Privacy Policy

Audience AI Studio ("[PLACEHOLDER — Legal entity name]", "we", "us", or "our") operates the website https://www.audienceai.studio and related services (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. It applies to all users globally, and includes specific disclosures required under GDPR (EU), CCPA/CPRA (California), LGPD (Brazil), LFPDPPP (Mexico), PIPEDA (Canada), and COPPA (United States).

By using the Service, you acknowledge you have read and understood this policy. If you do not agree, please discontinue use.

We collect the following categories of information:

• •Account data: Your name, email address, and password hash (stored by our authentication provider, not directly by us).
• •Social media OAuth tokens: Access tokens issued by Instagram, TikTok, and YouTube when you authorize our app. We never see or store your social media password.
• •Performance data from platform APIs: Posts, views, engagement metrics, audience demographics, and reach data provided by the platforms you connect.
• •Billing data: Processed exclusively by Paddle (our Merchant of Record). We do not store your card number, bank details, or full billing address.
• •Usage data: Pages visited, features used, session duration, browser type, device type, and IP address.
• •AI-generated analysis: Insights, audience personas, content patterns, and recommendations generated by our AI from your performance data.

We use your data for the following purposes:

• ✓To generate reports and AI-powered insights (primary purpose)
• ✓To improve AI model accuracy — aggregate and anonymized data only, never identifiable
• ✓To process your subscription and send billing-related notifications
• ✓To send product updates and announcements (opt-out available at any time)

For users in the European Economic Area, our legal bases for processing personal data are:

• •Contractual necessity: Processing required to deliver the Service you subscribed to.
• •Legitimate interests: Anonymized product improvement and fraud prevention, balanced against your rights.
• •Consent: Marketing emails and optional analytics cookies — opt-in, revocable at any time.
• •Legal obligation: Compliance with platform API terms (Meta, TikTok, Google) and applicable tax law.

• •Active account: Data retained while your subscription is active.
• •Cancelled account: Deleted within 30 days of a verified deletion request.
• •Social media API data: Deleted within 90 days of disconnecting your account (required by Meta/Instagram Platform Terms).
• •Billing records: Retained for 7 years for tax and legal compliance.
• •Anonymized aggregates: May be retained indefinitely — not attributable to any individual.

We share data only with the following service providers, for the purposes stated:

• •Paddle: Payment processing and merchant-of-record services.
• •Vercel: Cloud infrastructure and hosting.
• •Meta (Instagram), TikTok, Google (YouTube): As required to retrieve performance data via their official APIs.

[PLACEHOLDER — Analytics tool]: If we use an analytics service (e.g., Vercel Analytics, Plausible), disclose it here and describe data shared.

Depending on your jurisdiction, you have the following rights regarding your personal data:

• ✓Right to access — request a copy of the data we hold about you
• ✓Right to correction — update inaccurate or incomplete data
• ✓Right to deletion — request erasure of your personal data
• ✓Right to data portability — receive your data in a structured, machine-readable format
• ✓Right to restrict processing — limit how we use your data
• ✓Right to object — object to processing based on legitimate interests
• ✓Right to opt out of AI profiling — CCPA 2026 (California users)

Mexico — ARCO rights (LFPDPPP): You have rights of Acceso (access), Rectificación (correction), Cancelación (deletion), and Oposición (objection). Submit requests to petsolutionsmx@gmail.com. We will respond within 20 business days. You may also file a complaint with INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales).

California — CCPA right to know: You may request disclosure of personal data collected from January 2022 onward. We will respond within 45 days.

To exercise any right, email petsolutionsmx@gmail.com or use the Delete my data page.

• •Strictly necessary cookies: Always active. Required for authentication and core functionality.
• •Analytics cookies: Require your consent. Used to understand how the Service is used.

We do not use advertising or third-party tracking cookies. You can manage cookie preferences through your browser settings.

Our infrastructure is hosted by Vercel. Your data may be processed in the United States or other countries where Vercel operates data centers.

For transfers from the EU/EEA, we rely on the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs) where applicable. All transfers comply with GDPR Chapter V requirements and applicable local law.

[PLACEHOLDER — confirm DPA agreements with Vercel and Paddle are in place]

• •Instagram / Meta: Data retrieved via the Instagram Graph API is used solely to provide insights to the account owner. It is not sold or redistributed. It is deleted within 90 days of account disconnection, per Meta Platform Terms.
• •TikTok: Data is used only for the stated purpose of generating audience insights, in compliance with TikTok Developer Terms of Service.
• •YouTube / Google: Use of YouTube data is governed by the Google API Services User Data Policy, including the Limited Use requirements.

• ✓TLS encryption for all data in transit
• ✓Encryption at rest for stored data
• ✓OAuth tokens are encrypted before storage
• ✓Access to user data is restricted to authorized personnel only

In the event of a data breach affecting your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours (GDPR) or as promptly as required under applicable law.

We may update this Privacy Policy from time to time. We will provide at least 30 days advance notice for material changes, and will notify you by email for significant updates.

The "Last updated" date at the top of this page reflects when this policy was last revised. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints, contact us at: petsolutionsmx@gmail.com

[PLACEHOLDER — Legal entity name and registered address]

• •EU users: You have the right to lodge a complaint with your local Data Protection Authority (DPA).
• •California users: You have the right to lodge a complaint with the California Privacy Protection Agency (CPPA).
• •Mexico users: You have the right to lodge a complaint with INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales).