1. Overview & Scope
This Privacy Policy details how Make1 Studio ("we", "us", or "our", operated under parent entity TenToSeven / Make1) collects, stores, processes, and protects your information across our website, applications, AI engines, and integrated services (collectively, the "Service").
By creating an account or using Make1 Studio, you acknowledge the practices described in this policy. If you have questions regarding your data privacy, reach out to us at ping@make1.in.
2. Information We Collect
We collect information necessary to deliver, enhance, and secure our creative automation and publishing tools:
A. Direct Account & Workspace Information
- Account Registration: Name, business email, phone number, and securely salted/hashed passwords.
- Brand Assets: Logos, vector marks, packaging templates, typography, color codes, and product photo uploads stored securely on Amazon S3.
- AI Prompt & Inpainting Directives: Text prompts, background replacement instructions, alpha edit masks, and blog topic briefs.
- Billing Records: Transaction IDs, plan tier, invoice histories, and tax identifiers (card processing is performed directly by Razorpay).
B. Connected Social Platform & OAuth Data
- Meta Platforms (Instagram & Facebook): Account identifiers, Page IDs, Instagram Business IDs, encrypted publishing tokens, and aggregate engagement statistics.
- Professional & Video Channels: LinkedIn, YouTube, TikTok, Pinterest, and X API authentication tokens and account identifiers.
- CMS Integrations: API keys, webhook secrets, and domain URLs for Shopify, WordPress, WooCommerce, Webflow, and Ghost.
C. Diagnostic & Usage Telemetry
- IP address, browser user-agent, operating system, geolocation (country/city level), API latency metrics, and error logs for system stability.
3. Website Intelligence & Store Data Scraping
When you connect your store URL or submit a domain to our Website Intelligence scanner:
Authorized Crawling: Our automated crawlers process publicly visible web elements, including product catalog listings, item titles, descriptions, pricing, brand color palettes, and store return/shipping policies.
Private Workspace Storage: Scraped website intelligence data is isolated and stored within your private organization database. It is used solely to contextualize your AI creative generations, SEO blog articles, and AI sales chatbot responses.
4. Google API & Limited Use Disclosure
Make1 Studio supports Google Single Sign-On and optional video publishing integrations via the YouTube Data API.
Google API Services User Data Policy Compliance:
Make1 Studio's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements.
- We request only the minimum required OAuth scopes needed for account sign-in or authorized video uploading.
- We never sell or transfer Google user data to external data brokers or advertising networks.
- Google user data is never accessed by human employees without express consent, and is NEVER used to train machine learning models.
6. How We Use Your Data
We utilize collected information to deliver robust automation features:
- AI Asset Synthesis: Generating custom product banners, social ads, packaging graphics, and iterative inpainting modifications.
- SEO Blog Generation & CMS Publishing: Synthesizing high-ranking SEO articles with meta tags and pushing them to your connected CMS.
- Transactional Communications: Sending OTP email verifications, password recovery links, subscription invoices, and security alerts.
- System Monitoring & Security: Detecting bot abuse, enforcing rate limits, and maintaining 99.9% platform availability.
7. AI Processing & Zero Model Training
Make1 Studio partners with enterprise AI model providers (including OpenAI and Anthropic) and maintains strict data isolation policies:
No Training on Customer Assets: Your uploaded images, brand logos, scraped product copy, and generation prompts are NEVER used to train, retrain, or improve public foundational AI models.
Enterprise Zero-Data-Retention APIs: We utilize enterprise API endpoints that do not retain customer prompt payloads beyond real-time inference and safety filtering.
9. Security, Encryption & Retention
We implement robust technical and organizational safeguards to protect your assets:
- End-to-end encryption in transit (TLS 1.3 / HTTPS) and encryption at rest (AES-256) across all databases and AWS S3 storage buckets.
- Passwords hashed using salted cryptographic algorithms (bcrypt/Argon2).
- Role-based access control (RBAC) and automated vulnerability scanning across production microservices.
10. Your Privacy Rights (GDPR / DPDP / CCPA)
Regardless of your jurisdiction, we respect your fundamental data rights:
Right to Access
Request a machine-readable copy of your personal data and assets.
Right to Rectification
Correct or update any inaccurate information in your profile.
Right to Erasure
Request permanent deletion of your account, assets, and history.
Right to Portability
Export your creative assets and blog content in standard formats.
11. Data Deletion Protocol & Meta Callbacks
In compliance with Meta Platform Policies and international privacy frameworks, we provide automated and manual data deletion mechanisms:
Step-by-Step Data Deletion Guide
View our dedicated instructions page for disconnecting social channels, revoking permissions, and requesting complete account purging.
12. Children's Privacy
Make1 Studio is an enterprise and creator productivity platform not directed toward children under 16 years of age. We do not knowingly collect personal data from minors. If you believe a minor has registered an account, contact us for immediate removal.
13. Contact DPO & Privacy Inquiries
To exercise your data privacy rights or submit a query to our Data Protection Officer, please contact:
Make1 Studio Data Protection Officer
Operated by TenToSeven / Make1
ping@make1.in