Studio Apps Team Privacy Policy

This Privacy Policy explains how Studio Apps Team handles personal data in Studio Apps Manager, the internal platform we use to manage our apps and their social media accounts. Each of our apps has its own privacy policy for the people who use the app itself; this policy covers the platform, and in particular how we handle messages and comments that people send to our social media accounts.

Who we are

Studio Apps Team is an independent app studio and the data controller for the data described here. For any privacy-related matter, contact us at studio.apps.team@gmail.com.

What this policy covers

Studio Apps Manager lets our team read and reply, from one place, to the comments and direct messages received by the social media accounts of our apps (for example, the Instagram account of IronHex). We only connect accounts that we own and manage. To do so we use the official APIs provided by the social networks (such as Meta's Instagram API), with the permissions the account owner grants.

What data we process

When you interact with one of our connected accounts, we may receive and store:

• Comments you post on our accounts' publications: the text, the date, whether the comment is hidden, and your public username and network-scoped user ID.
• Direct messages you send to our accounts: the text, the date, links to any attachments you share, and your public username and network-scoped user ID.
• Our replies to you, and which member of our team sent them.

We also store information about our own accounts and publications (captions, links, thumbnails, like and comment counts, follower counts). We do not receive your password, your private profile information, or your list of followers, and we do not access accounts that do not belong to us.

Why we use it

• To read and answer the comments and messages you send us.
• To moderate comments on our own publications (for example, hiding spam or abusive content).
• To keep track of which conversations are pending and to see aggregate activity on our accounts.

We do not sell your data, we do not use it for advertising or profiling, and we do not make automated decisions about you based on it.

Legal basis

We process this data on the basis of our legitimate interest in answering the people who contact us and in managing our own social media accounts (GDPR Article 6(1)(f)). You choose to contact us; you can stop at any time.

Storage, security and access

The data is stored in a secure cloud database (Supabase) and the platform is hosted on Vercel. All data in transit is encrypted with TLS, and the access tokens that connect our accounts are stored encrypted. Only members of our team who have been explicitly granted access to a project's social inbox can see its messages.

Third parties

We share this data only with the service providers needed to run the platform: Supabase (database), Vercel (hosting) and the social network the message came from (for example, Meta for Instagram), each under its own privacy terms. Some of these providers may process data outside the European Economic Area; where this happens, appropriate safeguards such as Standard Contractual Clauses apply.

How long we keep it

We keep comments and messages while the social media account that received them remains connected to our platform. When we disconnect an account, all the comments, messages and related data stored for it are deleted. You can also ask us to delete your data at any time (see below).

Data deletion

To request the deletion of the data we store about you from a social network:

1. Send an email to studio.apps.team@gmail.com with the subject "Data deletion request".
2. Include your username on the social network (for example, your Instagram username) and which of our accounts you interacted with, if you know it.

We will delete all the comments, messages and profile information we store about you within 30 days and confirm it by email. Please note that this removes the data from our platform only; content you published on the social network itself (for example, a comment on Instagram) must be deleted there.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and to data portability. To exercise any of these rights, contact us at studio.apps.team@gmail.com. You also have the right to lodge a complaint with your national data protection authority; in Spain, the Agencia Española de Protección de Datos (aepd.es).

Children

Our accounts are not directed at children under 16, and we do not knowingly process their data. If you believe a child has contacted us, write to us and we will delete the data.

Changes to this policy

We may update this policy, for example if we add new features to the platform. The date of the latest update is shown at the top of this page.

Contact

For any question about this policy or your data, contact us at studio.apps.team@gmail.com.