Terms of Service

1. Who we are and what the service does

Antigravity Publishing (the "service") is run by Bc. Ing. Petr Bartek, a sole trader registered in the Czech Republic, IČO 01033450, registered seat K Pilíkům 1062/1, Hrabová, 720 00 Ostrava, Czech Republic ("we", "the operator"). Contact: petr@petrbartek.cz. The service runs at publishing.petrbartek.cz.

With the service you can connect your Facebook Pages and the Instagram professional accounts linked to them, upload videos, publish or schedule Facebook and Instagram Reels, and read and answer messages that people send to your Pages and Instagram accounts.

The service is meant for businesses and creators who run Facebook Pages or Instagram professional accounts. It is intended exclusively for entrepreneurs and legal entities acting within their business or professional activity, and not for consumers. By registering you confirm that you use the service within your business or professional activity.

By creating an account you accept these terms, including the data processing terms in section 15.

2. Beta, price and availability

The service is an open beta. It is free during the beta and there are no paid plans. If we ever introduce paid features, we will tell you in advance, and nothing will be charged without your separate agreement.

Features may be added, changed or removed at any time. The service may be unavailable, slow or interrupted, for example during updates or when Facebook or Instagram are unavailable. We do not promise any level of availability, and a scheduled post may be published late or not at all.

We may end the beta. If we do, we will tell you by e-mail at least 30 days in advance, unless a sudden reason such as a security problem or a decision of Meta makes that impossible.

3. Your account

• Register with a working e-mail address that you control and confirm it through the link we send. Until then you cannot connect accounts, upload or publish.
• Each account has one workspace. Keep your password secret; you are responsible for what is done with your account.
• Tell us at once at petr@petrbartek.cz if you think someone else has used your account.
• You can delete your account at any time under Account. See Deleting your data.

4. Connecting Facebook and Instagram

You connect Pages and Instagram accounts through Facebook Login for Business, and you choose there which ones to share. Connect only Pages and accounts that you are allowed to manage. One Page or Instagram account can be connected to only one workspace at a time.

Your use of Facebook and Instagram stays subject to Meta's own terms and policies. Meta Platforms Ireland Ltd. is the platform you connect to; it is not our sub-processor. We are not responsible for what Meta does, including Meta refusing, delaying or removing a post, or limiting your Page.

You can disconnect an account at any time under Connections, or remove the app in your Facebook settings. Scheduled posts for a disconnected account are not published.

5. Your content and posts

Your videos, captions and titles remain yours. You give us permission to store them, to process them technically and to send them to Facebook and Instagram only as you instruct, for as long as needed to provide the service.

You are responsible for your content: you must have the rights to it, including the consent of the people shown in it where the law requires, and it must comply with the law and with Meta's rules. If a video was made or substantially changed with AI, tick the AI option; we pass that label to Facebook or Instagram where they allow it.

Posts are published under your Page or Instagram account. Deleting a post or your account here does not delete posts that are already on Facebook or Instagram; delete those there.

6. Messages

Under Messages you can read conversations with people who wrote to your Pages and Instagram accounts and reply to them. Every reply is written and sent by a person. The service sends no automatic replies and uses no AI to read or write messages. It never starts a conversation.

Meta allows a reply only within 24 hours after the person's last message; after that the service will not send it. You are responsible for your replies and for handling the personal data of the people you talk to.

7. Acceptable use

Do not use the service to:

• publish or send anything unlawful, deceptive, infringing or harmful, or spam;
• access Pages, accounts or data you are not allowed to manage, or another customer's workspace;
• test, attack or overload the service, get around its limits or security, or reverse-engineer it beyond what the law allows;
• access the service by automated means other than its own pages.

8. Limits

To keep the service working for everyone there are limits, for example 500 MB per video, 2 GB of videos per workspace, scheduling up to 90 days ahead and limits on how often you can sign in or request e-mails. The service shows a message when a limit is reached. Facebook and Instagram have their own limits, and the service follows them.

9. Ending or suspending your use

You can stop using the service and delete your account at any time.

We may suspend or close an account that breaks these terms or the law, that puts the service, other customers or third parties at risk, or when Meta requires it. Unless there is an urgent reason, we will tell you why by e-mail first and give you a chance to respond.

10. Liability

The beta is free and provided as it is. To the extent the law allows, we are not liable for indirect damage, lost profits, lost data, or for posts or replies that are published late, not at all or differently than intended, including because of Facebook, Instagram or your internet connection.

Our total liability to you for all damage in connection with the service is limited to CZK 10,000.

This limit and the exclusions above do not apply to damage caused intentionally or through gross negligence, or to any other liability that cannot be limited by law.

11. Personal data

For your account data (e-mail address, password hash, security records) we are the controller; see the Privacy Policy. For the data of your Pages, Instagram accounts, posts and audience we process personal data on your behalf as a processor under the data processing terms in section 15.

12. Changes to these terms

We may change these terms, for example when the service changes. We will tell you about important changes by e-mail or in the service at least 14 days before they take effect, except for changes required by law or by Meta. If you keep using the service after that period, you accept the changed terms. If you do not agree, you can delete your account before then. Each version has its own version label.

