Privacy Policy

1. Information we collect

Account information

When you create an account, we collect your email address, name, and profile information from your chosen authentication provider (Google, GitHub, or Discord) or from the email you enter for email-based login.

Project data

We store the video projects you create, including prompts, generated scenes, scene source code, and project metadata.

Community data

When a project is made public in the community showcase, the following becomes visible to other users: project title, description, tags, scene source code, engagement metrics (likes and duplicates), and any exported video previews.

Payment information

We use Stripe to process payments. We do not store your credit card number or full payment details. We retain transaction history, subscription status, and balance information for billing purposes.

Media uploads

Images, audio files, and video files you upload are stored on our cloud storage infrastructure (Cloudflare R2) and associated with your account.

Usage analytics

We collect anonymous usage data to improve our service, including page views, feature usage, and performance metrics.

API usage

If you use API keys to access the Service programmatically, we log API requests for security monitoring and billing purposes.

2. How we use your information

• To provide and maintain our video generation service
• To authenticate your account and ensure security
• To store and manage your video projects
• To process payments and manage subscriptions
• To display public projects in the community showcase
• To operate team features, including shared balances and member management
• To improve our service through analytics
• To communicate with you about service updates

3. Data storage and security

Your data is stored securely using industry-standard encryption. We use:

• Encrypted database connections (PostgreSQL on Neon)
• Secure cloud storage for generated videos and media (Cloudflare R2)
• Regular security audits and updates
• Access controls and authentication

4. Third-party services

Authentication

We use Google OAuth, GitHub OAuth, Discord OAuth, and email-based sign-in links (via NextAuth) for secure authentication. These services may collect additional data according to their own privacy policies.

Analytics

We use Google Analytics and Vercel Analytics to understand how our service is used. This data is anonymized and aggregated.

AI services

We use multiple AI providers to power different features of the Service. Your prompts and project data may be processed by these services according to their respective privacy policies:

• Anthropic (Claude): text generation and scene creation
• OpenAI (GPT): text generation and scene creation
• Google (Gemini, Veo): text generation and AI video generation
• Replicate (Seedance / ByteDance): AI video generation
• HeyGen: AI avatar generation
• MiniMax: AI voice synthesis

Payments

We use Stripe to process payments and manage subscriptions. Stripe may collect and process your payment information according to their privacy policy.

Storage

We use Cloudflare R2 for media and video storage, and Neon for database hosting.

5. Connected social accounts

You can connect your own YouTube, Instagram, Facebook Page and TikTok accounts so baz.studio can publish videos you choose and show how your accounts grow. We only connect accounts you authorize, and we only post when you press Post or schedule a post.

What we access

• Account identity: the account or channel ID, name, handle and profile picture, so you can see which account is connected.
• Publishing: we upload the video you selected, with the caption, title and settings you chose, to the accounts you picked.
• Statistics: follower or subscriber counts and views, likes and comments on videos you posted through baz.studio, for your growth dashboard.

We do not read your private messages, other people's content, or videos you did not publish through baz.studio.

YouTube and Google user data

baz.studio uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy. We request permission to upload videos to your channel and to read your channel's basic details and statistics, and use these only for the features above.

baz.studio's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train AI models.

You can revoke baz.studio's access at any time in your Google account permissions or by disconnecting the channel in baz.studio.

Instagram, Facebook and TikTok

For Instagram and Facebook Pages we use Meta's Instagram and Facebook Graph APIs, under Meta's Privacy Policy. For TikTok we use TikTok's Login Kit and Content Posting API, under TikTok's Privacy Policy. You can remove access from those apps' settings at any time.

Storage, sharing and deletion

Access tokens are encrypted at rest (AES-256-GCM) and used only by our servers to act on your behalf. We do not share data from your connected accounts with third parties, except the AI services listed above when you ask baz.studio to write a caption. When you disconnect an account we delete its stored tokens immediately and, where the platform supports it, revoke our access. Statistics saved for your dashboard are deleted when you delete your baz.studio account. To have them deleted sooner, contact us.

Deleting your social account data

To remove a connected YouTube, Instagram, Facebook Page or TikTok account, open Social manager, go to Accounts and remove it. Its tokens are deleted straight away. You can also remove baz.studio from the platform itself: on Facebook under Settings → Business integrations, on Instagram under Settings → Apps and websites, on Google under Third-party apps and services, and on TikTok under Settings → Security → Apps. To have all data from your connected accounts deleted, including saved posts and statistics, email jack@baz.studio from your account's email address. We delete it within 30 days and confirm by email.

6. Community and public data

When a project is made public (either by you or automatically for free-plan users as described in our Terms of Service), certain project data becomes visible to all users, including:

• Project title, description, and tags
• Scene source code and preview videos
• Engagement metrics (likes and duplicate counts)

Your email address and personal account details are not displayed publicly through the community showcase. baz.studio may display your username alongside public projects but is not obligated to.

7. Your rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your project data
• Opt out of analytics tracking
• Set your projects to private (available on paid plans)

8. Data retention

We retain your data for as long as your account is active. When you delete your account, we will delete your personal data within 30 days, except where required by law. Public projects that have been duplicated by other users may persist in those users' accounts as independent copies.

9. Children's privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page.

11. Contact us

If you have any questions about this Privacy Policy, please contact us at jack@baz.studio.