Privacy Policy
2026-07-05
1. Who We Are
Studio OS is a product by Poletis d.o.o., Croatia. This policy explains how we process personal data about website visitors, early-access users, and studios using Studio OS.
2. Data We Collect
We collect information you submit to us, including name, email, message, studio details, newsletter sign-ups, and early-access requests. We also keep basic server logs such as IP address, user agent, and request timestamps for site operation and security.
3. Connected Facebook and Instagram Accounts
If a studio connects a Facebook Page or Instagram Business account to Studio OS, we process the data needed for that integration: Meta user or business identifiers, available Pages, the selected Facebook Page ID and name, the linked Instagram Business account ID, granted permissions, connection status, token expiry, and secure access tokens. We use this data to connect the account, show the selected Page, and publish marketing content that a user approves inside Studio OS.
4. Content and Publishing Data
When a user uses Studio OS to prepare or publish marketing content, we may process post text, media files, scheduled time, publishing status, platform errors, and links to live Facebook or Instagram posts. We do not publish content unless a user takes the publishing action in the product.
5. Legal Basis
We process data based on contract performance or pre-contract steps, consent, our legitimate interest in operating and securing the service and responding to inquiries, and legal obligations that apply to our business.
6. Service Providers
We share limited data only with providers that help us run Studio OS and the website, such as hosting, database, email infrastructure, and platforms a user connects, including Meta platforms when you ask us to publish to Facebook or Instagram. Access tokens are treated as confidential credentials. We do not sell personal data.
7. Retention and Deletion
We keep personal data only as long as needed to provide the service, maintain security, keep business records, and meet legal obligations. If you disconnect a Meta account or request deletion, we will remove integration data we are no longer required to keep.
8. Your Rights Under GDPR
Under GDPR you have the right to access, correct, delete, restrict, or receive a portable copy of your personal data, and to object to processing. You may withdraw consent at any time and lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
9. Data Controller
Poletis d.o.o., Croatia, acts as the data controller for the data described in this policy, except where we process data only on the instructions of a business customer.
10. Contact
Privacy questions and rights requests: [email protected].