1. Who this policy applies to
This Privacy Policy applies to people who visit our website, create or use an SM Studio account, participate in an organization workspace, connect a social media account, or contact us. In this policy, “SM Studio”, “we”, and “us” refer to the operator of the SM Studio service.
If an organization provides your access, that organization may separately control content and personal information placed in its workspace. Contact the organization first for questions about its use of that information.
2. Information we process
Account and organization information
We process account identifiers, email addresses, authentication records, organization membership, company identity settings, brand guidelines, and workspace preferences.
Content and project information
We process ideas, prompts, uploaded brand assets and references, generated copy and images, edits, comments, approvals, scheduled publication details, and project history.
Meta and social connection information
When you connect Facebook or Instagram, we receive identifiers and display names for the Pages or professional accounts you authorize, permission information, access tokens, token expiry information, and publishing results. We do not receive or store your Facebook or Instagram password.
Technical information
We may process IP address, browser and device information, request logs, error reports, security events, and basic usage information necessary to operate and protect the service.
3. How we use information
- Provide, secure, maintain, and troubleshoot SM Studio.
- Generate content using the organization identity and project instructions you provide.
- Publish or schedule content to the social accounts you explicitly select.
- Maintain project history, collaboration, feedback, and organization isolation.
- Respond to support, privacy, and security requests.
- Prevent abuse and comply with applicable legal obligations.
We do not sell personal information or social account data. We do not publish content without an action or schedule initiated by an authorized user.
4. AI and service providers
To provide the service, selected project content may be processed by AI model providers for text or image generation. We also use infrastructure providers for hosting, databases, object storage, delivery, monitoring, and email. These providers process information on our behalf under contractual and security obligations.
Do not upload sensitive personal information, confidential health records, passwords, or content you are not authorized to use.
5. Meta Platform data
We use Meta Platform data only to display authorized social destinations, maintain the connection, and perform publishing actions requested by workspace users. Access tokens are encrypted at rest and scoped to the organization that created the connection. Disconnecting an account prevents new publishing through that connection.
Meta’s own processing is governed by Meta’s terms and privacy policy. SM Studio is not endorsed by or affiliated with Meta Platforms, Inc.
6. Legal bases
Where data-protection law requires a legal basis, we generally rely on performance of our contract, legitimate interests in operating and securing the service, consent where requested, and compliance with legal obligations.
7. Retention
We retain account and workspace information while the relevant account or organization remains active and for a limited period afterward for security, recovery, dispute resolution, and legal compliance. Social access tokens are retained until disconnected, expired, deleted, or no longer needed. Backups may retain deleted data temporarily until their normal rotation completes.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete personal information. Workspace administrators can manage organization content and social connections. You can also follow our data deletion instructions or contact us.
9. Security and international processing
We use access controls, organization-level isolation, encryption of social access tokens, HTTPS, backups, and operational monitoring. No system is completely secure. Information may be processed in countries other than your own, subject to appropriate safeguards where required.
10. Children
SM Studio is a business service and is not directed to children under 16. We do not knowingly collect personal information from children.
11. Changes and contact
We may update this policy as the service or legal requirements change. Material changes will be indicated by a new “Last updated” date or an in-product notice.
Privacy questions and requests: privacy@kankatech.com