13. Governing law and disputes

These terms are governed by Czech law. Disputes will be decided by the court of the Czech Republic with subject-matter jurisdiction in whose district the operator has its registered seat. These terms are written in English and Czech with the same content; if the versions differ, the Czech version prevails.

14. Contact

Bc. Ing. Petr Bartek, IČO 01033450, registered seat K Pilíkům 1062/1, Hrabová, 720 00 Ostrava, Czech Republic. E-mail: petr@petrbartek.cz.

15. Data processing terms (GDPR Article 28)

This section is the data processing agreement between you (the controller) and us (the processor) under Article 28 of the General Data Protection Regulation (GDPR). It applies whenever the service processes personal data contained in your Pages, Instagram accounts, posts and messages.

15.1 Subject matter and duration

We process personal data only to provide the service to you. Processing lasts for as long as your account exists and ends with its deletion as described in 15.10.

15.2 Nature and purpose

Storing your uploaded videos and post texts; sending them to Facebook and Instagram at the time you choose and checking the result; reading your conversations from Meta when you open them and showing them to you; sending the replies you write; keeping the records needed to avoid duplicate posts and replies.

15.3 Types of personal data and data subjects

• People who appear in or are named in your videos, captions and titles: whatever personal data that content contains.
• People who write to your Pages or Instagram accounts: their Facebook or Instagram id, name or username and message text. Message text is only shown to you; it is held in the server's memory for at most 30 seconds and never stored. For each reply you send we store only the conversation and recipient ids, a SHA-256 digest of the reply text and the result.
• Your Pages and Instagram accounts: names, ids, your tasks on each Page, and an access token for each, stored encrypted.
• Your posts: caption, title, time, chosen accounts, and the result with the post's id and link.

15.4 Your instructions

We process the data only on your documented instructions. Your use of the service (what you upload, schedule, publish, open or send, and what you disconnect or delete) and these terms are your instructions. We do not use the data for our own purposes, do not sell it, and do not use it for advertising, profiling or AI training. If we believe an instruction breaks data protection law, we will tell you. If the law requires processing beyond your instructions, we will tell you first unless the law forbids it.

15.5 Confidentiality

Only the operator has access to the systems that run the service; there are no employees or contractors with access. The operator's own software tools operate the server, but they do not process your data. The operator looks at your data only when it is needed to run the service, to fix a problem you report or when the law requires it, and keeps it confidential.

15.6 Security measures

• Encrypted connections (HTTPS) to the service and to Meta.
• Passwords stored only as scrypt hashes; sessions in secure, HttpOnly cookies that end after 7 days without use and after 30 days at the latest; protection against cross-site requests; limits on sign-in attempts.
• Access tokens of your Pages and Instagram accounts encrypted with AES-256-GCM; the key is kept outside the database. Tokens and message text are never written to logs.
• Each workspace has its own separate database and video folder; the service checks on every request that you only reach your own workspace.
• Uploaded files are checked before they are accepted.
• Backups of the databases every night, kept for 14 days.

15.7 Sub-processors

You give general authorisation for us to use these sub-processors:

• Hetzner Online GmbH, Germany (hosting of the service and its data; servers in Nuremberg)
• Seznam.cz, a.s., Czech Republic (Email Profi service: delivery of the account e-mails and the operator's mailbox)

We will tell you by e-mail at least 30 days before adding or replacing a sub-processor. If you object, you can end your use and delete your account before the change. Each sub-processor is bound by data protection obligations equivalent to these terms.

We keep the data in the European Union (Hetzner in Germany, Seznam in the Czech Republic) and do not transfer it outside it. Meta Platforms Ireland Ltd. is not our sub-processor: data you send to Facebook or Instagram, and data Meta provides to the service, is handled by Meta under its own terms.

15.8 Help with data subjects' requests

We help you answer requests from people exercising their GDPR rights, as far as the data is in the service. Since message text is not stored, most requests about messages concern the data Meta holds. If someone contacts us directly about data we process for you, we will pass the request to you without undue delay and will not answer it ourselves unless you ask us to.

15.9 Security incidents

If we become aware of a personal data breach affecting your data, we will tell you without undue delay, and where possible within 48 hours, with what we know: what happened, which data and people are affected, and what we are doing. We will help you with any notification to the supervisory authority or to the people affected.

15.10 Deletion at the end

When you delete your account, your workspace is deleted at once: its database with posts and reply records, its videos, and every connected account with its access token. Deletion from backups follows within 14 days, when the backups expire. Videos you uploaded and texts you wrote are your own copies; before deleting your account you can ask us at petr@petrbartek.cz for an export of your post records.

15.11 Information and audits

We make available the information needed to show that we meet these obligations and answer your written questions about our processing. Because the service is a small free beta run by one person, audits are done primarily through such written answers; an inspection by you or an auditor you appoint is possible after reasonable notice, at your cost, and without access to other customers' data.

15.12 Supervisory authority

The supervisory authority for the operator is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic.