Last updated October 2, 2026
隐私政策 / Privacy Policy
This policy explains how Social Studio handles information when an individual, creator, or organization creates a workspace, connects its own social accounts, and uses the service to prepare and publish content.
Operator / 运营者
Social Studio (OwnDream Social Studio) is operated by Mike, an individual based in Hong Kong, China. Contact: thelastmike2634@gmail.com. / 本网站由个人 Mike 运营，所在地：中国香港。隐私、服务与数据删除联系邮箱：thelastmike2634@gmail.com。
1. Information we process
- Basic sign-in information such as username and display name, plus salted password hashes, hashed recovery codes and hashed session identifiers. ChatGPT sign-in may provide an email and display name. Native accounts do not collect or verify an email address and use a recovery code instead of email password resets.
- Account information made available by a social platform through permissions you approve, such as account identifiers, channel names, and profile details.
- OAuth access and refresh tokens used to keep an authorized connection active. We do not ask for or store your social account password.
- Text drafts and publishing preferences are saved within your workspace. Local media selected in the editor is not included in text-draft storage and must be selected again after reloading. Confirmed uploads are sent to the selected social platform.
- Basic technical and security records, such as request time, browser information, and error logs, needed to operate and protect the service.
2. How we use information
- To create an isolated workspace and authenticate the social accounts that you choose to connect.
- To upload or directly publish content only after an authorized user confirms the publishing action.
- To show publishing status, diagnose failures, maintain security, and improve reliability.
- To comply with applicable law and enforce our terms.
3. Sharing and service providers
We send the information necessary to the selected social platform when you connect an account or publish content. We may also use hosting, storage, authentication, security, and monitoring providers that process information on our behalf. We do not sell personal information or use connected-account data for unrelated advertising.
4. Storage, security, and retention
Each workspace is logically isolated from other users. Credentials are encrypted at rest and are never returned in plaintext after saving. We retain connection data only while the connection is active or as needed for security and legal obligations. Uploaded media and publishing records are retained only as long as reasonably necessary to operate the service.
Platform access / 平台权限与用途
Social Studio uses YouTube API Services. youtube.readonly identifies the authorized channel and reads channel information; youtube.upload uploads videos with the title, description and visibility you select. We store the channel identifier, display name and encrypted authorization credentials to maintain your connection.
TikTok Login Kit identifies the account you authorize. user.info.basic provides profile identifiers, display name and avatar; video.publish enables confirmed direct posts; video.upload permits delivery to TikTok for completion there when that workflow is available. Approval and account eligibility may restrict these capabilities.
Facebook and Instagram connections use credentials you provide for accounts you are authorized to manage. Page and professional-account identifiers, names, publishing responses and encrypted credentials support account verification and publishing. We do not request your social account password.
Google user data is used to provide the requested publishing features, not sold, used for advertising, or used to train generalized AI models. Any transfer of Google API data is subject to the Google API Services User Data Policy, including its Limited Use requirements.
Google Privacy Policy / Google 隐私政策
Media handling / 素材与临时链接
Selecting a local file creates a preview; text drafts do not preserve that file. When you confirm a publish request, the media is transmitted to the selected platform, with server-side upload handling where required. Platform copies are subject to that platform’s retention practices.
For Instagram, the service stores a temporary media copy in its cloud object storage so Meta can fetch it. The randomly generated link can be read without signing in by anyone who possesses it. Do not share it. Access expires after 24 hours. Link expiration is not a guarantee of physical deletion at that exact time: the current service removes an expired object when it is subsequently accessed. You may request earlier removal through the data-deletion process.
Cookies and access / 登录与设备信息
Essential session cookies keep you signed in; authorization state is used to protect account connections. Hosting and platform providers may process network and security information to operate their services. Blocking essential cookies may prevent sign-in or authorization. No advertising purpose is assigned to your connected-account data.
Only personnel and service providers who need access to operate, secure or support the service should handle workspace data. This website uses hosted infrastructure, including Cloudflare-backed storage and OpenAI Sites hosting. A platform you connect processes the information sent to it under its own privacy policy.
5. Your choices and deletion
You can disconnect a platform from the API and account settings inside your workspace, or revoke access directly in that platform’s settings. You may request deletion of your workspace and associated personal data by emailing thelastmike2634@gmail.com. We may keep limited records when required by law or necessary to protect the service.
6. International processing and changes
Information may be processed in countries where OwnDream or its service providers operate. We may update this policy when the service or legal requirements change and will post the revised date on this page.
Your privacy rights / 隐私权利
Contact Mike to request access to or correction of personal data, deletion, a copy of data, or to raise a privacy complaint. Rights and applicable exceptions depend on your location and applicable law. We may ask for proportionate evidence of account control; do not send government identification or secrets unless a specific secure verification process has been agreed.
We process account and publishing data to provide the service you request and protect its security; platform access depends on your authorization. Where applicable, legal obligations may require limited records to be retained. Requests to withdraw platform authorization can be made at any time; withdrawal does not erase already published content.
The service is intended for adults authorized to manage the relevant accounts, not children. Contact us if you believe a child has provided personal data. / 可通过上述邮箱提出个人数据查阅、更正、删除、获取副本及投诉请求；我们会核验账号控制权，请勿直接发送证件、密码或令牌。
7. Contact
Questions or privacy requests may be sent to thelastmike2634@gmail.com.