Privacy policy

Last updated: 2026-10-28

This policy says in plain words what Blog Writer does, which personal data it handles, who else sees it, how long it is kept and how you can have it deleted. We do not sell personal data, show advertising or track visitors across other websites.

Who we are

Blog Writer is provided by the individual entrepreneur named below. In this policy, "we" means that entrepreneur.

Operator

Individual Entrepreneur Sergei Vareyko

Contact e-mail

contact@smart-automation.by

What the service does

Blog Writer turns a business's social media posts into articles for that business's own website. A site owner, our client, connects a source of their own, such as an Instagram professional account or a Telegram channel. The service reads the posts published there, and AI models draft an article from each suitable post.

A person at the client reviews every article and approves it before it appears on the client's website.

Data we process

What we process depends on how you meet the service.

Visitors of this website

• If you send the contact form: your name, the way to reach you (a phone number, a Telegram name or an e-mail address) and, only if you fill them in, your website, links to your social media and your message. We store with them the language the form was shown in and the beginning of your browser's User-Agent text.
• Your IP address is used only to limit how often the form can be sent. It is held in memory for that and is not stored with your request. Like any web server, our server and our hosting provider keep technical logs that record the IP address, the time and the address requested; we keep them for security and troubleshooting.
• One cookie, pagegen-lang, remembers the language you chose for a year. It does not identify you. We use no analytics, no advertising and no tracking cookies.

People who sign in to the control panel

• The account: username, role, the organisation and sites it belongs to, a display name and an e-mail address if given, and the password, which is stored only as a salted hash.
• Sign-in records: the time of the last sign-in, the number of recent failed attempts and any temporary lock, and a log of changes to the account (created, password reset, role changed) with the username of whoever made them.
• If you connect Telegram to receive notifications: your Telegram chat ID and the notification messages sent to it.
• Cookies: a session cookie that keeps you signed in and ends after 12 hours without activity and, only if you tick "Remember me", a BW_REMEMBER cookie that keeps you signed in on that browser for 30 days (we store only a hash of its token). Both are needed to sign you in and neither is used for tracking.

Instagram accounts connected by a site owner

• When a site owner connects their Instagram professional account (Business or Creator), we receive from Instagram the account ID, the username and the account type, and the account's own posts: captions, photos, videos, links to the posts and their dates. We download copies of the photos and videos to our server.
• We also store the access token that Instagram issues for the connection. It is stored encrypted.
• We use this data only to write articles for that owner's own website. We only read: we do not post, comment or send messages from the account, and we do not read any other account. We do not use Instagram data for advertising.

Telegram channels

• For clients who use Telegram as a source: the text, photos and videos of the posts in the client's own public channel, which the service reads without joining it. If a client sets up a private channel, the service reads it through a Telegram account the client signs in for this purpose, and keeps that account's session on our server. This data is used in the same way as the Instagram data above.

Articles drafted from the posts

• The articles the service drafts from the posts, the pictures chosen or generated for them, and the comments the client's staff leave when they review them.

Who processes it for us

We do not sell personal data, we show no advertising and we set no tracking cookies. We pass data on only to those who help us run the service, and only for that purpose:

• AI model providers. To draft, check and illustrate articles, the text, pictures and video of the posts are sent to AI models run by Google (Gemini) and OpenAI, and to a model hosted by us. Each provider handles what it receives under its own terms.
• Hosting. The service runs on a server rented from a hosting provider, which stores the data on our behalf.
• E-mail and Telegram. Notifications to people with an account, for example that an article is ready for review, go out through an e-mail server and Telegram's Bot API, so the recipient's address or chat ID and the text of the notification pass through them.
• Authorities. We disclose data to a public authority only where the law obliges us to.

How long we keep it

• The Instagram access token: until the account is disconnected from the service or its access is revoked in Instagram, whichever comes first.
• Posts, their downloaded photos and videos, and the articles drafted from them: while the client uses the service. So that the server does not fill up, the photos and videos of the oldest published articles are removed from it when the storage limits are reached; the articles themselves stay.
• Backups: the service is backed up regularly and a copy goes to a separate server of ours. Older backups are replaced by newer ones, so a deletion reaches the backups as that happens.
• Panel accounts are kept until an administrator deletes them. A contact request is kept until we delete it or you ask us to. Cookies last as described above.

Deleting your data and your rights

• Instagram: you can end our access at any time by removing the app in Instagram (Settings → Apps and websites). That revokes our access, and we can no longer read the account.
• A data deletion request through Meta: when you ask Meta to delete the data this app holds, Meta sends us the request. We delete the access token, the account details and every post that no article uses. You can follow the request at /instagram/data-deletion/<code>, where <code> is the confirmation code Meta shows you.
• Articles already published on the client's own website are the client's content and stay there. A post that a published article is based on is kept with that article; write to us if you want it removed too.
• Anything else: to see, correct or delete other data we hold about you (a contact request, an account), or to object to how it is processed, write to the contact e-mail below. We will answer without undue delay.

contact@smart-automation.by

Changes to this policy

We update this page when the service or the way it handles data changes, and we change the date at the top. The version at this address is the one in force.