Last updated: 27 October 2026

Privacy policy

Kainotomic Studio (“the Studio”) is a video production service. You talk to an agent. It plans a video calendar, makes the videos, and posts them to the accounts you connect once you approve them.

The Studio is run by Kainotomic, Inc., a Delaware corporation based in Los Angeles, at 1301 North Broadway STE 32279, Los Angeles, CA 90012, United States (“we”, “us”). This policy covers the Studio’s app and this site. It says what we collect, what we do with it, who we share it with, and how to have it deleted. Questions go to [email protected].

What we collect

• Your account. Your name, email address and profile picture from sign-in, and your role in your company’s space. We use WorkOS to sign you in.
• Your company. Its name, time zone, country and industry.
• What you give the Studio. Files such as footage, pictures, brand kits and documents, and everything you tell the agent, typed or spoken.
• Your voice. If you talk to the agent, the audio is processed live on a server we run, by open models we run ourselves: one turns your speech into text, and another speaks the answer. No outside company receives the audio, and we don’t keep it. What you say becomes text in your conversation, and the voice keeps a text record of the talk.
• What the agent keeps. Your conversations, the ideas it proposes and what you decide about them, your notes on videos, the facts it has learned about your company, its own working notes, and a long-term memory of your conversations and notes.
• What the Studio makes. Scripts, pictures, clips, voice-overs, music, finished videos, captions and a short report for each video.
• Connected accounts. For each YouTube channel, Instagram account or Facebook Page you connect: its name, handle, picture and ID, and the token that lets the Studio post to it. See YouTube and Meta below.
• Posts and results. What was posted, where and when, the link to each post, and the numbers the platform reports for it.
• Ads. Your Meta ad accounts (ID, name, currency and time zone), the most per promotion you set for each, and each promotion: the post, goal, budget, days, audience, and its spend, reach, impressions and clicks. We never receive your payment details: you pay Meta directly.
• Technical data. Server logs with IP addresses and the requests made, to run and secure the service. We keep them for up to 30 days.

How we use it

• To run the Studio: learn about your company, propose ideas, make and revise videos, keep your calendar, post at the times you set, show how posts did, and run the promotions you approve.
• The agent may read public web pages, such as your company’s website, to learn about your company.
• To keep the service secure, and to find and fix problems.

We don’t sell your data. We don’t use it for advertising. We don’t use your content, or data from your connected accounts, to train AI models.

We reach our model providers through their APIs, on business terms. This is what each provider’s own terms say about training:

• Anthropic: its Commercial Terms say it may not train models on customer content.
• OpenAI: its API data page says data sent to its API is not used to train its models, unless the customer opts in.
• xAI: its API security FAQ says it never trains on API inputs or outputs without the customer’s explicit permission.

We have not opted in or given that permission.

People at Kainotomic look at your content only when you ask us for help, to fix a problem with the service, for security, or when the law requires it.

AI-generated content

The Studio makes videos with AI models. Scripts, pictures, footage, voices and music in them can be partly or wholly generated. AI can get things wrong, so watch each video before you approve it. Nothing is posted until you approve it. When a video posted to YouTube contains realistic generated footage, the Studio marks it as altered or synthetic content, as YouTube asks.

Where it is stored

• In the Studio’s database: your account, the calendar, ideas, versions, notes, connected accounts and results.
• In a workspace kept for your company alone: its files, the videos made for it and the agent’s notes.
• In a long-term memory bank for your company, on a memory server we run ourselves.
• Clips made on our GPU service are stored in Cloudflare R2.

The Studio’s servers are in the United States. If you are in the EU or the UK, your data is transferred to and processed in the United States, with Standard Contractual Clauses where the law requires them. Some of our providers also process data in other countries: a GPU machine we rent, for example, may be outside the United States.

Who we share it with

We share data only with the providers that run parts of the Studio for us, with the platforms you connect, and when the law requires it. Each provider gets only what its part needs.

• AI model providers. The agents run on Claude models from Anthropic, reached through a gateway we run. They receive your conversations, notes, the files the agent reads, and the results it reads from your connected accounts. Our memory server uses a Claude model, the same way, to pick out what to remember. If we move to models we run ourselves, we will update this policy.
• Image and video models. xAI (Grok Imagine) and OpenAI (GPT Image) make pictures and clips. They receive prompts and reference pictures, which can include your files.
• GPU rentals. Some clips are made by a video model we run on machines rented from Vast.ai and RunPod. The prompt and pictures for a clip are on that machine while it renders.
• Cloudflare. Stores the clips made on our GPU service (R2).
• ElevenLabs. Makes voice-overs and music. It receives the script text and a description of the music.
• WorkOS. Signs you in. It receives what you sign in with, such as your email address.
• Google Fonts. This site and the app load fonts from Google, which receives your IP address and browser details.
• The platforms you connect. Google (YouTube) and Meta (Instagram, Facebook and ads) receive the videos, captions and promotions you approve for them.
• The law. Authorities, when the law requires it. A buyer of our business, if we are sold or merge, under this policy.

