Privacy Policy

1. Who we are

Content Boost is a social media management agency. Content Boost is a brand operated by AetherDesignLab LLC, a Wyoming (USA) limited liability company (“Content Boost”, “we”, “us” or “our”).

AetherDesignLab LLC is the data controller for the personal information described in this policy. You can reach us at:

2. Scope of this policy

This policy covers:

• our website at contentboost.org (the “Website”), and
• the Content Boost social media scheduling and publishing service, including the internal tool we use to schedule and publish content to TikTok, Instagram and LinkedIn on behalf of our clients and on our own accounts (the “Service”).

Our scheduling tool is used only by the Content Boost team (two administrators). It is not offered as self-serve software, and clients do not log in to it. Clients connect their social media accounts through each platform’s official authorization (OAuth) screen.

3. Information we collect

Website visitors

The Website has no user accounts, no forms, and no analytics or advertising scripts. Like any website, it is delivered by a hosting provider. Our hosting provider, Cloudflare, processes minimal technical data, such as your IP address, browser type and the pages requested, in order to deliver the Website securely and protect it against abuse. We do not use this data to identify or profile you.

Clients who connect a social media account

When you authorize Content Boost to manage a TikTok, Instagram or LinkedIn account, we receive and store:

• Authorization credentials: OAuth access tokens and refresh tokens issued by the platform. These let our tool act only within the permissions you approved. We never ask for or receive your password.
• Account identifiers and basic profile information: the platform account ID, username or display name, and profile picture, so we can show which account is connected.
• Content and scheduling data: the videos, images and captions we publish for you, and the dates and times they are scheduled for.
• Post status: where the platform provides it, basic status information about each post (for example, whether it was published or failed) and the resulting post ID.

Communications

If you email us, we receive your email address, name (if included) and the content of your message and any attachments, such as the content you send us for publishing.

4. Platform-specific disclosures

Our tool connects to each platform only through its official API. The data we access, and the way we use it, are described below for each platform.

TikTok

• Data accessed through the TikTok API: your TikTok basic profile information (open ID, display name and avatar), the posting options TikTok provides for your account (such as available privacy settings and maximum video length), and the status of videos we publish for you.
• Actions performed: uploading and publishing videos and captions that you have approved, at the time you have scheduled.
• Purpose: this data is used solely to publish and schedule the account owner’s content and to show which account is connected.
• Compliance: our use of TikTok data complies with the TikTok Developer Terms of Service and TikTok’s developer policies and guidelines.

Instagram (Meta)

• Data accessed through the Instagram API (Meta Platforms): your Instagram professional account ID, username and profile picture; where the account is connected through Facebook Login, the ID and name of the Facebook Page linked to that Instagram account; and the status and ID of media we publish for you.
• Actions performed: publishing images, carousels, reels and captions that you have approved, at the time you have scheduled.
• Purpose: this data is used solely to publish and schedule the account owner’s content and to show which account is connected.
• Compliance: our use of Meta platform data complies with the Meta Platform Terms and Meta’s Developer Policies. Instructions for deleting your data are on our Data Deletion page.

LinkedIn

• Data accessed through the LinkedIn API: the basic profile information LinkedIn returns when you sign in (member ID, name, profile picture and, where LinkedIn includes it, your email address); if you authorize us to post for a LinkedIn Page you administer, that Page’s ID and name; and the ID and status of posts we publish for you.
• Actions performed: publishing text, image and video posts that you have approved, to your profile or authorized Page, at the time you have scheduled.
• Purpose: this data is used solely to publish and schedule the account owner’s content and to show which account is connected.
• Compliance: our use of LinkedIn data complies with the LinkedIn API Terms of Use and LinkedIn’s developer policies.

We do not read your private messages, follower lists or analytics on any platform, and we do not post anything you have not approved.

5. How we use information

We use the information described above only to:

• provide the Service, meaning publishing and scheduling the content you approve;
• maintain your account connections (for example, refreshing access tokens before they expire);
• communicate with you about your content, schedule and account; and
• keep the Service and the Website secure and prevent misuse.

6. Legal bases (EEA and UK users)

If you are in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR:

• Performance of a contract: to provide the publishing and scheduling services you have asked us to provide.
• Consent: when you authorize Content Boost on a platform’s OAuth screen, you consent to the specific permissions shown there. You can withdraw that consent at any time by revoking access (see How to revoke access).
• Legitimate interests: to keep the Website and the Service secure, prevent abuse and respond to your messages.
• Legal obligation: where we must keep or disclose information to comply with the law.

