Privacy policy

Last updated: September 27, 2026

This policy explains how Social IA Studio collects, uses, stores, handles and shares user data in the web application and Chrome extension. We do not sell personal data, use data for personalized advertising or transfer data to third parties for purposes unrelated to the service.

1. Data controller and contact

Social IA Studio is responsible for processing data associated with the service. For privacy questions, support or requests concerning your data, you can write to contacto@socialiastudio.com.

2. Data we collect

We may process the following categories of data when you use Social IA Studio:

• Account data: email address, user identifier, session status, authentication tokens and data needed to sign in and maintain the account.
• Subscription and billing data: subscribed plan, subscription status, billing-period dates, Stripe customer and subscription identifiers, billing events and access status.
• Voluntary feedback: if you complete the feedback form, we store your answers, account identifier, plan and submission date to improve the product and record the 100-credit reward. The reward is granted only once and does not depend on your feedback being positive. Responses are private and are not published as testimonials.
• Data you provide: saved YouTube channels, prompts, scripts, style settings, generated and saved ideas, automation settings, download folders and product preferences.
• Data generated by the service: video ideas, scenes, visual prompts, motion prompts, competitor-analysis results, synchronization states and usage limits.
• Public YouTube data: titles, thumbnails, channel names, public channel and video identifiers, publication dates, view counts, publicly visible subscriber counts and other public metrics used by the competitor radar.
• Chrome extension data: signed-in user, session token, subscription status, prompts entered in the extension, prompt queue, reference image selected by the user, waiting settings, automatic download option and local state needed to run the automation.
• Technical data: IP address, user agent, server logs, errors, request times, security events and data needed for diagnostics, abuse prevention and operation of the service.
• Usage analytics: Google Analytics may collect pages visited, sessions, device, approximate location, traffic source and interactions with the website using its own measurement technologies.
• Our own acquisition source data: when you visit through a campaign-specific URL, we may save that route's visible code to your account when you sign up, so we can determine whether you later complete your first export or purchase. We do not use advertising cookies, local storage, GCLID or Google identifiers for this purpose.

3. How we collect data

• Data you enter directly in the web application or extension, such as email, password, channels, scripts, prompts and settings.
• Data generated automatically through product use, such as daily limits, synchronization status, saved ideas and technical logs.
• Public data obtained from YouTube or related APIs to analyze channels and videos you choose to monitor.
• Data received from Stripe when a subscription is created, updated, cancelled or renewed.
• Browsing and interaction data collected through Google Analytics.
• The source code included in a Social IA Studio campaign-specific URL when you decide to sign up from that page.

4. How we use data

• To create and maintain your account.
• To check whether you have an active subscription.
• To display the competitor radar, channels, ideas, library, scenes and history.
• To generate ideas and scenes using the information you provide and public competitor data.
• To let the extension perform the automation requested by you in ChatGPT, including pasting prompts, attaching a reference image and detecting/downloading generated images if you enable that option.
• To save preferences, sessions, drafts, job queues and settings needed for the app and extension to work.
• To apply usage limits according to your plan.
• To improve stability, diagnose errors, provide support and protect the service against abuse, fraud or unauthorized access.
• To analyze general website use, its pages, traffic sources and conversions through Google Analytics.
• To count visits to campaign-specific URLs in aggregate and internally measure how many registrations, first exports and first purchases come from each one.
• To meet legal, accounting or security obligations where applicable.

5. Chrome extension: permissions and data processed

The Social IA Studio Chrome extension works as a side panel to automate prompts in ChatGPT. It acts only when you open it, sign in and run a prompt queue. It may interact with pages on chatgpt.com or chat.openai.com to paste prompts, attach the reference image you selected, wait for results and download images when you enable automatic downloads.

