Privacy policy

Data we use

• Account: email address, first name, brand name, language, country.
• Your space’s content: brand questionnaire answers, photos, videos, logos, texts, created content, calendar, messages with the agency.
• Subscription: Stripe identifiers (customer, subscription), payment status and dates. The studio never stores card details.
• Technical: security and activity logs (sign-ins, key actions) needed to run and secure the service.

Why

• To provide the studio and the agency’s support (performance of the contract).
• To bill the subscription and meet accounting and tax obligations.
• To secure the service and prevent abuse.
• To send service emails; optional emails (weekly reminders) only if you opt in, with unsubscribe available at any time.

Artificial intelligence

To create your content, the necessary material (photos, instructions, texts) is sent to OpenAI. [TO BE VERIFIED AND DETAILED: the provider’s data-use terms, including that API data is not used to train its models.]

Service providers

• Supabase (database, private file storage, email-code sign-in) — hosting region: [TO BE CONFIRMED].
• Vercel (hosting of the website and the studio).
• Stripe (subscription payments, invoices, customer portal). Card details are entered on Stripe: the studio never sees or stores them.
• Brevo (sending emails: sign-in codes, confirmations, reminders).
• OpenAI (creating images, texts, voiceovers and transcribing videos from the material you provide).
• Calendly (booking calls, only if you click the booking button).
• Meta (posting to Instagram / Facebook, only if you connect your account).

International transfers

Some providers are located in the United States. [TRANSFER SAFEGUARDS TO BE SPECIFIED.]

Retention

• Space data: for the duration of the subscription, then erased when the space is deleted (including files and messages). [PERIOD AFTER CANCELLATION TO BE DEFINED].
• Invoices and accounting data: as long as the law requires [TO BE CONFIRMED].
• Technical logs: [PERIOD TO BE DEFINED].

Your rights

You can request access, correction, deletion or a copy of your data, or object to its use, by writing to [CONTACT EMAIL]. [STATE-SPECIFIC RIGHTS (e.g. California) TO BE REVIEWED].

Collaborations and brand contacts

Collaborations between clients: a client brand can choose, with a checkbox that is off by default, to appear to studio creators with its offer (name, field, offer, public link). The date of this consent is recorded; it can be withdrawn at any time and the brand then disappears from the list immediately. Its email address is only shared with a creator if the brand accepts her proposal.

Collaboration proposals (message, the creator’s Instagram account) are visible to the brand concerned and to the agency, which can hide an inappropriate message. They are deleted when either space is deleted.

Creators’ opportunities directory: the agency lists professional contacts published by the brands themselves (website, Instagram bio), never personal addresses. Any brand can ask to be removed by writing to [CONTACT EMAIL]. [LEGAL BASIS AND NOTICE TO THE BRANDS CONCERNED TO BE VALIDATED.]

Recreating a post and importing your website

“Recreate this post”: the screenshots you add are stored in your private space and read by an AI service (OpenAI) to describe the layout, without reusing their text or images. The studio never opens the Instagram link. Screenshots are deleted with the recipe, and only the latest 30 recipes are kept.

“Import my website”: at your request, the studio reads the public pages of the site you give (home page and at most 3 pages) to suggest your products, colors, tone and socials; the public text may be summarized by an AI service. Nothing is applied without your OK, and only the latest 10 reads are kept.

Cookies and trackers

The studio uses no advertising cookies and no third-party trackers. If audience measurement is turned on, it works without cookies or personal data (anonymous, aggregated page views via Vercel Web Analytics). Fonts are hosted with the website.

Only essential items are stored: sign-in session cookies, a cookie remembering your language, and local storage (in your browser) so the guide you’ve already seen isn’t shown again. That’s why no consent banner is displayed.

Security

Files are kept in private storage, reachable only through temporary signed links; each client space is isolated; passwordless sign-in with a one-time code.