Privacy Policy

HY Studio ("we", "our", "us") operates the HY Studio marketing workspace. This policy describes what data we collect, why we collect it, and how we protect it when you use our website and application.

1. Who we are

Business name: HY Studio
Product: Web-based AI marketing studio (content generation, campaigns, scheduling, social integrations).
Contact: noreply@aaracollections.in

2. Information we collect

• Account data: Name, email address, authentication identifiers (including Firebase / Google sign-in when you choose that option).
• Business profile: Company name, industry, audience, brand voice, and goals you enter during onboarding.
• Content you create: AI-generated images, video, captions, ads copy, campaigns, schedules, and assets you save in the workspace.
• Social & Meta integrations:When you connect Instagram, Facebook, or WhatsApp, we receive tokens and profile identifiers authorized by you through Meta's OAuth process, plus webhook events (e.g. inbound WhatsApp messages) needed to provide messaging features.
• Usage & technical data: Logs, device/browser type, and API requests needed to operate and secure the service.

3. How we use information

• Provide, maintain, and improve HY Studio features.
• Generate AI content using your business profile and prompts.
• Connect and manage linked social and WhatsApp Business accounts.
• Send service-related email (e.g. verification, password reset) when applicable.
• Comply with law and prevent abuse or fraud.

4. Sharing with third parties

We may share data with service providers that help us run the product, including:

• Meta (Facebook, Instagram, WhatsApp) — when you connect those products.
• Cloud hosting, database (Hasura/PostgreSQL), email (Resend), AI providers, and media storage (e.g. Cloudinary) — only as needed to deliver the service.

We do not sell your personal information.

5. Data retention

We retain your data while your account is active and as needed to provide the service. You may request deletion as described on our Data Deletion page.

6. Security

We use industry-standard measures including encrypted transport (HTTPS in production), access controls, and secure storage of secrets. No method is 100% secure; contact us if you believe your account was compromised.

7. Your rights

Depending on your location, you may have rights to access, correct, or delete personal data. Use the data deletion page or email us to exercise these rights.

8. Changes

We may update this policy. The "Last updated" date at the top will change when we do. Continued use after changes means you accept the updated policy.