The extension uses its permissions only for these purposes:

• sidePanel: display the Social IA Studio interface as a side panel in Chrome.
• storage: store your session, token, prompt drafts, queue settings, reference image, download folder and preferences locally.
• tabs: detect whether a ChatGPT tab is open and communicate with it to run automation initiated by you.
• scripting: load the automation script in ChatGPT when necessary to paste prompts, attach files and read image results generated in that tab.
• downloads: save generated images to the configured folder when you enable automatic downloads.
• host permissions for socialiastudio.com: authenticate you, verify your subscription and communicate with the Social IA Studio API.
• host permissions for chatgpt.com and chat.openai.com: run automation in your ChatGPT session.

The extension does not collect your general browsing history, record every page you visit, read content from other websites or run automation outside the listed domains. Prompts, reference images and settings may be stored locally in the browser through chrome.storage. Prompts or scripts you send to web-app features, such as idea or scene generation, may be sent to Social IA Studio servers for processing.

6. Storage and retention

• In the browser: the extension may locally store your session token, account email, draft prompts, reference image, queue settings, download folder and preferences. This data remains on your device until you delete it, sign out, uninstall the extension or clear browser storage.
• Google Analytics: the website loads the Google Analytics tag to measure page views, sessions and interactions. Google may use cookies or other measurement identifiers according to its own policy.
• Our own attribution: the website does not store cookies or advertising identifiers in your browser for this measurement. Visits to a campaign-specific URL are counted without IP, device or identifier; the source code is associated with an account only when registration is completed through that journey.
• In Social IA Studio: we store account and subscription data, monitored channels, ideas, library, usage limits, generated scenes and operational data needed to provide the service.
• Technical logs: we retain logs and security data for as long as reasonably necessary for diagnostics, security, abuse prevention and legal compliance.
• Deletion: you can request deletion of your account or data by writing to support. Some invoices, payment records or data needed to meet legal obligations may be retained for the period required by applicable regulations.

7. With whom we share data

We share data only when necessary to operate Social IA Studio, process payments, provide support, comply with the law or perform features you request. Parties with whom data may be shared include:

• Supabase: authentication, user and session management, and the application database.
• Stripe: payments, subscriptions, billing, customer portal, plan status and payment events. Social IA Studio does not store complete card numbers.
• Railway: hosting for the web application, API and backend services.
• Google Analytics: measurement of website traffic, navigation, interactions and conversions.
• OpenAI: processing of AI requests from the web app, such as idea or scene generation, when you use those features. Prompts or scripts submitted to those features may be processed by OpenAI to return the requested result.
• ChatGPT / OpenAI in your session: the extension may send prompts and reference images to the ChatGPT page you have open to automate an action you initiated. Social IA Studio does not control ChatGPT's privacy policy.
• YouTube / Google APIs: retrieval or consultation of public information about channels and videos you monitor.
• Authorities or other legal parties: where necessary to meet legal obligations, protect rights, investigate abuse or respond to valid requests from competent authorities.

We do not sell personal data or share it with data brokers. Attribution from campaign-specific URLs is calculated within Social IA Studio and is not sent to Google. We do not use or transfer data to determine creditworthiness, credit or purposes unrelated to Social IA Studio.

8. Payments

Payments are handled through Stripe. Stripe may process names, email addresses, billing data, payment methods, last digits of cards, payment status, subscriptions and invoices according to its own policies. Social IA Studio receives from Stripe the information needed to activate, update or cancel access to the subscribed plan.

9. Security

We use HTTPS, authentication, session tokens, access controls and separation of user data to protect information. No system is completely infallible, but we take reasonable measures to reduce the risks of unauthorized access, loss, alteration or misuse.

10. Your rights

You can request access to, correction, export or deletion of your personal data by writing to contacto@socialiastudio.com. You can also sign out, delete the extension's local data in your browser or uninstall the extension. Some requests may be subject to identity verification or legal retention obligations.

11. Children

Social IA Studio is not intended for children under 13. If we discover that an account was created in breach of this condition, we may delete it.

12. Changes to this policy

We may update this policy to reflect product changes, legal requirements or provider changes. We will publish the current version on this page with its last-updated date.