Privacy Policy

Who We Are

Pablira is a publishing tool operated by MyCryptoParadise. It lets an approved operator connect their own Telegram channels and social accounts, prepare and schedule posts, and publish them through server-side adapters.

For any question about this policy, or to request deletion of your data, contact privacy@pablira.com. We answer privacy requests within 30 days.

Information We Process

• Account identifiers. Your Telegram user ID, which is how Pablira identifies you — Pablira has no separate username or password login.
• Connected destinations. The channels, pages and profiles you choose to connect, together with the identifiers the platform returns for them.
• Access tokens. OAuth tokens issued by a platform after you approve a connection on that platform's own login screen.
• Content you create. Post text, media you attach, scheduling times, and approval records.
• Operational records. Timestamps, status codes and proof identifiers used to prevent duplicate sends and to keep an audit trail of publishing actions.

Pablira never asks you to type a social password, an API key, a cookie or a one-time login code into the app. Every account connection happens on the platform's own login page.

Connected Platforms And What We Access

Pablira requests only the permissions needed to publish to a destination you have chosen, and requests them only for that destination.

• LinkedIn. Your name and profile identifier to confirm which account is connected, permission to post on your behalf, and — only when you connect a company page — permission to post as that organisation.
• Facebook. The list of Pages you manage, Page details, and permission to publish posts to a Page you select. Pablira cannot post to a personal Facebook profile; Meta does not allow it.
• Instagram. The Instagram business account linked to a connected Facebook Page, and permission to publish content to it.
• X. Your account handle to confirm the connection, and permission to post and upload media.
• Telegram. The channels you add, so posts can be delivered to them.

Pablira does not read your inbox, your contacts, your followers' personal data, or content that is unrelated to publishing.

How Information Is Used

Information is used to show which accounts are connected and whether their login is still valid, to prepare and preview drafts, to publish or schedule posts you have approved, to avoid sending the same post twice, and to keep an audit record of what was published and when.

Pablira does not use your information for advertising, profiling, or automated decision-making, and does not use the content of your posts to train models.

Storage And Security

Access tokens are handled only on the server. They are encrypted before being written to the credential store and are never returned to the browser, the Telegram interface, or any log. Pages and API responses show only non-reversible digests of account identifiers, never raw tokens.

Short-lived values used during a login — the OAuth state and the destination authorisation — expire automatically after 30 minutes.

Sharing

Pablira sends content and account requests only to the platform you selected for that action, and to the infrastructure providers that host the service (Vercel for hosting and serverless functions, and a managed key-value store for encrypted credentials and scheduling state).

Pablira does not sell personal information and does not share it with advertisers or data brokers.

Retention

• Connected accounts and their tokens are kept while the account remains connected. They are deleted when you disconnect the account or ask us to remove it.
• Uploaded media is deleted automatically 30 days after upload by a scheduled cleanup job.
• Login state and destination authorisations expire after 30 minutes.
• Publishing audit records are kept for as long as needed for security and duplicate-send protection, and contain no access tokens.

Deleting Your Data

You can remove your data in any of these ways:

1. Disconnect an account in Pablira. Open Accounts → Connect channels → Manage saved accounts and remove the destination. This deletes the stored token and the destination record for that account.
2. Revoke access at the platform. You can withdraw Pablira's access at any time from the platform itself — LinkedIn under Settings → Data privacy → Permitted services, Facebook and Instagram under Settings → Business integrations, and X under Settings → Security and account access → Apps and sessions. Revoking there immediately stops Pablira from publishing to that account.
3. Ask us to delete everything. Email privacy@pablira.com from the address associated with your account, or message the operator channel that gave you access, and ask for full deletion. We will delete your connected accounts, stored tokens, drafts, scheduled posts and media, and confirm once it is done. We respond within 30 days.

Deleting your data does not remove posts that were already published to a social platform. Those are managed by you on that platform.

Your Rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict how it is processed. To exercise any of these, contact privacy@pablira.com. If you are in the EU or UK and are unhappy with our response, you may complain to your local data protection authority.

Children

Pablira is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children.

Changes To This Policy

If this policy changes materially, the date at the top of this page is updated and connected operators are notified through the Pablira operator channel before the change takes effect.