Privacy Policy

This Privacy Policy explains how OneStudio ("we", "our", or "us") collects, uses, shares, and protects information when you use our website and product (the "Service"). By using the Service, you agree to this Policy.

1. Information We Collect

1.1 Account information

When you create an account we collect your email address, display name, password hash, and authentication tokens. If you sign in via a third party (e.g. Google), we receive your basic profile (name, email, avatar) from that provider.

1.2 Content you create

Prompts, uploaded images, uploaded videos, generated images, generated videos, scripts, storyboards, and project settings are stored on our infrastructure so we can deliver the Service to you and your teammates.

1.3 Usage data

We collect server logs (IP, user-agent, request path, response status) and product analytics (page views, feature usage, model selections) via PostHog. We do not sell this data.

1.4 Payment data

Payments are processed by Stripe. We store the Stripe customer / subscription identifiers and your billing tier — never your card number.

2. How We Use Information

• To provide, maintain, and improve the Service.
• To process payments, send receipts, and enforce subscription limits.
• To send transactional email (password resets, important account notices).
• To detect, prevent, and respond to abuse, fraud, and security incidents.
• To comply with legal obligations.

3. Third-Party Model Providers

To generate images and videos, we forward your prompts and reference uploads to the third-party model provider you select (e.g. ByteDance Seedance, Kling AI, OpenAI, Google). Each provider operates under its own privacy policy. We don't control how providers retain or train on prompts; review their policies if this matters to you.

3.5 Cookies & Similar Technologies

OneStudio uses three categories of cookies. You choose which are set when you first visit the site, and you can change your choice at any time from the "Cookie preferences" link in the footer.

• Necessary — always on. Auth session, CSRF protection, checkout security (Stripe fraud detection). The Service will not work without these.
• Analytics — off by default. Product usage and page-view analytics through PostHog and Google Analytics (GA4). Helps us learn what to improve.
• Advertising — off by default. Google Ads conversion tracking and remarketing, delivered through Google Tag Manager. Measures our ad performance and lets us reach similar audiences.

When you accept or reject a category we also record a consent audit entry (timestamp, action taken, a salted hash of your IP address, browser user-agent, and country) so we can prove which choice you made if asked. We do NOT store your raw IP address.

4. Storage & Retention

Account data and project content are stored as long as your account exists. Generated assets are kept until you delete them or close your account. Server logs are retained for up to 90 days, analytics events for up to 12 months.

5. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal information, and to object to processing. To exercise any of these, contact us at privacy@onestudio.video.

6. Children

The Service is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has used the Service, contact us and we will remove the account.

7. Security

We use industry-standard practices (TLS in transit, encrypted-at-rest storage, scoped API tokens, audit logging). No system is 100% secure — please use a strong password and notify us immediately if you suspect unauthorized access.

8. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced via email or an in-product banner before they take effect. Continued use of the Service after the effective date constitutes acceptance.

9. Contact

Questions about this Policy: privacy@onestudio.video · or via our support page.