Privacy Policy

1.Introduction

iishka (the "App", "we", "us") is operated by NARD LLC (ООО «НАРД», OGRN 1226100001786, INN 6154162034), a company registered in the Russian Federation (the "Operator").

iishka is a web application for publishing short vertical videos and posts and viewing analytics for Instagram, YouTube and TikTok accounts that are connected by their owners or by people the owners have authorized. The App works only through the platforms' official APIs: you sign in on the platform's own authorization page and decide what to allow.

This policy applies to the App at https://kiwiclip.ru/studio and to related pages on kiwiclip.ru.

2.Information We Access

We access only the data needed for the features you use, and only after you authorize the App on the platform.

Instagram (Meta Platform)

• Profile: username, name, biography, website, profile picture, and follower, following and media counts.
• Your media (Reels, posts, carousels and stories) and their metadata: captions, timestamps, links and media URLs.
• Insights for your account and for each media item, such as reach, views, likes, comments, saves and shares.
• Comments and @mentions on your media, so you can read, reply to, hide or delete them.
• Instagram Direct messages sent to your professional account, so you can read and reply to them.
• Public data of other professional (Business or Creator) accounts available through Business Discovery: biography, website, follower count and public media. We use it for research and to verify account ownership with a one-time code placed in a bio.
• Results of hashtag search: public media for a hashtag you search for.

Permissions requested through Instagram Login: instagram_business_basic, instagram_business_content_publish, instagram_business_manage_comments, instagram_business_manage_insights, instagram_business_manage_messages.

Permissions requested through Facebook Login: instagram_basic, instagram_manage_insights, instagram_manage_comments, instagram_content_publish, instagram_manage_contents, instagram_manage_engagement, instagram_manage_messages, instagram_manage_upcoming_events, pages_show_list, pages_read_engagement, business_management, ads_read, email, public_profile.

YouTube (YouTube API Services)

• Channel data: title, description, thumbnails and statistics (subscribers, views, video count).
• Your videos and their metadata: titles, descriptions, tags, privacy status and thumbnails.
• Uploading videos (including Shorts), updating their metadata and updating your channel description, when you ask us to.
• Comments on your videos, so you can read, reply to and moderate them.
• YouTube Analytics reports: views, watch time, audience retention, traffic sources and audience demographics in aggregated form, and estimated revenue reports if your channel is monetized.
• The email address and basic profile (name and picture) of your Google account, to identify which account is connected.
• Public data of other YouTube channels (title, description, statistics and public videos), obtained with an API key, for research and to verify channel ownership with a one-time code placed in a channel description.

Scopes requested from Google: https://www.googleapis.com/auth/youtube, https://www.googleapis.com/auth/youtube.upload, https://www.googleapis.com/auth/youtube.force-ssl, https://www.googleapis.com/auth/youtube.readonly, https://www.googleapis.com/auth/yt-analytics.readonly, https://www.googleapis.com/auth/yt-analytics-monetary.readonly, openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile.

TikTok

• user.info.basic — your open ID, avatar and display name.
• user.info.profile — your username, bio, profile links and verification status.
• user.info.stats — your follower, following, likes and video counts.
• video.list — your public videos with their titles, covers, links and view, like, comment and share counts.
• video.upload — sending a video you choose to your TikTok inbox as a draft, which you then edit and post yourself in the TikTok app.
• video.publish — posting a video you choose directly to your TikTok account with the caption, privacy level and interaction settings you select.

Data you provide directly

• Videos, images and captions you upload, publishing schedules, and replies you write to comments and messages.
• Messages you send us, for example to request data deletion.

We never ask for, receive or store your passwords for Instagram, Facebook, Google, YouTube or TikTok. Access works only through OAuth tokens issued by the platforms, which you can revoke at any time.

3.How We Use Information

We use the information only to provide the features you use in the App: publishing and scheduling content, showing analytics, managing comments and messages, and verifying account ownership.

• We do not sell your data.
• We do not use your data for advertising, and the App does not show ads or allow third parties to serve content in it.
• We do not use data received from platform APIs to train generalized artificial intelligence or machine learning models.
• We do not use your data for any purpose unrelated to the features listed above.

4.Google API Services — Limited Use

iishka's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google user data only to provide and improve the user-facing features described in this policy.
• We do not transfer Google user data to others, except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition with prior notice to you.
• We do not allow people to read Google user data unless you give us explicit consent for specific data, it is necessary for security purposes or to comply with applicable law, or the data is aggregated and anonymized for internal operations.

5.YouTube API Services

iishka uses YouTube API Services to upload videos, read channel and video data, manage comments and show YouTube Analytics reports for the channels you connect.

By using the YouTube features of iishka, you agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

You can revoke iishka's access to your Google account at any time on the Google security settings page, in addition to disconnecting the channel in iishka or asking us to delete your data.

Data obtained through YouTube API Services is refreshed or deleted at least every 30 days. When you disconnect a channel in iishka or ask us to delete your data, we delete the YouTube data and tokens we store for it within 7 days; if you revoke access on the Google security settings page, we delete them within 30 days.

6.TikTok

TikTok's handling of your data is described in the TikTok Privacy Policy.

You can revoke iishka's access at any time. TikTok: in the TikTok app open Profile → Menu → Settings and privacy → Security and permissions → Apps and services permissions, choose iishka and remove access (menu names may differ slightly between app versions).

7.Meta and Instagram

Meta's handling of your data is described in the Meta Privacy Policy; use of Instagram is governed by the Instagram Terms of Use.

You can revoke iishka's access at any time. Instagram: open Settings → Website permissions → Apps and websites, choose iishka and tap Remove. If you connected through Facebook Login, also remove iishka in Facebook Settings → Business integrations.

8.Data Storage and Security

• Access and refresh tokens are stored encrypted (AES-256-GCM) with a key kept separately from the database.
• All data is transferred only over HTTPS.
• Only authorized personnel of the Operator can access the systems that store the data, and only as needed to operate the App.
• The App is hosted by a hosting provider that stores and processes data on our behalf as a data processor.

9.Data Retention

• We keep data for a connected account while it stays connected.
• After you disconnect an account, revoke access on the platform or ask us to delete your data, we delete the tokens and the data we stored for that account within 30 days.
• YouTube data follows the stricter rules in the YouTube API Services section above: refreshed or deleted at least every 30 days, and deleted within 7 days after you disconnect a channel or ask us to.
• Media files you upload are kept only as long as needed to publish them and to show your publishing history.

10.Data Sharing

We do not share your data with third parties, except infrastructure providers that process it on our behalf (hosting and storage) and cases where disclosure is required by law.

Data is sent back to the platforms only when you take an action, for example when you publish or schedule a post or reply to a comment or message.

11.Cookies

iishka uses only first-party cookies needed for it to work: a session cookie that keeps you signed in to the App and a short-lived security cookie used during platform sign-in. On the main iishka site, a cookie may also remember a partner referral code if you followed a partner link. We do not use advertising or tracking cookies or third-party analytics.

12.Your Rights and Data Deletion

You can request access to, correction of or deletion of your data, and withdraw your authorization at any time.

Send requests to gorban3v@gmail.com. We respond within 30 days. Step-by-step instructions are on the Data Deletion page.

If you are in Russia, you also have the rights provided by Federal Law No. 152-FZ "On Personal Data".

13.Children

iishka is not intended for persons under 18, and we do not knowingly collect their data. If you believe a minor has connected an account, contact us and we will delete the data.

14.Changes to This Policy

We may update this policy. The new version will be posted on this page with a new "Last updated" date. If the changes are significant, we will notify users of the App before they take effect.

15.Contact

Questions or complaints about privacy: NARD LLC (ООО «НАРД», OGRN 1226100001786, INN 6154162034), gorban3v@gmail.com.