Lothric Logic ("we," "us," "our") operates the Content Performance Audit tool and related analytics services at app.lothriclogic.com on behalf of contracted clients, including Bad Taste Creatives and its own clients. This policy explains what data we access, why, and how it's handled.
Lothric Logic is a B2B automation and AI systems consultancy. This tool reads content performance data from Instagram Business and Facebook Page accounts that our clients have explicitly authorized us to analyze, in order to produce periodic content performance reports. Operating entity: Nicolás Tordó, trading as Lothric Logic.
You connect your Meta account to this tool with Facebook Login for Business, and approve five permissions. We request these and nothing else:
pages_show_list — lists the Facebook Pages you manage, so you can see which ones are connected.
business_management — reads the name of your business portfolio, shown on the connection screen.
instagram_basic — reads the Instagram Business account linked to your Page: its username, profile picture, follower count and post count.
instagram_manage_insights and pages_read_engagement— required by Meta for the Business Discovery endpoint, which is the only Instagram data call this tool makes. Business Discovery returns public information about the Instagram business accounts you audit: username, follower count, and each post's permalink, caption, publish date, likes and comments.
We do not read private messages, follower personal data, login credentials, advertising data, or the private insights of your own account — this tool never calls Meta's insights endpoints. We never post, comment, or send messages on your behalf. You can remove our access at any time with the Disconnect button in the app, which also revokes the app on Meta's side, or from your Facebook settings under Business integrations.
Data is used exclusively to generate content performance reports (spreadsheets and slide decks) delivered to the account owner or their designated agency contact. We do not use this data for advertising, profiling, or any purpose beyond the agreed reporting service.
Data is stored in an access-controlled Supabase (PostgreSQL) database with row-level security scoping each client's data to their own account. Data is retained for the duration of the active engagement and deleted upon written request or engagement termination.
We do not sell, rent, or share this data with third parties, data brokers, or advertisers. Reports are delivered only to the authorized account owner or their designated contact.
Account owners may request a copy of, or deletion of, their stored data at any time by contacting us at nicolas@badtastecreatives.com.
We may update this policy from time to time. Material changes will be reflected with an updated effective date below.