Privacy Policy

This policy describes how CabanaStudio.io LLC, trading as Cabana Studio, handles information about website visitors, demo applicants, account holders, visitors to creator pages, and people whose information creators manage through Cabana.

For contacts and other personal information that creators store on behalf of their businesses, the creator is the controller and we act as their processor under our Data Processing Addendum. Contact the creator to exercise your rights over that information, or contact us and we will forward your request and assist them.

• Account and business information: contact details, profile information, social handles, portfolio content, rates, testimonials, goals, preferences, and information you provide during onboarding. Content you publish on your portfolio or media kit is public.
• Demo requests: email and records of acceptance of our terms, privacy policy, and age requirement. Some request forms and integrations also collect name, Instagram/TikTok/YouTube handles, audience size, niche, and the tools you use.
• Payments: subscription status, transaction information, and payment-provider identifiers. Card numbers and bank details are submitted directly to Stripe.
• Bank connections (Stripe Financial Connections). If you choose to link a bank account, Stripe shares incoming transaction details (amount, date, description) from the account you select. We use this only to confirm brand payments against your deals. We store only matched payment records; other transactions are not retained. Bank data is stored in the United States and is not shared with brands or other third parties. You can disconnect at any time in Dashboard → Connections, which stops access and deletes stored bank data.
• Content and communications: contacts, deals, notes, contracts, business documents, files, calendar events, and messages you upload, import, send, or receive through Cabana.
• Connected services: with your authorization, we access account details, social content and performance metrics, inbox messages and comments, selected files and designs, calendar events, and advertising, search, or affiliate performance information. The information depends on the service and permissions you grant. We retain connection credentials to provide the features you enable. See Section 9.
• Usage and security information: pages viewed, feature interactions, browser information, referring links, campaign tags, and account activity. Public-page first-party analytics use visitor and session identifiers with consent; signed-in usage is associated with your account. Abuse-prevention records may include a pseudonymized IP address and browser information. These remain personal information. Signup failures may include the attempted email or handle and failure reason.
• Support chat: your name, email, messages, page and referral information, and security signals. We may match your email to an account or demo request to assist you.
• Support phone line: an AI agent operated by xAI processes your call audio and transcript, including contact details you say aloud and caller ID when available. xAI keeps a call record as our processor. If referred to our team, we retain callback details and a summary; urgent calls may be transferred to a team member.

• Provide portfolios, CRM, analytics, connected services, payments, and other features you use.
• Personalize your experience and provide AI-assisted insights, drafting, and document review.
• Respond to support requests and send account, billing, and service communications.
• Improve our services, measure advertising, and send marketing communications with an opt-out.
• Protect accounts, prevent abuse, resolve disputes, and meet legal obligations.

For EEA/UK users, we rely on performance of a contract, legitimate interests in operating and securing our business and responding to requested business inquiries, consent where required, and legal obligations. You may withdraw consent or object where applicable.

We share information with providers of hosting, storage, authentication, communications, payments, analytics, security, and AI services; with services and people you authorize; and when necessary to comply with law, protect rights, or complete a business transaction. Connected services also process information under their own policies.

We do not sell personal information for money. When enabled, Meta advertising measurement receives a hashed email address and conversion details for signup attribution. Hashing does not make the address anonymous: Meta can match it to information it already holds. This server-side transfer is not controlled by the cookie notice and currently has no advance opt-out. It may occur at signup or on a later visit if measurement is enabled later or an earlier attempt failed. Creators who enable their own Meta measurement can also send hashed email addresses from inquiries and mailing-list signups through our servers; declining cookies does not stop those transfers.

Browser advertising scripts, including creators’ Meta, TikTok, and Google Analytics scripts, load only after cookie consent. Optional Plausible analytics runs on public pages without cookies and is not consent-gated; it records page addresses and campaign information, but excludes signed-in workspaces and private-link pages. See our Cookie Policy.

For questions or requests about advertising disclosures, email privacy@cabanastudio.io. We can confirm what was sent and request deletion from Meta; we cannot undo a transfer.

For processing on creators’ behalf, see the subprocessor provisions and change-notification rights in our DPA.

AI features process relevant information to provide recommendations, answer questions, review and classify documents, extract deal details, and help with onboarding, content ideas, scripts, and message drafting. Depending on the feature, this includes your question, instructions, analytics, business information, message content, and documents. Private library access depends on the permissions you grant.

Anthropic provides our generative AI features and, under our commercial agreement, does not use this data to train its models. TypeSafe AI provides classification and verification for certain features. The phone agent uses xAI as described above. These are distinct providers; the Anthropic training commitment does not describe the others’ terms.

Before sending contract text for AI review, we attempt to remove known brand and contact names, email addresses, and US phone numbers. Redaction is not complete or guaranteed; other identifying details may remain. Scanned contracts that cannot be safely extracted and redacted are not sent for AI review.

Support chat: messages and recent conversation context go to TypeSafe AI for routing and, for supported questions, Anthropic to answer from our help content. We do not include the separate name and email fields in the Anthropic request; information you type in messages may still be included.

AI output may be inaccurate. Review it before relying on it. Compose assistance can use the recipient, subject, draft, and your instruction; a suggested message is not sent until you review it and press Send.

