Polska wersja tej strony

Privacy policy

Who the data controller is

The data controller is "TProjekt" - Tomasz Robakowski, ul. Migdałowa 31, 05-515 Nowa Iwiczna, NIP 6442901364, REGON 276936963. Contact in matters of personal data: privacy@anyworm.com.

What data we process

Account data: the e-mail address and the password — we do not store the password, only its hash.

Instagram profile data: the account name, the publishing settings and the encrypted access token that authorizes us to publish on your behalf.

Material data: the files you upload yourself, their captions, the publication times and the statistics fetched from Instagram.

Login and registration security data: after a failed login or registration attempt, we keep the IP address it came from only in the program's memory — to limit the number of attempts. We never store it. The entry is removed when a login to the same account from that address, or a registration from that address, succeeds, and at the latest when the service restarts.

Why we process it and on what basis

Only in order to perform the service you asked for: to schedule and publish your material on your Instagram account and to show you its results.

The basis is the performance of a contract (art. 6(1)(b) GDPR), and as far as login security is concerned — our legitimate interest (art. 6(1)(f) GDPR).

We do not sell data. We do not profile. We do not display advertising.

Who we pass it to

Meta Platforms Ireland Ltd. — to the extent necessary to publish and to read the statistics.

The providers of the server the service runs on and of the file server Instagram fetches your material from for the time of the publication.

How long we keep it

For as long as you have an account with us. Once the account is deleted the data is gone — a separate page describes the scope and the limits: Deleting your account and data.

Your rights

You have the right to access your data, to rectify it, to erase it, to restrict its processing, to port it and to object. You may also lodge a complaint with the President of the Personal Data Protection Office.

We act on an erasure request in line with the page indicated above, no later than within 30 days.

Cookies

We use two cookies and both are necessary for the service to work: the login session cookie and a cookie with a security token that protects your account against requests sent on your behalf by other sites.

We do not use analytics or advertising cookies.

Security

We store passwords only as a hash.

Instagram access tokens are encrypted.

The connection to the service is encrypted.

In case of any discrepancy, the Polish version prevails.