7. How we share information

We share information only:

• With service providers who host and run the infrastructure needed for the Website and the Service, such as Cloudflare. They process data only on our instructions and may not use it for their own purposes.
• With the social media platforms themselves, when we publish your content to them at your request. Once published, your content is handled under that platform’s own terms and privacy policy.
• When legally required, for example to comply with a valid court order or legal process, or to protect the rights and safety of our clients or others.

We do not share your information with advertisers, data brokers or any other third party.

8. International transfers

We are based in the United States, and your information is processed in the United States. If you are in the EEA, the UK or Switzerland, your data is transferred to the United States using appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) or our service providers’ participation in the EU-U.S. Data Privacy Framework, where applicable.

9. How long we keep information

• Access tokens and account data are kept for as long as your account remains connected to Content Boost.
• They are deleted within 30 days after you disconnect the account, revoke access on the platform, or send us a deletion request.
• Scheduled or unpublished content is deleted on the same timeline.
• Emails are kept for as long as needed to handle your request and our business relationship, and then deleted, unless we must keep them for legal reasons.
• Published content remains on the platform where it was published, under that platform’s own rules, until you or we delete it there.

10. Security

• All traffic to the Website and between our tool and the platforms is encrypted in transit (HTTPS/TLS).
• Access tokens are stored encrypted.
• Access to the tool, and to the data in it, is limited to the two Content Boost administrators.
• We request only the platform permissions needed to publish and schedule content.

No system is perfectly secure, but we take reasonable measures to protect your information. If we learn of a security incident that affects your data, we will notify you and the relevant authorities as required by law.

11. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate information;
• delete your information;
• restrict or object to certain processing;
• receive your information in a portable format (portability);
• withdraw your consent at any time, without affecting processing that took place before; and
• lodge a complaint with a data protection supervisory authority in your country of residence or work (EEA/UK).

California residents (CCPA/CPRA)

We do not sell or share personal information, as those terms are defined under the California Consumer Privacy Act as amended by the CPRA, and we do not use sensitive personal information to infer characteristics about you. California residents have the right to know, delete and correct their personal information, and will not be discriminated against for exercising these rights.

How to exercise your rights

Email [email protected] and tell us which right you want to exercise and which platform account it concerns. We may ask you to confirm that you control the account. We will reply within 30 days (or sooner if the law requires).

12. How to revoke access

You can disconnect Content Boost from your account at any time, directly in each platform’s settings.

TikTok

1. Open the TikTok app and go to your Profile.
2. Tap the menu icon (☰) and choose Settings and privacy.
3. Go to Security and permissions (called Security in some versions), then Apps and services permissions (or Manage app permissions).
4. Select Content Boost and tap Remove access.

Instagram

1. Open Instagram and go to your Profile.
2. Tap the menu icon (☰) and choose Settings and activity.
3. Go to Website permissions → Apps and websites and open the Active tab.
4. Select Content Boost and tap Remove.

If your Instagram account was connected through a Facebook Page, also remove the app from Facebook: Settings & privacy → Settings → Business integrations (and Apps and websites) → select Content Boost → Remove.

LinkedIn

1. Sign in to LinkedIn and click Me → Settings & Privacy.
2. Open Data privacy, then Other applications → Permitted services.
3. Find Content Boost and click Remove.

Platforms occasionally rename their menus. If a step looks different in your app, search the platform's settings for “apps”, “permissions” or “connected services”, or email [email protected] and we will disconnect the account for you.

Revoking access stops our tool from publishing to your account. To have your stored data deleted as well, follow our Data Deletion Instructions.

13. Cookies

The Website does not use advertising, analytics or tracking cookies. The only processing that takes place is strictly necessary technical processing by our hosting provider, Cloudflare, to deliver the Website and protect it from attacks. Because of this, we do not show a cookie banner.

14. Children

The Website and the Service are not directed to anyone under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

15. Changes to this policy

We may update this policy from time to time, for example when we add support for a new platform. We will post the updated policy on this page and change the “Last updated” date at the top. If the changes are significant, we will notify our clients by email before they take effect.

16. Contact us

For any questions about this policy or your data, contact: