Factory privacy

This product notice supplements our general privacy policy. The operator is Daisuke Narita, an individual business owner. Contact: keiodaisuke@gmail.com.

What the studio uses

We use your signed-in account ID and email to identify your studio. We store subscription and payment-provider identifiers, billing status, usage reservations, generation progress, provider job identifiers, generated scripts and captions, media references, and publishing results. We use the connected Instagram account identifier, handle, permission status, and available post metrics to publish to the correct account and display results.

Payment card details are collected by Stripe. Instagram authorization uses Meta’s OAuth flow; the studio does not ask for your Instagram password. Connecting Instagram authorizes the Factory to start daily generation and publishing while your free allowance or subscription is active. You can stop daily posting in the studio. Your browser keeps its sign-in session and an identifier for an unfinished generation request so an interrupted request can be checked safely.

Service providers

Supabase provides sign-in and database services. Netlify hosts the site, functions, and generated image storage. Stripe processes subscriptions. Google’s paid Gemini API generates the fictional avatar image and scripts. We request that these generation interactions are not stored for later API retrieval; this does not replace Google’s applicable processing and retention terms. HeyGen creates the voice, avatar, and videos. Meta’s Instagram API connects the account, publishes authorized content, and retrieves available post metrics. The information needed for each task is sent to that provider. These services may process information outside your country.

Provider API keys and internal payment identifiers stay on the server. When you connect Instagram, your browser receives a connection link for that authorization flow; do not share the link. Public media and Instagram posts can be accessed by people with their URLs or through the platform’s sharing features; do not use this product for confidential content.

Keeping and deleting information

We keep information needed to operate your studio, reconcile pending provider requests and billing, prevent duplicate charges or posts, and meet applicable recordkeeping duties. Cancelling a subscription stops new generation and publishing; it does not itself delete stored media, provider records, or published Instagram posts. Contact support to request access, correction, or deletion. Some billing and unresolved transaction records may need to be retained.

Your controls

You can stop daily publishing, cancel the subscription, and sign out in the studio. You can revoke Instagram authorization through Instagram’s account settings. Previously published posts must be removed through the social platform. Contact support about a connection or deletion request; include your account email and never send a password or API key.