HitStudio Privacy Policy
What is processed, by whom, for how long, and your rights.
This Privacy Policy describes the data processed by HitStudio, called Studio below, available at gethitstudio.com and studio.appelia.cloud.
Data controller: Axel MOY, 8 rue du Priet, 80135 Millencourt-en-Ponthieu, France. Contact: contact@gethitstudio.com.
What is processed, and why
- The account: email address, password (hashed, never readable), date the terms were accepted, billing details if you provide them. Legal basis: performance of the contract.
- The brand file: product, price, texts, uploaded visuals, access to the social accounts you connect (tokens encrypted at rest by the system, never displayed). Legal basis: performance of the contract.
- Service logs: creations built, posts, measurements, spending, tasks, logins (IP address and browser, to limit attempts). Legal basis: legitimate interest in running and securing the service.
- Messages: your address receives a weekly summary and alerts about your workspace (a video to review, a verdict, low credits), which can be turned off from your account and through the link in each message; the date and subject of each message are kept so it is never sent twice. Legal basis: performance of the contract.
Four cookies, all set by Studio itself: the session cookie, strictly necessary; two that remember your choices of theme, light or dark, and of language; and, only while you connect a network, a connection cookie (studio-oauth- followed by the network’s name), which ensures the authorization finishes in the browser that started it, valid ten minutes and deleted on return. None tracks your browsing, none is set by a third party, and there is no audience measurement on this site.
A video’s tracked link (address starting with /l/): each tap adds one to the video’s daily counter, then leads to the page the brand chose. No IP address, no cookie, no browser details: we count, keeping nothing about the person.
Shopify or WooCommerce store connected: Studio reads orders from the last sixty days, read-only, and keeps only the ID, day and amount of those attributed to a video. No name and no address of any customer. Disconnecting erases the access.
How long
As long as the account exists. When it is deleted, everything is erased from the service immediately, and from backups within seven days (they are only kept for seven days), except what the law requires to keep: payment records and invoices, kept ten years (accounting obligation, Article L123-22 of the French Commercial Code) at Studio and at Stripe, and the internal log of build spending, which carries the brand’s short name but no address and no content. Login logs: fifteen minutes for attempts, thirty days for sessions. Data from YouTube follows its own, shorter rules, detailed below.
Who has access
The publisher, and the processors below, each for what it does. Your product’s visuals and texts are sent to the generation providers when you build a generated creation, and only then.
| Processor | For what | Where |
|---|---|---|
| Hostinger | hosting of the service and its data (VPS) | European Union (Lithuania) |
| Anthropic | writing scripts and copy, reading the brand’s website, subjects and reference videos | United States (outside the EU, standard contractual clauses) |
| fal.ai | generating images, talking footage and animated shots, transcription | United States (outside the EU, standard contractual clauses) |
| ElevenLabs | voice and music synthesis | United States (outside the EU, standard contractual clauses) |
| Google (YouTube) | posting and reading views, with the brand’s account | United States (outside the EU, standard contractual clauses) |
| TikTok | posting and reading views, with the brand’s account | Singapore and United States (outside the EU, standard contractual clauses) |
| Meta (Facebook, Instagram) | posting to Instagram (coming soon), reading spend and purchases, uploading ads, with the brand’s account | Ireland and United States (outside the EU, standard contractual clauses) |
| Stripe | payment and billing: company name, address, email address, VAT number | Ireland and United States (outside the EU, standard contractual clauses) |
| Resend | sending the service’s messages (weekly summary, alerts) to the account address | United States (outside the EU, standard contractual clauses) |
| Brevo (Sendinblue SAS) | sending the service’s emails (weekly summary, alerts) to the account address | France |
YouTube
Studio uses YouTube API Services to upload, to the channel you connect yourself, the videos it built for you, and then to read the views of those videos. By connecting a channel, you agree to the YouTube Terms of Service; what Google receives is processed under the Google Privacy Policy.
When publishing or scheduling, you choose the title, the description and the privacy status of the video (public, unlisted or private). Nothing goes to YouTube without that choice.
The YouTube data Studio reads, stores and uses
| Data | Where it comes from | What Studio does with it | How long |
|---|---|---|---|
| The access authorization for your channel (OAuth) | Your consent on Google’s screen | Upload the videos you publish from Studio, and read their views. Nothing else. | Until “Disconnect”, until access is revoked at Google, or until the account is deleted. Encrypted at rest, never displayed. |
| Your channel’s ID and name | YouTube (channels.list) | Show you which channel is connected. | Refreshed every week. Deleted on disconnection. |
| The ID, URL and privacy status of each video you published | YouTube (videos.insert, videos.list) | Check that the video is public, and link it to the creation that produced it. | Refreshed every week. Deleted with the brand or the account. |
| The view count of those videos | YouTube (videos.list, public statistics) | Compare your creations with each other, seven days after posting, and tell you which works best. | As long as your channel stays connected. Deleted on disconnection, channel change, revocation at Google, or with the account. |
Studio does not modify or delete any video already on your channel, and reads neither your comments, nor your subscribers, nor your revenue. This data is not sold, not shared with any third party and not used for advertising; it only serves you. Studio lets no third party serve content or ads on its pages, and stores on your device only the four cookies described above.
You can revoke Studio’s access whenever you like: from Settings, “Networks”, “Disconnect” revokes the token at Google then deletes it here. You can also do it yourself from your Google account permissions page. To have your YouTube data deleted without deleting your account, write to the publisher (contact@gethitstudio.com): it is deleted within seven days, backups included.
Removing a network’s access
“Disconnect”, in Settings, “Networks”, first asks the network to revoke Studio’s authorization, then deletes the token here. The screen tells you what the network answered: if revocation could not be done, it is never shown as done, and you are given the link to do it yourself. The token itself leaves Studio in every case.
Two caveats, stated rather than hidden. Instagram: Meta publishes no way to revoke an “Instagram API with Instagram Login” token, so Studio cannot do it for you: it deletes the token and stops using it, and you remove the app from Instagram, Apps and websites. TikTok and Meta: revocation removes Studio’s whole authorization on the account, not just one token.
Deleting a brand, or deleting your account, revokes access to each of its networks before deleting the tokens: a token surviving in a backup would be worth nothing.
California residents
Categories of personal information collected: identifiers (email address, IP address), commercial information (plan, payments, billing details), the content you upload (product, texts, visuals) and your activity on the service (logins, logs). They come from you and from the networks you connect, and serve only to provide the service described above; each processor listed above receives them as a service provider, for its task only.
We do not sell your personal information and do not share it for cross-context behavioral advertising. You have the right to know and access the personal information we hold about you, to have it corrected or deleted, and not to be discriminated against for using these rights. To make a request, write to contact@gethitstudio.com; export and deletion are also available from your account settings.
Your rights
Access, rectification, portability and erasure: from your account settings, export gives you all your data in one file, delete erases the account, its brands, its logs and its access. Any other request, or a complaint to the CNIL (the French data protection authority): the publisher (contact@gethitstudio.com) answers within 30 days, erasure included. You may also object to processing based on legitimate interest, ask for it to be restricted, and lodge a complaint with the CNIL.