Privacy Policy

Last updated: January 17, 2026

1. Introduction

Zojutsu LLC ("we," "us," or "our") operates the StudioVid platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to complying with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Data Controller

For the purposes of GDPR, Zojutsu LLC is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@studiovi.ai.

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, password, and profile information when you create an account
• Payment Information: Billing address and payment method details (processed securely through Stripe)
• Content Data: Scripts, video ideas, thumbnails, and other content you create using our Service
• Communications: Messages you send to us for support or feedback
• Contract Information: Business details you provide for contract and invoice generation

3.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns
• Device Information: Browser type, operating system, device identifiers, and IP address (anonymized - see below)
• Cookies and Tracking: Information collected through cookies and similar technologies (see our Cookie Policy)

3.3 Information from Third Parties

• YouTube API Services: Channel analytics, video performance data, and audience insights (with your authorization)
• Google OAuth: Basic profile information when you sign in with Google

4. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve our AI-powered YouTube tools
• Personalization: To customize your experience and provide relevant recommendations
• Analytics: To analyze usage patterns and improve our Service
• Communication: To send service updates, security alerts, and marketing communications (with consent)
• Payment Processing: To process subscriptions and handle billing through Stripe
• Contract Management: To generate and manage contracts through Simple Sign (our native e-signature solution)
• Email Services: To send transactional emails through Resend
• AI Processing: To generate content using the AIML API based on your inputs
• Legal Compliance: To comply with legal obligations and protect our rights

5. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

6. Data Sharing and Third Parties

We share your data with the following categories of third parties:

6.1 Service Providers

• YouTube API Services: For channel analytics and video data integration. Subject to Google Privacy Policy
• Stripe: For secure payment processing. Subject to Stripe Privacy Policy
• Google OAuth: For authentication services. Subject to Google Privacy Policy
• AIML API: For AI-powered content generation
• Simple Sign: Our native e-signature solution for electronic contract signing. Data is processed in accordance with this Privacy Policy
• Resend: For transactional email delivery. Subject to Resend Privacy Policy

6.2 Other Disclosures

We may also disclose your information:

• To comply with legal obligations or valid legal requests
• To protect our rights, privacy, safety, or property
• In connection with a merger, acquisition, or sale of assets
• With your explicit consent

7. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all third-party providers
• Certification under recognized frameworks where applicable

8. Data Retention

We retain your data for as long as necessary to:

• Provide you with our Service
• Comply with legal obligations
• Resolve disputes and enforce agreements

Account data is typically retained for the duration of your account plus 30 days after deletion. Some data may be retained longer for legal compliance (e.g., financial records for 7 years).

9. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

9.1 Right of Access

You can request a copy of all personal data we hold about you.

9.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data in certain circumstances.

9.4 Right to Data Portability

You can request your data in a structured, machine-readable format for transfer to another service.

9.5 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

9.6 Right to Restrict Processing

You can request limitation of processing in certain circumstances.

9.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting prior processing.

10. California Privacy Rights (CCPA)

California residents have additional rights under CCPA:

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell your data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

11. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. For detailed information about the types of cookies we use and how to manage them, please see our Cookie Policy.

12. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response procedures
• IP address anonymization for data minimization

13. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

14. YouTube API Services

StudioVid uses YouTube API Services to provide channel analytics and content optimization features. By using our Service, you agree to be bound by the YouTube Terms of Service.

14.1 YouTube Data We Access

When you connect your YouTube channel, we may access:

• Channel Information: Channel name, description, subscriber count, and profile picture
• Video Data: Video titles, descriptions, view counts, likes, comments, and upload dates
• Analytics Data: Performance metrics for your videos (views, watch time, engagement)
• Playlist Information: Your public and private playlists

14.2 How We Use YouTube Data

We use your YouTube data solely to:

• Display your channel analytics within our dashboard
• Generate AI-powered content recommendations and optimizations
• Provide personalized insights to improve your video performance
• Compare your metrics with industry benchmarks (anonymized)

We do not sell, share, or transfer your YouTube data to third parties except as necessary to provide our Service (e.g., AI processing for content generation).

14.3 YouTube Data Storage and Retention

YouTube data is cached temporarily to improve performance and reduce API calls. When you disconnect your YouTube channel or delete your account, we delete all associated YouTube data within 30 days.

14.4 Revoking Access

You can revoke StudioVid's access to your YouTube data at any time through Google Security Settings. Upon revocation, we will delete your YouTube data within 30 days.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our Service or sending you an email. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@studiovi.ai
• Data Protection Officer: dpo@studiovi.ai