Privacy Policy

1. Overview

This Privacy Policy explains how Contentfish ("we", "us", or "our") handles information when you use our Obsidian plugin and backend service to publish content to Instagram and Facebook via Meta APIs.

This project is not an official Meta product. Publishing is performed through the Meta Graph API.

2. Who is responsible

Responsible person: Vadim Kalinin
Contact email: vadimakalin@gmail.com

3. Data we may process

Depending on how you use the plugin, we may process the following categories of information:

• Meta access credentials: a Meta user access token you provide so the backend can discover Pages/IG accounts and publish content.
• Content you choose to publish: note text (captions), and images you embed in your notes and select for posting.
• Operational data: logs and status information (e.g., error messages) to help troubleshoot failed publish attempts.
• Scheduling state (if enabled): local timestamps used to decide when to run automatic posting ticks.

4. How we use this data

• To send your selected images and captions to Meta for publishing.
• To authenticate with Meta and manage publishing targets you selected in Obsidian.
• To operate the scheduling and posting workflow when the background agent is enabled.

5. Where data is stored

Your Meta access token is stored locally by the Obsidian plugin and (when enabled) the background agent configuration on your device/vault. The backend acts as a proxy: it receives the access token with each publishing request and does not implement a separate long-term token storage on the server.

Images and captions are transmitted to Meta over HTTPS during publishing. The backend does not provide a third-party storage service for your published media.

Depending on the publishing path used, the backend may temporarily store uploaded media on the same machine for a limited time (for example, to provide a URL for Instagram). Such temporary storage is designed to expire shortly after use and is not intended for long-term retention.

6. Data retention

The plugin/agent keep scheduling state and configuration locally in your vault/device as long as you do not remove it.

The backend may keep logs on the machine where it runs for troubleshooting purposes. Temporary processing data may exist while requests are being handled, and any temporary uploaded media (if applicable) is stored only for a limited time before being pruned.

To delete your data, use the instructions on the Data Deletion page.

7. Sharing with third parties

We share data with Meta only to the extent required to publish your content. Meta (not us) is responsible for processing and storing the published content after publication.

8. Children’s privacy

We do not knowingly collect personal data from children. If you believe a child has provided data, contact us at vadimakalin@gmail.com.

9. Your rights and choices

• You can stop using the service at any time.
• You can delete local configuration, token, and state files from where the backend runs.
• You can request deletion via the Data Deletion page.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date indicates when the latest changes were made.

11. Contact

For questions or privacy requests, contact us at vadimakalin@gmail.com.