Simplifiers Studio Privacy Policy

Simplifiers Studio · Last updated: 1 July 2026

This Privacy Policy explains how Pixaplay Media & Consulting (owner: Sebastian Hertlein)(“we”, “us”) processes personal data in connection with Simplifiers Studio, a web application available at https://studio.simplifiers.ai that lets authorised team members create, schedule and publish social-media content to their own connected Instagram and Facebook accounts. We are the data controller within the meaning of the EU General Data Protection Regulation (GDPR).

1. Controller & contact

Pixaplay Media & Consulting (owner: Sebastian Hertlein)
Max-Zimmermann-Str. 5, 82319 Starnberg, Germany
Email: privacy@simplifiers.ai

2. What data we process

a) Account & login data. When you sign in to Simplifiers Studiowe process your name and email address via our authentication provider (Clerk) to identify you and manage your role and access.

b) Meta connection data (Facebook Login for Business).When you connect a Facebook Page or Instagram account, we receive and store: the Facebook Page ID and name, the connected Instagram Business Account ID and username, the account label, the permissions (scopes) you granted, a Page access token, and the token’s expiry date. The access token is stored encrypted at rest and is used only to publish and schedule the content you create to the accounts you connected.

c) Content data. The captions, images, videos, cover images and scheduling details (date/time, target platform, status) you create in the app in order to publish them on your behalf.

d) Technical data. Server and error logs required to operate the service securely (e.g. timestamps, request/error information).

3. How we use Meta / Instagram & Facebook data

We use data obtained through Meta’s APIs strictly to:

• show you which Pages / Instagram accounts you can connect and their status;
• display your connected accounts inside the app;
• publish or schedule the specific posts and reels you create to the accounts you connected (Instagram content publishing and Facebook Page posts).

We do not sell this data, do not use it for advertising or profiling, and do not share it with third parties except with Meta itself to carry out the publishing action you requested. Access tokens are never exposed to other customers.

4. Purposes & legal bases

• Providing the app and publishing your content — performance of a contract, GDPR Art. 6(1)(b).
• Securing and operating the service (logging, abuse prevention) — legitimate interest, GDPR Art. 6(1)(f).

5. Storage & security

Data is hosted on servers located in Germany (Hetzner, Falkenstein/Nuremberg, EU). Access tokens are encrypted at rest. Access to production systems is restricted to authorised administrators.

6. Processors & third-party services

We use the following providers to operate the service:

• Meta Platforms Ireland Ltd. — to publish content to your connected Instagram/Facebook accounts.
• Clerk— user authentication (name, email). Transfers to the USA are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
• Hetzner Online GmbH (Germany) — hosting.
• Content-generation services used to help produce media (Anthropic, Google, ElevenLabs, HeyGen) and Google Drive for internal media archival. Where these providers process data outside the EU, transfers are safeguarded by Standard Contractual Clauses and/or the EU–US Data Privacy Framework. These services process content you create, not your Meta access tokens.

7. Retention

Connection data and access tokens are kept while a connection is active. When you disconnect an account, or when you request deletion, the connection and its access token are deleted. Content and account data are deleted upon request as described in our Data Deletion instructions.

8. Your rights

Under the GDPR you have the right to access, rectify, erase and restrict processing of your personal data, the right to data portability, and the right to object. You may lodge a complaint with a supervisory authority. To exercise any right, contact us at privacy@simplifiers.ai.

9. Deleting your data

You can remove a connected account at any time inside Simplifiers Studio, which deletes the stored access token immediately. For full deletion of your data, see our Data Deletion instructions.

10. Changes

We may update this policy. The current version is always available at https://studio.simplifiers.ai/privacywith the “last updated” date above.