Privacy Policy

ShowMaker Studio ("we", "us", "our") is a product of Asset Foundry, Inc. We operate the platform at showmaker.studio, which enables users to create AI-powered short films and videos.

We collect information you provide directly (name, email address, payment information) and information generated as you use the platform (projects, scenes, generated assets, usage logs). When you connect a third-party account (such as Instagram or YouTube), we store OAuth access tokens in encrypted cookies to enable publishing on your behalf.

We use your information to provide and improve the platform, process payments, send transactional emails, and publish content to third-party platforms at your direction. We do not sell your personal information to third parties.

ShowMaker Studio integrates with Meta (Instagram, WhatsApp) and Google (YouTube) to allow you to publish your content and receive notifications about your projects. When you connect these accounts or provide a phone number, you authorize us to post or message you on your behalf using the permissions you grant. You can revoke access at any time from your Instagram, WhatsApp, or Google account settings.

When you connect a YouTube account, ShowMaker Studio requests a single OAuth scope: https://www.googleapis.com/auth/youtube.upload. This permission is requested only at the moment you explicitly click “Connect YouTube” in the editor — never at sign-in. We use it solely to upload videos you have explicitly chosen to publish from a project you created in ShowMaker Studio. We do not read, list, modify, or interact with any other content on your YouTube channel, including existing videos, playlists, subscriptions, comments, or analytics.

ShowMaker Studio's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your YouTube OAuth token is stored in an encrypted, HttpOnly session cookie scoped to your browser; it is never transmitted to or stored by any third party, and is never used to train AI models or for advertising. You may revoke ShowMaker Studio's access at any time at myaccount.google.com/permissions.

Use of YouTube through ShowMaker Studio is also subject to the YouTube Terms of Service.

ShowMaker Studio does not sell, rent, trade, or share Google user data (including YouTube OAuth tokens and any data obtained through Google APIs) with any third party for advertising, marketing, or any other commercial purpose. We do not use Google user data to develop, improve, or train generalized AI or machine-learning models.

Google user data is disclosed only to the following named recipients, and only to the extent strictly necessary to perform the action you have explicitly requested (publishing a video to your own YouTube channel):

• Google LLC (YouTube Data API) — the authorized destination of your upload. Your access token is sent to Google's YouTube Data API to upload the video and metadata you specify.
• Vercel Inc. — our application hosting provider, which receives your encrypted YouTube session cookie in transit and acts as our processor under written contract.
• Amazon Web Services, Inc. (AWS) — our infrastructure provider, which processes your OAuth token and the video file (encrypted in transit and at rest) solely to complete the upload you initiated, and acts as our processor under written contract.
• ShowMaker Studio engineering personnel bound by confidentiality obligations — a limited number of our engineers may access Google user data only as necessary to operate, secure, troubleshoot, or comply with the law, and only when other means are not feasible.
• Law enforcement or government authorities — only where required by law, valid legal process, or to protect rights, property, or safety.

We do not transfer Google user data to data brokers, advertising networks, AI/ML training providers, or any other third party. Your YouTube refresh token is stored only in your encrypted browser cookie; it is not persisted in our databases.

More generally, we do not sell your personal information. We share the information described in Section 2 only with the following categories of recipients, and only to the extent necessary to operate the platform:

• Hosting and infrastructure providers that operate our application, compute, database, and storage layers.
• AI model providers that fulfill generation requests using the prompt content and reference assets you submit. Your account identity, payment information, and Google user data are not sent to these providers.
• Payment processors that handle billing and subscription management.
• Transactional email providers that deliver account, billing, and verification messages.
• Third-party platforms you connect for publishing or import, and only when you explicitly initiate the action.
• Law enforcement, regulators, or other parties where required by law, valid legal process, or to protect rights, property, or safety.
• A successor entity in connection with a merger, acquisition, or sale of assets, subject to the protections of this policy.

All processors act under written contracts that restrict use of the data to providing services to ShowMaker Studio.

We retain your account data for as long as your account is active. Generated video files are stored on Amazon S3 and may be deleted after 90 days of inactivity. You may request deletion of your data at any time by contacting us.

We use industry-standard encryption (TLS in transit, AES-256 at rest) and AWS security controls to protect your data. OAuth tokens are stored in encrypted, HttpOnly cookies and are never exposed to the browser.

For privacy-related questions or data deletion requests, contact us at privacy@showmaker.studio.