Privacy Policy

This Privacy Policy explains what information SocialAI Studio Inc (“we”, “us”), registered address 4 Golds Cres, Barrie, ON L4N 8R1, Canada, collects when you use our website and creative workspace (the “Service”), how we use it, and the choices you have. Our privacy officer is Privacy Officer, SocialAI Studio Inc, 4 Golds Cres, Barrie, ON L4N 8R1, Canada, info@socialai.website. This policy has not been reviewed by a lawyer.

We keep collection to what the Service actually needs to run:

• Account information — your email address, and, if you sign in with a third-party provider such as Google, the name and profile picture that provider shares with us.
• Content you create — the prompts and text you enter, the videos and images the studio generates for you, saved resumes and captions, and posts you queue in the scheduler, including any channel webhook URL you choose to connect.
• Selfies and reference photos — photos you upload for headshots or image-to-video, and your photo-consent confirmation: “I am the person in this photo or have their written permission to use it for AI video generation.” Your confirmation is stored with your user ID, the time you gave it, and the job ID.
• Usage and credits — your plan, credits purchased and consumed, which tools you use, generation counts, API key metadata (key name, creation and last-use times — never the raw key), and records of which generations succeeded or failed, so we can bill accurately and return credits for failures.
• Connected accounts — the social accounts you choose to connect. Their access tokens are encrypted and are never shown in the app.
• Technical and log data — device and browser type, IP address, and standard server logs such as pages accessed and timestamps, used to keep the Service running and secure.

We do not sell your personal data. We do not rent or trade it, and we do not share it with advertising networks or use it to serve third-party ads. That is a firm rule, not a setting.

We use it to:

• provide, maintain and secure the Service, including signing you in;
• process payments, manage your credit balance and return credits for failed generations;
• generate the videos, images and text you ask for, and save them to your workspace;
• deliver scheduled Discord posts through your connected webhook, and let you download finished posts to share on other platforms;
• check photo consent before image-to-video jobs run;
• detect and prevent abuse, fraud, and violations of our Terms of Service;
• respond to your support and privacy requests; and
• understand what works so we can improve the studio.

We share only what is necessary, and only with the sub-processors who process data for these specific purposes:

• Stripe — handles card payments. We never see or store your full card number.
• OpenRouter and the model providers it routes to — your prompt and any reference media you upload are sent to the AI model that produces your output.
• Supabase (hosting/storage) — runs our database, file storage and application hosting.
• [ADD OTHERS]

We may also disclose information where we are legally required to, or to protect the rights, safety and property of our users or of the Service, and in connection with a merger or acquisition where the business is transferred.

We use essential cookies and browser storage to keep you signed in, remember your theme and preferences, and protect accounts against fraud. These are required for the Service to work. We do not use advertising or cross-site tracking cookies.

We keep account information while your account is open, and content you create until you delete it or close your account. Billing and tax records are kept for as long as the law requires. When you close your account, we delete or anonymise your data within a reasonable period, except where we must retain it for a legitimate legal reason.

• Selfies: headshot selfies are transient today — they are processed and never stored. If a selfie is ever stored, it is deleted within 30 days by a daily deletion job.
• Photo-consent records: kept for as long as needed to show the consent was given. [Consent-record retention period — owner to supply.]

You can ask us to access, correct, export or delete your personal data, object to or restrict certain processing, or close your account. You can also delete any generated content yourself from inside the workspace at any time. Send your request to info@socialai.website and we will respond within 30 days. Where the law of your region gives you extra rights — such as the GDPR or CCPA — those rights apply to you and we honour them regardless of where you live.

Access to the Service is protected by authentication, connections are encrypted in transit, connected-account tokens are encrypted at rest, and backend access is limited to what each part of the system needs. No method of storage or transmission is completely secure, so please keep your account credentials and API keys safe and tell us promptly if you believe your account has been compromised.

The Service is for people aged 18 or older, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has given us personal information, contact us and we will remove it.

We may update this policy as the Service changes. We will revise the “Last updated” date above and, for material changes, let you know by email or in the app where we reasonably can.

For any privacy request — access, correction, deletion, or a question about how your data is handled — contact our privacy officer: Privacy Officer, SocialAI Studio Inc, 4 Golds Cres, Barrie, ON L4N 8R1, Canada, info@socialai.website.