Privacy Policy

1.Information we collect

• Account information. When you create an account or sign in (including via Google sign-in), we collect your name, email address, and basic profile information from your sign-in provider.
• Connected social accounts. When you connect a YouTube, Instagram, or TikTok account, you authorize access through that platform’s official authorization flow (OAuth). We receive and store access tokens and basic account or channel information so that, at your direction, we can publish video content to your account and retrieve performance metrics (for example, views, likes, and watch time) for videos we posted. We only request and use the permissions (“scopes”) you approve.
• Content data. We store the content you and the Service generate — topics, scripts, generated audio and video files, and the performance data associated with them.
• Usage and device data. We collect standard log and usage data such as IP address, browser type, pages viewed, and timestamps, including through cookies and similar technologies.
• Payment information. If you subscribe to a paid plan, payments are processed by our payment processor, Stripe. We do not receive or store your full card details; we receive limited billing information such as your subscription status and the last four digits of your card.

2.How we use information

We use the information we collect to: operate and provide the Service (generate content and, at your direction, publish it and report its performance); authenticate you and keep your account secure; process subscriptions and billing; provide support and communicate with you about the Service; analyze and improve the Service; and comply with legal obligations.

3.How we share information

We do not sell your personal information. We share information only with service providers that help us operate the Service, and with the social platforms you choose to connect, as needed to provide the Service: Supabase (database, file storage, authentication); Railway (application hosting); DeepSeek (AI generation of content ideas and scripts); ElevenLabs (text-to-speech voice generation); Pexels (stock footage); OpenAI Whisper (caption transcription); Google/YouTube, Meta/Instagram, TikTok (to publish content to, and retrieve analytics from, the accounts you connect); Stripe (payment processing for paid plans). We may also disclose information when required to comply with the law, to enforce our terms, or to protect the rights, safety, and security of Passeig Studio and our users.

4.Google user data — Limited Use

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, information obtained from Google and YouTube is used only to provide and improve the features you request (publishing your videos and reporting their performance); is not transferred to others except as necessary to provide those features, with your consent, or as required by law; is not used for advertising; and is not read by humans except with your consent, for security purposes, or as required by law.

5.Meta and TikTok data

When you connect Instagram (through Meta) or TikTok, our use of data from those platforms is likewise limited to providing the features you request and complies with the Meta Platform Terms and the TikTok developer terms. We use platform data only to publish content you direct us to publish and to report its performance.

6.Data retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion at any time (see “Your choices and rights”). We delete or anonymize data when it is no longer needed, subject to any legal retention requirements.

7.Your choices and rights

• Disconnecting accounts. You can disconnect any social account at any time from your account settings, or by revoking access directly with the platform (for example, through your Google Account permissions or your Instagram or TikTok connected-apps settings). Disconnecting revokes our access tokens and stops any further posting and analytics for that account.
• Access and deletion. You can request a copy of your data, ask us to correct it, or delete your account and associated data by contacting us at the email address below. We will respond within a reasonable timeframe.
• Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including the rights to access, correct, delete, and port your information, and to object to certain processing.

8.Security

We use reasonable technical and organizational measures to protect your information, including encrypted storage of access tokens and restricted access to production data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9.Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

10.International users

We operate the Service from the United States and process data there. By using the Service, you consent to the transfer and processing of your information in the United States.

11.Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, notify you through the Service.

12.Contact

For questions or requests about this Policy or your data: privacy@passeigstudio.com — Passeig Studio.