Studi0 Privacy Policy

Effective date: 12 September 2026.

1. Who we are

Studi0 helps authorised users prepare, review, schedule and publish social media content. This policy explains how personal information is handled when you use Studi0 at studi0.app and its connected social media integrations.

Studi0 is operated by M1, referred to below as “we”, “us” or “our”. We are the controller of personal information used to administer Studi0, secure the service and respond to enquiries.

Privacy contact: sammy@fetchapp.cc.

Business correspondence address: 69 Adelaide Road, Chichester.

Where a business uses Studi0 to process personal information in its own content, that business determines the purpose of that processing and is responsible for its own privacy obligations. We handle that content on its instructions where we act as its processor. This notice does not replace any required data-processing agreement.

2. Information we handle

Depending on the features you use, we handle:

  • Account and workspace information: your name, email address, sign-in identifiers, workspace membership, role and preferences such as time zone.
  • Connected social account information: the account or Page name, handle, provider identifier, account type, permissions granted, connection status and credential-expiry information. Access and renewal credentials allow the service to carry out the actions you authorise.
  • Content you provide: brand information, source material, prompts, captions, hashtags, links, images, accessibility descriptions and other material you upload or enter. This may contain personal information about you or others.
  • Workflow and publishing records: revisions, review decisions, schedules, destination identifiers, publishing attempts, provider responses, post identifiers and links, errors and audit events.
  • Support and technical information: information you send when requesting help, together with technical information processed by our hosting and authentication services, such as IP address, browser details, request times and security logs.

We receive information from you, your authorised workspace users, your sign-in provider and social platforms you connect. Connecting a platform does not give us unrestricted access to everything in your account. Access depends on the permissions you grant and the features you use.

3. Why we use information

We use information to authenticate users; manage workspaces and access; store and prepare content; provide requested AI assistance; obtain and record reviews; deliver approved content to selected destinations; check publishing outcomes; diagnose failures; protect accounts; and answer support or privacy requests.

Where UK data-protection law applies, we rely on:

  • Contract: where processing is necessary to provide the service you have requested under our agreement with you.
  • Legitimate interests: to administer business-user access, keep the service secure and reliable, prevent misuse, maintain proportionate operational records and handle enquiries, balanced against your rights.
  • Legal obligations: where we must retain or disclose information to comply with applicable law.
  • Consent: where required for optional uses such as non-essential cookies or marketing. You may withdraw consent without affecting the lawfulness of processing before withdrawal.

Social-platform authorisation controls our technical access. It does not automatically serve as the legal basis for every use of personal information.

4. Facebook, Instagram and other connected platforms

If you connect Facebook or Instagram, Studi0 uses the permissions you grant to identify eligible accounts or Pages, prepare and publish content you approve, and check the outcome of those actions. Other connected platforms, including LinkedIn where enabled, are used for the corresponding features you authorise.

Publishing sends the selected text and media to the selected platform. That content may become public, depending on the destination and visibility settings. Each platform processes information under its own privacy policy and controls its own distribution, retention and account restrictions.

You can disconnect an integration in Studi0 where available, or revoke Studi0's access through the platform's app or business-integration settings. Revoking access does not by itself delete information already held by Studi0 or remove posts already published. Contact us to request deletion of information we hold; published posts may also need to be removed directly on the relevant platform.

We use information obtained from Meta APIs to provide the connected features you request. We do not sell that information or use it for unrelated advertising. Meta-derived account information and credentials are not included in our AI generation briefs.

5. Optional AI assistance

When you request AI-generated captions, images or accessibility descriptions, relevant brand information, source material, prompts and, where the feature requires it, images are sent to the AI provider to produce the requested result. The current generation integration uses OpenAI. Generated candidates and related generation records may be stored in your workspace.

Only submit personal information you are authorised to use and that is necessary for the task. AI outputs can be inaccurate and need human review. Studi0's content assistance is not used to make decisions about individuals that have legal or similarly significant effects.

AI providers also process requests under their applicable service and privacy terms. This policy does not promise zero provider retention.

6. Who receives information

Information is available to authorised members of your workspace according to their access and to people you involve in reviewing content. We also use service providers to operate Studi0. The current service inventory includes:

  • WorkOS: authentication and connected-account authorisation services.
  • Convex: application backend, database and media storage.
  • Vercel: website hosting and delivery.
  • OpenAI: requested AI content-generation features.
  • Connected social platforms: receipt and processing of content and account actions you authorise.

These recipients receive information relevant to the services they perform. Social platforms may act as independent controllers. We may also disclose information where legally required, to protect legal rights, or to professional advisers subject to appropriate confidentiality obligations.

We do not sell personal information.

7. International processing

Our service providers may process information outside the UK, including in the European Economic Area and the United States. Where a restricted international transfer requires safeguards, we must use an applicable adequacy arrangement or appropriate contractual safeguards. Contact us for information about the arrangements applying to your data.

8. Retention and deletion

We keep personal information for as long as necessary for the purposes described in this policy. The relevant period depends on whether your account or workspace remains active, whether content is still needed for planned publishing, whether a support or publishing issue is unresolved, and whether a limited record is needed for security, legal obligations or legal claims.

Disconnecting a social account stops its use for future authorised delivery; it does not erase historical publishing or approval records. Deletion requests are reviewed and handled through our support and operational process. They are not a promise of immediate automated deletion. Where information must be retained, we will explain the reason and applicable limits. Backup copies may remain until the relevant backup-retention cycle ends.

To request access, export or deletion, email sammy@fetchapp.cc with the subject “Studi0 data request” and identify the account email, workspace and connected account or Page concerned. Do not send passwords or access tokens. We may ask for proportionate information to verify your identity and authority. We will respond within the time required by applicable law, normally one month under UK GDPR, and explain any permitted extension.

9. Cookies and security

Studi0 uses authentication cookies and related session technologies to sign you in, maintain your session and protect access. Blocking these may prevent sign-in or other essential features. Where non-essential cookies require consent, they must not be enabled without that consent. Connected social platforms have their own cookie practices.

We use access controls and server-side credential handling to help protect information. No online service can guarantee absolute security. Keep your sign-in account secure and contact us if you suspect unauthorised access.

10. Your rights

Depending on the law that applies and the circumstances, you may have rights to access, correct or erase your information; restrict or object to processing; receive certain information in a portable format; and withdraw consent. Some rights are subject to exemptions or limits. You can exercise them using the privacy contact above.

If UK data-protection law applies, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint/. You may also contact the relevant supervisory authority where you live or work. We would welcome the opportunity to address your concern directly.

11. Children and policy changes

Studi0 is intended for adult business users and is not directed at children. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

We may update this policy as the service or applicable requirements change. The published policy will show its effective date, and we will provide additional notice of material changes where required.