AP Studio icon AP Studio Short-form video workspace Open dashboard
Legal

Privacy Policy

This Privacy Policy explains how AP Studio accesses, uses, stores, protects, shares, and deletes information, including Google and TikTok user data obtained through OAuth authorization.

Effective date: July 22, 2026 Service: AP Studio Contact: sarievibragim8@gmail.com

1. Scope and service operator

This Policy applies to the AP Studio website, dashboard, account connections, generation tools, publication workflows, and related support services available through this domain.

AP Studio is the service name used for the application. Privacy-related inquiries may be sent to sarievibragim8@gmail.com.

2. Information AP Studio may process

Account and service information

  • AP Studio account identifiers, email address, profile settings, and session information.
  • Project settings, templates, generated media, titles, captions, voice scripts, and publication schedules.
  • Technical events, security events, error logs, browser information, and IP-related request metadata.

Connected-platform information

  • OAuth client configuration entered by an authorized administrator.
  • OAuth access tokens, refresh tokens, token expiry times, and granted scopes.
  • Channel or profile identifiers, display names, avatars, connection status, and publication results.
  • Information returned by a platform when needed to complete an action requested or enabled by the user.

AP Studio does not ask users to provide their Google, YouTube, or TikTok account passwords. Password entry and authorization take place on the relevant platform's own website.

3. How information is used

Information is processed only as reasonably necessary to:

  • create and maintain the user's AP Studio account;
  • generate, store, preview, and manage user-selected media;
  • connect accounts through official OAuth authorization;
  • upload content or perform platform actions requested or enabled by the user;
  • refresh authorized access tokens and display connection status;
  • operate user-configured schedules and automation controls;
  • detect errors, prevent abuse, maintain security, and provide support;
  • comply with legal obligations and enforce the Terms of Service.

AP Studio does not use connected-platform user data for targeted advertising, credit decisions, or the training of generalized artificial intelligence models.

4. Google and YouTube user data

AP Studio accesses Google user data only after the user explicitly grants permission through Google's OAuth consent screen.

The YouTube authorization is used to upload videos selected or created by the user to the user's own connected YouTube channel, maintain the authorized connection, display connection status, and process related results or errors.

AP Studio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is not sold. It is not transferred or disclosed for advertising, profiling, data brokerage, or purposes unrelated to the user-facing functionality described in this Policy.

5. TikTok user data

When a user connects TikTok through Login Kit, AP Studio may receive basic profile information authorized by the user, such as an Open ID, display name, avatar, granted scopes, access token, refresh token, and token expiry information.

This information is used to identify the connected TikTok profile, display it in the user's dashboard, maintain the authorized connection, and support functionality separately approved by TikTok.

6. Sharing, transfer, and disclosure

AP Studio does not sell Google user data, TikTok user data, OAuth tokens, or personal information.

AP Studio does not share, transfer, or disclose connected-platform user data to third parties except in the following limited circumstances:

  1. Platform processing. Information is transmitted to Google, YouTube, TikTok, or another connected platform when necessary to perform an action authorized by the user.
  2. Infrastructure providers. Hosting, storage, networking, monitoring, or security providers may process data only as necessary to operate and protect AP Studio on the service operator's behalf.
  3. Legal and safety requirements. Information may be disclosed where required by applicable law, valid legal process, or where reasonably necessary to protect users, the service, or others from fraud, abuse, or security threats.
  4. Business continuity. If the service is reorganized or transferred, data may be transferred subject to this Policy and applicable legal requirements. Users will be notified where required.

Service providers are not permitted to use connected-platform user data for their own independent advertising or data-sale purposes.

7. Data protection and security mechanisms

AP Studio uses technical and organizational controls designed to protect sensitive data against unauthorized access, alteration, disclosure, or destruction. These controls include:

  • HTTPS/TLS encryption for data transmitted between the browser and the service;
  • AES-256-GCM encryption for stored OAuth credentials, access tokens, and refresh tokens;
  • server-side access controls and separation of user data;
  • restricted filesystem permissions for encryption secrets and sensitive configuration;
  • authentication, session controls, and role-based restrictions for administrative actions;
  • logging and diagnostics intended to identify failures and suspicious activity;
  • controlled backups and operational recovery procedures.

No internet service can guarantee absolute security. Users should protect their AP Studio account, revoke access they no longer need, and report suspected security incidents promptly.

8. Data retention

Information is retained while it is needed to provide the service, maintain an authorized connection, comply with legal obligations, resolve disputes, prevent abuse, and maintain operational records.

When a connected account is removed, AP Studio stops using that connection and removes its active stored authorization record. Residual encrypted copies may remain in protected backups until those backups are rotated or deleted.

Content already published to YouTube or TikTok remains on the relevant platform until the user removes it there.

9. User choices, access revocation, and deletion

  • Users may disconnect YouTube or TikTok accounts from the AP Studio dashboard.
  • Google access may also be revoked through the user's Google Account security settings.
  • TikTok access may also be revoked through TikTok account settings.
  • Users may request deletion of AP Studio account data using the instructions on the Data Deletion page.
  • Users may contact AP Studio to request access to, correction of, or deletion of personal information, subject to applicable law.

10. Policy changes and contact

This Policy may be updated when the service, legal requirements, or connected-platform policies change. The effective date displayed above will be updated when material changes are published.

Privacy and data-protection inquiries: sarievibragim8@gmail.com