YouTube and Google data

The Studio uses YouTube API Services. You can connect a YouTube channel so the Studio can post your approved videos to it and show you how they did. Google’s Privacy Policy also applies: http://www.google.com/policies/privacy.

What we access

• youtube.upload: to upload the videos you approved and scheduled, with their title, description and settings.
• youtube.readonly: your channel’s ID, name, handle and picture, and the videos the Studio posted, with their views, likes and comments.
• yt-analytics.readonly: for the videos the Studio posted, their shares, minutes watched, the average percentage watched, and subscribers gained.

How we use it

To post your videos, to show the channel in Settings, to show each video’s numbers on the calendar and the video’s page, and to let the agent learn what works for your company when it plans new videos.

What we store

The channel’s ID, name, handle and a link to its picture. A refresh token, encrypted. For each post, the YouTube video’s ID and link, and its numbers. Access tokens last an hour and are not stored.

Who sees it

The people in your company’s space. The agent’s model provider receives the channel’s name and the numbers when the agent reads them. Nobody else receives your YouTube data, and we never use it for advertising.

How to remove our access and delete the data

• In the Studio: press Disconnect on the channel in Settings. We delete the channel, its token and its numbers at once, and revoke our access at Google.
• At Google: remove Kainotomic Studio at https://security.google.com/settings/security/permissions. The Studio finds out the next time it reads the channel, within a day: it deletes the numbers it read from YouTube, and shows the channel as needing attention until you connect it again or disconnect it, which deletes the rest.
• By email: write to [email protected], and we delete it within 7 days.

We check our access, and refresh the channel’s details, every day. Videos already posted stay on YouTube until you delete them there.

Kainotomic Studio’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Instagram, Facebook and Meta ads

You can connect Instagram professional accounts, Facebook Pages and Meta ad accounts through Facebook’s own sign-in. You choose which Pages and accounts to share.

What we use it for

• Posting: to see the Pages and Instagram accounts you shared, and to post your approved videos to them as reels or videos.
• Results: to read each post’s numbers: on Instagram views, reach, likes, comments, shares and saves; on Facebook views, reactions and clicks.
• Ads: to list your ad accounts, to promote a post only after you approve it, and to read each promotion’s spend, reach, impressions and clicks. The agent may pause, end or lower a promotion without asking, and tells you when it does. Anything that can spend more needs your approval.

What we store

Each account’s or Page’s ID, name, handle and picture, and its Page token, encrypted. For ads, your ad accounts and the token of the person who connected them, encrypted. The posts made, their links and numbers, and each promotion with its results. The token used while you connect for posting is not kept.

How to ask for deletion

• In the Studio: press Disconnect in Settings. We delete the account or ad accounts and their tokens at once.
• At Meta: remove Kainotomic Studio under Business integrations in your Facebook settings. This stops our access.
• Everything we got from Meta: email [email protected] with the subject “Delete my Meta data”. We delete it within 30 days and write back when it is done.

Posts already published stay on Instagram and Facebook until you delete them there.

How long we keep data

We keep data for as long as we need it to provide the Studio. While your company uses the Studio, we keep its workspace, files, videos, conversations and memory, so each new video can build on the earlier ones. You can ask us to delete any of it at any time.

When your company stops using the Studio, we delete its data within 30 days, backups included, except what the law requires us to keep. Data from connected platforms follows the rules in the sections above.

Security

• Tokens for connected accounts are encrypted at rest with AES-256-GCM, under a key only the Studio’s server holds. They are never sent to your browser, never written to logs, and never given to the agents.
• Calls to Meta carry a proof signed with our app’s secret, so a token alone is of no use to anyone else. Tokens go to Google only inside a request, never in a web address.
• Each company’s agents work in a workspace that holds only that company’s files, in a container made for each piece of work and removed after it.
• Only the Studio’s server reaches the memory bank. The agents never hold its key.

No system is perfectly secure. If you think your account has been misused, write to [email protected].

Cookies

The Studio uses cookies only to sign you in and keep you signed in. It uses no advertising or analytics cookies.

Your rights

Depending on where you live, you can ask to see your data, correct it, delete it, receive a copy in a machine-readable format, object to how we use it, and withdraw consent you gave. You can read and correct what the agent knows about your company on the Brand page. For anything else, write to [email protected]. It is free, and we answer within one month. You can also complain to your data protection authority.

Children

The Studio is a service for businesses, and for people aged 16 or over. We don’t knowingly collect data from anyone under 16.

Changes

We may change this policy. We post every change on this page and update the date at the top. For a material change, we tell you in the Studio before it takes effect.

Contact

Kainotomic, Inc., 1301 North Broadway STE 32279, Los Angeles, CA 90012, United States. [email protected]