AI Content Studio

Privacy Policy

Last updated: 8 October 2026

This policy explains what AI Content Studio (the “Service”) collects, how it is used, and the choices you have. We do not sell your data and do not use it for advertising.

1. Information we collect

  • Account: name, email address and a securely hashed password (bcrypt). We never store your password in plain text.
  • Content: prompts you enter and the text, images and videos you generate, save or schedule.
  • Preferences: settings such as default platform, tone, styles and timezone.
  • Connected accounts: when you connect a social account we receive, from that platform, your account ID, username or display name, profile picture URL, and OAuth access/refresh tokens with their expiry and granted permissions. Tokens are encrypted at rest (AES-256-GCM).
  • Rednote: only the profile link and name you type in yourself.
  • Technical data: server logs and error reports (for example, request paths and error messages) used to keep the Service running.

2. TikTok data

If you connect TikTok, the Service requests these permissions:

  • user.info.basic: your TikTok open ID, display name and avatar, shown in Settings so you can see which account is connected.
  • video.upload (and video.publish where enabled): used only to upload or publish videos that you explicitly choose to send to TikTok.

We do not read your followers, messages, or other videos, and we do not share TikTok data with anyone else. Disconnecting TikTok in Settings deletes the stored tokens. You can also revoke access from TikTok’s app settings.

3. How we use information

  • to provide the Service: sign you in, generate content, store your library, schedule and publish posts;
  • to publish to the accounts you connect, only when you request it;
  • to secure the Service, prevent abuse and fix errors.

4. Service providers

  • Render (hosting and database, Singapore region) stores the data described above.
  • AI providers (Anthropic for text; Abacus.AI for images and as a text fallback): your prompts are sent to them to generate content.
  • Social platforms (Instagram, Facebook, X, LinkedIn, TikTok): receive the content you choose to publish, under their own privacy policies.

5. Cookies

We use only essential cookies: a session cookie that keeps you signed in, and a short-lived (10-minute) cookie that protects the social-account connection flow. No analytics or advertising cookies.

6. Retention and deletion

  • Content stays in your library until you delete it.
  • Connected-account tokens are kept until you disconnect the account.
  • To delete your account and all associated data, email us at the address below; we will do so within 30 days.

7. Security

Data is transmitted over HTTPS, passwords are hashed, and social tokens are encrypted. No method of storage is perfectly secure, but we take reasonable measures to protect your information.

8. Children

The Service is not intended for anyone under 13, and we do not knowingly collect their data.

9. Changes

We may update this policy and will change the “Last updated” date when we do.

10. Contact

Privacy questions or deletion requests: [email protected]