Privacy Policy

Last updated: 28 April 2026

This Privacy Policy explains how SurfStats Studio collects, uses, stores, and protects information when you use our creator studio for videos, images, thumbnails, scripts, audio, clips, and related creative workflows.

1) Who operates SurfStats Studio

SurfStats Studio is operated by SurfStats Studio Software cc. Questions can be submitted through the public Support page.

2) Information we collect

A. Account information

We collect account details needed to create and secure your account, such as your name, email address, login method, and account settings.

B. Content and project information

SurfStats Studio stores the prompts, scripts, project settings, generated assets, uploaded media, thumbnails, videos, audio, and other content you create or manage inside the app.

C. Usage and technical information

  • Usage data: pages viewed, actions taken, timestamps, and basic diagnostics.
  • Device and network data: IP address, browser type, operating system, and basic device information.
  • Cookies and similar technologies: used for sessions, security, fraud prevention, and preferences such as theme.

D. Billing metadata

If you purchase a subscription or credits, payment processing is handled by third-party providers. We typically receive limited billing metadata such as plan, status, and transaction identifiers. We do not store full payment card details on our servers.

3) How we use your information

  • To create and secure your account.
  • To store your projects and provide the features you request.
  • To process generation requests for scripts, thumbnails, images, audio, captions, clips, and videos.
  • To maintain security, prevent abuse, and troubleshoot performance issues.
  • To communicate with you about support, account issues, and important service updates.
  • To comply with legal obligations and enforce our terms.

4) Google Sign-In and Google API Services

SurfStats Studio supports Sign in with Google for account access. In this build, Google Sign-In requests only the standard basic scopes: openid, profile, and email.

When you sign in with Google, we receive basic identity information needed to authenticate you and create or access your SurfStats Studio account, such as your name, email address, and Google account identifier.

Normal Google Sign-In does not request YouTube channel, YouTube Analytics, upload, publish, edit, or delete scopes. The current build keeps YouTube channel connection disabled and separate from basic account access. See the Google Access and YouTube Data Use pages for a plain-language summary.

Google API Limited Use commitments

SurfStats Studio's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • We do not sell Google user data.
  • We do not use Google user data for advertising.
  • We do not use Google API data to develop, improve, or train generalized AI or machine-learning models.
  • We do not transfer Google user data to third parties except when needed to operate the feature you requested, comply with law, or protect the rights, safety, and security of the Service and its users.
  • Human access to Google API data is limited to support, security, abuse prevention, legal compliance, and cases where you ask us for help.

Token storage, retention, and revocation

To keep Google Sign-In working, SurfStats Studio may store Google-issued login tokens or account identifiers in its database. We retain this data only while needed to provide account access, until you remove the connection or delete your account.

You can revoke SurfStats Studio's Google access from your Google permissions page at myaccount.google.com/permissions. More details are on the public Data Deletion page.

5) AI processing and other third-party providers

SurfStats Studio uses selected third-party providers to deliver features you request. Depending on the feature, your prompts, files, and related technical metadata may be sent to providers such as Google, OpenAI, ElevenLabs, and other infrastructure or AI providers solely to provide the requested result.

  • Google for Google sign-in and selected cloud or AI services where enabled
  • OpenAI for selected AI generation features where enabled
  • ElevenLabs for selected voice features where enabled
  • LemonSqueezy and payment providers for subscriptions, checkouts, and billing-related events

6) Sharing of information

We do not sell your personal information. We may share information only in these limited situations:

  • With service providers that help us operate SurfStats Studio
  • When required by law, legal process, or valid governmental request
  • To protect our rights, users, systems, and the public from fraud, abuse, or security threats
  • As part of a merger, sale, or business reorganization, subject to applicable law

7) Data retention

We keep account and project data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Google sign-in data and related tokens are removed when you remove them using the deletion controls or delete your account, subject to reasonable backup and recovery cycles.

8) Security

We use reasonable administrative, technical, and organizational measures to protect information. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

9) Your choices

  • You may sign in with email and password instead of Google.
  • You may delete Google sign-in data and delete your account from the controls in the product.
  • You may revoke SurfStats Studio's Google access from myaccount.google.com/permissions.

10) International transfers

Depending on the providers used to operate the Service, your data may be processed in countries other than your own. Where required, we take reasonable steps to use providers and safeguards appropriate for those transfers.

11) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date above shows when changes were made. Continued use of the Service after an update becomes effective means you accept the updated policy.

12) Contact

Questions about privacy, Google API data, or deletion requests can be submitted through the public Support page.