Simplifiers Studio Privacy Policy

Simplifiers Studio · Last updated: 15 September 2026

This Privacy Policy explains how Pixaplay Media & Consulting (owner: Sebastian Hertlein) (“we”, “us”) processes personal data in connection with Simplifiers Studio, a web application available at https://studio.simplifiers.ai that lets authorised team members create, schedule and publish social-media content to their own connected Instagram, Facebook, TikTok and YouTube accounts, and review how that content performs. We are the data controller within the meaning of the EU General Data Protection Regulation (GDPR).

1. Controller & contact

Pixaplay Media & Consulting (owner: Sebastian Hertlein)
Max-Zimmermann-Str. 5, 82319 Starnberg, Germany
Email: privacy@simplifiers.ai

2. What data we process

a) Account & login data. When you sign in to Simplifiers Studio we process your name and email address via our authentication provider (Clerk) to identify you and manage your role and access.

b) Meta connection data (Facebook Login for Business). When you connect a Facebook Page or Instagram account, we receive and store: the Facebook Page ID and name, the connected Instagram Business Account ID and username, the account label, the permissions (scopes) you granted, a Page access token, and the token’s expiry date.

c) TikTok connection data (TikTok Login Kit). When you connect a TikTok account, we receive and store your TikTok open ID and username, the permissions you granted, an access token, a refresh token and the token’s expiry date. Depending on the permissions you grant, we read:

• user.info.basic — your display name and avatar;
• user.info.profile — your username, bio, profile link and verification status;
• user.info.stats — your follower, following, like and video counts;
• video.list — your public videos with their title, description, publication date, length, format, cover image, embed link, AI-generated-content label, and view, like, comment and share counts;
• video.upload — used to send a video you created to your TikTok inbox as a draft, which you then finish posting in the TikTok app.

We do not read private videos, direct messages, or data about other TikTok users.

d) YouTube connection data (YouTube API Services). When you connect a YouTube channel, we receive and store the channel ID and title, the permissions you granted, an access token, a refresh token and the token’s expiry date.

e) Performance statistics of your own content. For the accounts you connected, we read statistics about your own posts, videos and accounts: for example views, reach, likes, comments, shares, saves, watch time, audience retention, follower counts, traffic sources and aggregated audience demographics (age range, gender, country). Demographics are provided by the platforms only as totals; they never identify individual viewers.

f) Content data. The captions, images, videos, cover images and scheduling details (date/time, target platform, status) you create in the app in order to publish them on your behalf.

g) Technical data. Server and error logs required to operate the service securely (e.g. timestamps, request/error information).

3. How we use platform data

We use data obtained through the Meta, TikTok and YouTube APIs strictly to:

• show you which accounts you can connect, and their connection status;
• display your connected accounts and their profile information inside the app;
• publish or schedule the specific posts, reels and videos you create to the accounts you connected;
• show you, inside the app, how your own content and accounts perform, so you can decide what to create next.

We do not sell this data, do not use it for advertising or for profiling individual people, and do not share it with third parties except with the respective platform itself to carry out the action you requested. Access tokens are stored encrypted at rest and are never exposed to other customers. Aggregated findings about your own content (for example, which formats performed well) may be used to plan new content for the same brand; raw platform data and access tokens are not passed to content-generation providers.

4. Purposes & legal bases

• Providing the app, publishing your content and showing its performance — performance of a contract, GDPR Art. 6(1)(b).
• Securing and operating the service (logging, abuse prevention) — legitimate interest, GDPR Art. 6(1)(f).

5. Storage & security

Data is hosted on servers located in Germany (Hetzner, Falkenstein/Nuremberg, EU). Access tokens are encrypted at rest. Access to production systems is restricted to authorised administrators.

6. Processors & third-party services

We use the following providers to operate the service:

• Meta Platforms Ireland Ltd. — to publish content to, and read statistics from, your connected Instagram/Facebook accounts.
• TikTok Technology Limited (Ireland) — to publish drafts to, and read profile information and statistics from, your connected TikTok account.
• Google LLC / YouTube — to publish videos to, and read statistics from, your connected YouTube channel. Simplifiers Studio uses the YouTube API Services; by connecting a YouTube channel you agree to the YouTube Terms of Service, and Google’s processing is described in the Google Privacy Policy.
• Clerk — user authentication (name, email). Transfers to the USA are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
• Hetzner Online GmbH (Germany) — hosting.
• Content-generation services used to help produce media (Anthropic, Google, ElevenLabs, HeyGen) and Google Drive for internal media archival. Where these providers process data outside the EU, transfers are safeguarded by Standard Contractual Clauses and/or the EU–US Data Privacy Framework. These services process content you create, not your platform access tokens or raw platform data.

7. Retention

Access tokens are kept only while a connection is active. When you disconnect an account, its access and refresh tokens are deleted immediately and no further data is read from that account; for TikTok we additionally revoke the authorisation with TikTok. A record that the account was connected, and the records of posts already published through it, are kept so that your publishing history stays intact. Stored performance statistics and content are kept while your Simplifiers Studio account exists and are deleted on request, or within 30 days after the end of the service, as described in our Data Deletion instructions.

8. Your rights

Under the GDPR you have the right to access, rectify, erase and restrict processing of your personal data, the right to data portability, and the right to object. You may lodge a complaint with a supervisory authority. To exercise any right, contact us at privacy@simplifiers.ai.

9. Disconnecting and revoking access

You can disconnect any connected account at any time in Simplifiers Studio under Connections with the disconnect button next to the account. This deletes the stored tokens immediately. You can also revoke Simplifiers Studio’s access directly with each platform:

• TikTok — in your TikTok account under Manage app permissions;
• YouTube / Google — at myaccount.google.com/permissions;
• Facebook / Instagram — under Settings & Privacy → Settings → Business integrations, or in Accounts Center → Apps and websites.

For full deletion of your data, see our Data Deletion instructions.

10. Changes

We may update this policy. The current version is always available at https://studio.simplifiers.ai/privacy with the “last updated” date above.