmail.com