• Access, correction, export, and deletion: use Dashboard → Settings to download account data or delete your account. Edit information in your dashboard or email us for help, including with information you cannot edit yourself.
• Marketing: use the unsubscribe link in marketing emails or email us. We honor email marketing opt-outs within 10 business days. Service messages continue.
• Public gallery and marketing features: gallery listings and permission to request paid features using your name or likeness are off by default. Manage them in Settings → Permissions. Specific marketing uses require separate approval and agreed compensation or credit. Withdrawal stops future use and removes your gallery listing, but does not retract previously published materials.
• US state rights: where applicable, you may request access, correction, deletion, portability, and opt-out of sale or sharing. We accept privacy requests from all users regardless of state and do not discriminate for exercising rights. Authorized agents may contact us by email. The current limits on advertising controls are described in Section 4.
• EEA/UK rights: you may request access, rectification, erasure, restriction, or portability; object to processing; withdraw consent; and complain to your supervisory authority.

We retain information while needed to provide the service and for legal, tax, security, and dispute-resolution purposes. After an account deletion request, personal information is deleted or de-identified within 30 days, except records we must retain for legal, tax, security, or dispute-resolution purposes, including payment and tax records and security logs. We keep those records only as long as required, then delete them. Other retention periods include:

• Terms-acceptance records, including email, version, time, IP address, and browser information, are retained for at least three years after deletion for record-keeping and disputes.
• Unconverted demo leads are deleted or de-identified within 24 months of last contact. Failed signup records are kept for up to 90 days.
• Inbox messages, including Instagram comments and DMs, are kept for up to 90 days, or deleted sooner when you delete them or your account. Direct Instagram disconnect also deletes that connection’s messages.
• Support chats, and phone calls passed to our team, are deleted 180 days after the last message, or sooner following deletion of an account with the same email. This period covers our support records, not xAI’s separate call records.
• Cancellation categories and plan information are retained as statistics and unlinked on account deletion. Free-text cancellation feedback is deleted within 30 days of account deletion or 180 days of cancellation if the account remains.

Backup copies and operational logs expire under their respective retention schedules. Connected-service deletion rules are described below.

We use technical and organizational safeguards, including encryption and access controls, to protect information. No system is completely secure. We notify affected users and authorities of breaches when required by law.

To block automated abuse, sign-up, sign-in, password reset, and re-authentication are protected by a Cloudflare Turnstile challenge. Loading it shares your IP address and a one-time challenge token with Cloudflare, which checks them and tells us only whether the challenge passed. It runs on these account-access steps whether or not you accept cookies, because it is what keeps other people out of your account.

We are based in the United States and use providers in the United States and other countries. For EEA/UK transfers, we rely on appropriate safeguards such as Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. Contact us for information about applicable safeguards.

You choose which accounts to connect and which permissions to grant. Social connections provide profile details, posts, engagement and audience statistics; inbox connections provide messages and sender information and allow replies. File and design connections support imports, and calendar connections can read and write events. We use this information to provide the features you request, including insights, media kits, and AI assistance.

Disconnect in Dashboard → Connections and review the provider’s own permission settings. Removing a connection does not necessarily revoke permission at the provider or delete copies you imported into Cabana. Delete those copies or your account separately.

Direct Instagram, TikTok, X, and YouTube disconnects delete their stored analytics; disconnecting one of several accounts on a platform can also clear shared historical totals for that platform. Information already included in past briefs remains until account deletion. Direct Instagram permissions must also be removed in Instagram’s Apps and websites settings; older Facebook-based grants are managed in Facebook Business integrations. Provider removal notifications delete the Instagram connection and its credentials.

TikTok and X connections needing reconnection reserve the account for seven days. After that, connection by another Cabana account can replace the old connection and delete its stored platform data. TikTok revocation notifications delete its stored analytics. TikTok demographics are not collected through the current direct connection.

A QuickBooks Online company connects to one Cabana account, read-only: Intuit’s consent screen lists read and write access because it offers no read-only option, and Cabana only ever reads. Disconnecting in Cabana withdraws Cabana’s access at Intuit and deletes the stored connection; if Intuit does not confirm the withdrawal, Cabana tells you to remove Cabana Studio under your Intuit account’s connected apps. A company needing reconnection is reserved for seven days the same way.

Instagram only lets us send a plain reply within 24 hours of the sender’s last message. A private reply to a comment is not bound by the 24-hour window; we cannot start a conversation with someone who has not contacted you.

YouTube API Services. Cabana uses YouTube API Services. Connecting a channel also binds you to the YouTube Terms of Service. Google’s processing is described in its Privacy Policy. We access your channel details, videos, engagement and watch-time metrics, and aggregate audience demographics where available. We do not access individual viewer identities or comment content. We use these for analytics, recommendations, and media kits you choose to publish.

You may revoke YouTube access at any time through Google’s security settings. Disconnecting in Cabana deletes stored analytics immediately and requests revocation; if revocation fails, the app directs you to Google. Revocation at Google is detected on a subsequent sync, after which per-video analytics are deleted within 30 days. Per-video data is also deleted when a connection stops refreshing for 30 days. If several channels are connected, a lapsed channel’s contribution to combined historical totals remains until all YouTube connections have stopped refreshing for 30 days; disconnecting it in Cabana clears that history immediately.

Cabana is for adults aged 18 and older and is not directed to children under 13. We do not knowingly collect children’s information. Contact us if a child has provided data and we will delete it.

We post updates here and notify you by email or in the dashboard before material changes take effect.

For privacy questions or requests, contact CabanaStudio.io LLC at privacy@cabanastudio.io.