Privacy Policy

Last updated September 25, 2026

1. What we collect

• Your account. You sign in with Google. We receive your name, your email address and your Google account id, and nothing else from your Google account.
• Your organization. The members' email addresses and roles, the notes and replies you leave on cuts and clips, and the messages in your team log.
• What you make. A recording's name, size, length and fingerprint (the recording itself stays on your machine unless you upload it), and the files and text you upload or push to the Studio: cuts, clips, stills, audio, transcripts, titles, captions and descriptions.
• Connected accounts. When you connect YouTube, Instagram, TikTok or LinkedIn, the account's id, name and handle, the permissions you granted, and the access tokens the platform issues. Tokens are stored encrypted (AES-256-GCM) and never shown, to you or anyone.
• Your posts and their numbers. Once a day we read, from each connected account, the posts on it (their ids, links, titles or captions, publish times and lengths) and their numbers: views, likes, comments, shares, saves, reach, watch time, followers gained, and the account's own follower count. We keep one snapshot per post per day so your organization can see how each post did over time.
• Cookies. Only the cookies that keep you signed in. No analytics, advertising or tracking cookies, and no third-party scripts that set them.
• Logs. Our host records requests (address, time, browser) to run and secure the service, and keeps them for a short period.

2. How we use it

Only to run FORMWRK Studio for your organization: to show your work to its members, to publish what a member schedules, where and when they choose, to show how each post performs, and to keep you signed in. We do not sell your data, show ads, or use your content or data to train AI models. We publish nothing that a member of your organization did not approve and schedule.

3. Google and YouTube

FORMWRK Studio uses YouTube API Services. When you connect YouTube, you also agree to the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy.

With the permissions you grant, we upload the videos your organization schedules to your channel, add them to the playlists you pick, and read your channel's videos, their statistics and your channel's YouTube Analytics. We store the statistics and analytics as daily snapshots for your organization, and refresh titles and descriptions every day.

FORMWRK Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke FORMWRK Studio's access at any time on your Google account's security settings page, or with Disconnect on the Studio's Settings.

4. Instagram, TikTok and LinkedIn

We use each platform's official API, with the permissions you grant, for two things only: publishing what your organization schedules, and reading your own account's posts, their numbers and your follower count. Each platform handles your data under its own policy: Instagram, TikTok, LinkedIn. You can remove our access in each platform's settings, or with Disconnect on the Studio's Settings.

5. Who else sees it

• The members of your organization.
• The platforms you publish to, which receive the videos and text you publish, when you publish them.
• Our service providers, who process data only to run the service for us: Supabase (database and file storage, United States), Vercel (hosting, United States) and Google (sign-in).
• Anyone the law requires us to disclose it to.

6. How long we keep it

For as long as your organization uses the service. A clip's rendered file is removed thirty days after the clip is posted or dropped. A platform's tokens are deleted the moment you disconnect it. If you revoke our access through Google, we stop reading your channel at once and delete the data we read from YouTube within 30 days.

7. Deleting your data

Email michael@offergoblin.com from the address you sign in with and say what to delete: a connected account's data, your organization, or everything. We delete it within seven days and confirm by email. You can also disconnect any platform yourself on Settings, which deletes its tokens at once.

8. Security

Traffic is encrypted in transit. Platform tokens are encrypted at rest. Your organization's data is readable only by its members, and every file leaves our storage through a link that expires within the hour.

9. Your rights

You can ask to see, correct, export or delete the personal data we hold about you, wherever you live. Write to michael@offergoblin.com; we answer within 30 days.

10. Children

FORMWRK Studio is not for children under 13, and we do not knowingly collect their data.

11. Changes

When this policy changes, the date at the top changes. If a change affects how we use data we already hold, we email the owners of every organization first.