Paw Studio

Privacy policy

Last updated 2026-10-06.

Paw Studio is an automated video studio. Today one operator uses it to produce and schedule videos for their own YouTube channels, and access is opening gradually. Apart from the waitlist described below, it does not collect data about, or serve, anyone other than that operator.

The waitlist

Anyone can ask for access from the home page. The form is the only place the studio collects data from visitors.

  • What is collected. The email address you give and, if you fill them in, what you would like to make, the kinds of videos you have in mind, a free-text detail, and the monthly price range you would consider. The consent you tick is recorded with its date. The server also records the IP address and the browser's user agent that sent the form. Nothing else: no cookies, no tracking, no analytics.
  • Why. The email address and your answers are used to manage the waitlist (to decide who is invited, and to reach out when it is your turn) and for product research (to decide what to build and how to price it). The IP address and user agent are used only to protect the form from abuse, such as spam and automated sign-ups. Nothing is used for advertising, sold, or shared with third parties, and no confirmation email is sent.
  • How long. The IP address and the user agent are erased automatically six months after you sign up. Your address and answers are kept until you ask for them to be deleted, or until the waitlist is closed and its entries are no longer needed, whichever comes first. If you are invited, the entry records that, and the invitation link is stored only as a hash.
  • Legal basis. The email address and your answers rest on your consent, the box you tick on the form, which you can withdraw at any time by asking for your entry to be deleted. The IP address and the user agent rest on our legitimate interest in protecting the form from abuse.
  • Backups and logs. The studio's database is backed up every night and a backup is kept for up to 30 days, so an entry you ask to have deleted can remain in a backup for up to 30 days more, and is not restored afterwards. The reverse proxy that serves the site may also keep standard access logs (IP address, time and requested path) for a short, rotating period, for operations and security; the studio's own logs do not contain the IP address of sign-ups.
  • Your rights. You can ask to see, correct or delete your entry at any time by writing to the contact address below, and we will act on it within 30 days. If you are in the European Union, you can also complain to your data protection authority.

What it stores

Channel and video metadata (titles, descriptions, tags, schedules), generated or uploaded media (images, audio, video), and the studio's own operational data (jobs, notifications, budgets). None of this is shared with any third party, sold, or used for advertising — it exists solely so the operator can produce and publish their own videos.

Google and YouTube data

When a channel is connected to YouTube, the studio requests Google OAuth access with these scopes:

  • youtube.upload — to upload videos on the operator's behalf.
  • youtube — to manage those videos once uploaded (thumbnails, playlists, privacy and scheduling settings).
  • youtube.readonly and yt-analytics.readonly — read-only, to show the operator their own channel's statistics: public counters (views, likes, comments, subscribers) and YouTube Analytics reports (views, watch time, subscribers gained and lost, likes, comments, shares), for the channel as a whole and for the videos published from the studio. No revenue or monetary data is ever requested.

The studio only ever acts on channels the operator explicitly connects, only uploads and manages videos the operator created in this same tool, and never modifies or deletes any other content on the channel. Statistics are stored in the studio's own database, shown only to the operator, and never shared or sent anywhere else. The OAuth refresh token used to keep that access alive is encrypted at rest in the studio's own database (never stored or logged in plain text) and is never transmitted anywhere except directly to Google's own API.

To revoke access at any time, either disconnect the channel from within the studio (Channel → YouTube → Disconnect), or remove Paw Studio's access directly from your Google Account's third-party access settings. Either way, the studio's own copy of the refresh token is deleted immediately.

How sensitive data is protected

Sensitive data means the Google OAuth tokens, the YouTube data obtained with them, the API keys of the other providers, and the operator's sign-in credentials. They are protected as follows:

  • Encryption in transit. Every connection to the studio, and from the studio to Google, YouTube, the other providers and its storage, uses HTTPS (TLS). Nothing is served or sent over plain HTTP.
  • Encryption at rest. OAuth refresh tokens, provider API keys and two-factor secrets are encrypted with AES-256-GCM before they are written to the database, with versioned keys kept outside the database in the server's protected configuration (readable only by the service account), so they can be rotated. Short-lived access tokens are only ever kept in memory. None of these are written to logs, shown back in the interface, or sent to the browser.
  • Access control. Only the operator can sign in: a password stored as an Argon2 hash plus a mandatory time-based two-factor code. Sessions use HttpOnly, Secure, SameSite cookies, and every change is checked against the studio's own origin. The render machines that build videos authenticate with their own tokens and never receive Google tokens or YouTube data.
  • Private storage. Media and database backups are kept in a private storage bucket with no public access; a file is only reachable through a short-lived signed link created for the operator.
  • Least privilege. Google data is used only to provide the features described above, by the server alone, and is not used for advertising, sold, transferred to third parties, or used to train AI models. The studio's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
  • Retention and deletion. Revoking access deletes the stored tokens immediately and stops any further collection. The YouTube statistics already stored are deleted within 30 days of a request to the contact address below.
  • Operations. The server runs services without administrator privileges, behind a reverse proxy that only exposes the studio over HTTPS, with its software and dependencies kept up to date. Should a breach affecting Google user data ever occur, access is revoked and the affected tokens deleted at once.

Other providers

Image, lyrics and metadata generation may use OpenAI's or OpenRouter's API (OpenRouter forwards the request to the model vendor chosen); video clip generation may use OpenRouter's or Luma's API; song generation may use musicapi.ai's API. Only the specific prompt or request needed for that generation is sent (for a clip animating an image, that image), never YouTube account data or credentials. Generated media is stored in the studio's own private storage.

Contact

Questions about this policy or a request to review or delete stored data: contact contact@pawstud.io.