Privacy Policy
How Second Studio, operated by Faro.io Corp, handles your information.
1. Who we are
Second Studio is operated by Faro.io Corp ("Faro.io", "we", "us"). This Privacy Policy explains what personal information we collect when you use the Second Studio website, portal, API and MCP servers (the "Service"), how we use it, and the choices you have. Contact us at support@hellofaro.io.
2. Information we collect
- Account information. Your name, email address, profile image and the sign-in method you use, provided through Clerk when you sign in with Google, GitHub, Apple or email.
- Organization and team data. Organization name, members you invite, roles, spend caps and API key metadata. We store only hashes of API keys after they are shown to you.
- Billing information. Plan, credit balance, purchases and invoices. Card and payment details are collected and stored by Stripe, not by us. We receive limited details such as card brand, last four digits and billing country.
- Your Content. Files, footage, images, audio, prompts, scripts, brand kits and the videos and other outputs the Service generates for you.
- Connected accounts. If you connect social accounts for posting, the tokens and account details needed to draft and publish your posts.
- Usage and technical data. API requests, job history, logs, IP address, browser and device information, and error reports, used to run, secure and improve the Service.
- Messages. What you send us by email or through access request forms.
3. Google user data
If you choose Sign in with Google, we receive your name, email address and profile image from Google, using only the basic openid, email and profile scopes. We use this Google user data only to authenticate you and to create and identify your Second Studio account. We do not use it for advertising, we do not sell it, we do not use it to train AI models, and we do not share it except with the service providers that run sign-in for us, such as Clerk. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can revoke Second Studio's access at any time from your Google Account permissions page.
4. How we use information
- Provide the Service, run your jobs, and deliver Outputs.
- Authenticate you and secure accounts and API keys.
- Process payments, manage credits and subscriptions, and send receipts.
- Send service messages such as invitations, job notices, security alerts and policy changes.
- Prevent abuse, enforce our Terms, and comply with law.
- Understand usage and fix and improve the Service.
We do not sell personal information and do not use Your Content to train general-purpose AI models.
5. Service providers
We share information with providers that process it on our behalf under contract, only as needed to run the Service:
- Clerk for sign-in and account management.
- Google, GitHub and Apple as sign-in providers you choose.
- Stripe for payments, subscriptions and invoices.
- Convex for our backend database and file storage.
- Modal for video processing and rendering.
- Vercel for website hosting.
- AI model and voice providers that you select for a job, which receive the inputs needed for that job.
- Social platforms you connect, when you approve a post.
We may also disclose information if required by law, to protect rights and safety, or as part of a merger or acquisition, in which case this policy will continue to apply.
6. Retention and deletion
We keep account information while your account is open. Your Content and Outputs are kept until you delete them or close your account. After account closure we delete or de-identify personal information within 90 days, except records we must keep for legal, tax, fraud prevention or dispute purposes, such as billing records.
7. Security
We use encryption in transit, hashed API keys, signed short-lived file links, access controls and spend caps to protect your information. No system is perfectly secure. If we learn of a breach affecting your information, we will notify you as required by law.
8. Your choices and rights
You can view and update your account, delete content and revoke keys in the portal. Depending on where you live, you may have rights to access, correct, delete or export your personal information, or to object to or restrict certain processing. To make a request, email support@hellofaro.io. We will not discriminate against you for exercising these rights.
9. International transfers
We are based in the United States and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses.
11. Children
The Service is not directed to children under 18, and we do not knowingly collect their personal information. If you believe a child has given us information, contact support@hellofaro.io and we will delete it.
12. Changes to this policy
We may update this policy. If a change is material, we will give notice by email or in the portal before it takes effect. The date at the top shows when it was last updated.
13. Contact
Faro.io Corp, operator of Second Studio. Email support@hellofaro.io.