Privacy Policy

Version 2026-10-09 · Effective: October 9, 2026

1. Who we are

Alvin's Club Studio is operated by FUTUREVERSE TECHNOLOGIES LLC, registered in the United States, 30 N Gould St Ste N, Sheridan, WY 82801, United States. This policy explains how we handle information when you use Alvin's Club Studio, directly or through an AI assistant such as ChatGPT, Claude or Meta Muse. Contact: service@alvinsclub.ai.

2. Information we process

Account information: your email address, account identifier, API key (stored so we can authenticate you) and billing records. Card details are handled by Stripe; we do not receive full card numbers.

Sign in with Google: if you choose "Continue with Google", Google tells us only your email address and that Google has verified it. We use it to open or sign in to your account, and nothing else; we do not receive your Google password, contacts or any other Google data.

Requests: product page links, the product photos and product information we fetch from those pages, any creative brief you provide, the scripts we write, and the videos and photos we generate.

Technical records: request logs such as time, IP address, user agent and error details, used for security, troubleshooting and preventing abuse.

Messages: if you contact us on WhatsApp, we receive your phone number, WhatsApp profile name and the messages you send, and use them only to reply to you. WhatsApp's own privacy policy also applies.

AI assistant connections: when you connect us to ChatGPT (OpenAI), Claude (Anthropic) or Meta Muse, we receive an access token that identifies your account and, for each action you ask for, only the details that action needs (for example a product page link, the number of videos, a reference video link or a lookbook occasion). We do not receive your full conversation, your assistant account details or other chats. We use these details only to carry out the action and show it in your workspace, and we do not use them to train AI models. You can disconnect at any time from the assistant's settings or from your account page, which revokes the token.

Social accounts you connect for posting: if you connect a TikTok, Instagram, YouTube or LinkedIn account so we can post for you, we receive the information described in section 13 ("Posting to your social accounts"), and nothing else from that platform.

We do not ask for personal information about your customers. Please do not include personal data in briefs.

3. How we use it

To provide the service you request (fetching, preparing photos, writing and reviewing scripts, generating and delivering content), to bill you, to keep the service secure, to prevent abuse, to support you and to improve quality, and to measure our own ads (see section 11). We do not sell your account information or the content you make.

4. Who we share it with

Service providers that process data for us under contract: cloud hosting and storage (including Google Cloud and BytePlus), AI model providers used to prepare photos and generate scripts, videos and photos (including Google Gemini and ByteDance Seedance models accessed through our gateway, and ElevenLabs for an account's own voice), and Stripe for payments. When you ask us to post, we send what you asked us to post (a video and its caption, or on LinkedIn also text, links or photos) and the settings you chose to the platform you selected (TikTok, Instagram, YouTube or LinkedIn), which then handles it under its own terms and privacy policy. We do not share the data we receive from those platforms with anyone else, except the cloud hosting providers that store it for us under contract.

The AI assistant you use (ChatGPT by OpenAI, Claude by Anthropic or Meta Muse) sends us your requests and receives our results, such as video links, captions and status; its own privacy policy governs what it does with your conversation. We may also disclose information when required by law or to protect rights and safety.

5. Where data is processed

Our servers and providers are located in several countries, including the United States and Singapore. Where required, we use appropriate safeguards for international transfers.

6. Retention

We keep generated videos and photos, the product photos we prepared, and the scripts and product details of each request for 90 days after they are created, then delete them automatically, so please download anything you want to keep. Billing records are kept as long as required by law, and security logs for a limited period. You can ask us to delete your content earlier. Access tokens for social accounts you connect are kept only while the account is connected (see section 13). Records of posts we made for you (the post ID, link, status and time) are kept for 90 days, then deleted.

7. Your choices and rights

You can request access, correction or deletion of your information, or close your account, by emailing service@alvinsclub.ai or following the steps at https://studio.alvinsclub.ai/data-deletion. We complete deletion requests for data received from connected social accounts within 7 days. Depending on where you live (for example California or Canada) you may have additional rights, including under the California Consumer Privacy Act where it applies; we will respond as required by applicable law.

8. Security

We use access controls, encryption in transit and separate credentials per account. No system is completely secure; tell us promptly if you believe your API key has been exposed.

9. Changes

We will post changes on this page with a new version date and notify active accounts of material changes.

10. Photos of people for your own models

If an account adds its own model, we process the photos of that person and a short description of their appearance (for example age range and hair) to show that person in the account's lookbooks and videos. We do not create face-recognition templates or other biometric identifiers, do not use the photos to train AI models, do not show them to other accounts and do not sell them. They are sent only to the AI model providers listed above, to generate that account's content.

The photos are deleted when the account deletes the model, when the account is closed, or after 90 days without use. The account's record of the person's consent (what was confirmed and when) is kept as proof. The person shown can ask for deletion at service@alvinsclub.ai. Photos already sent to an AI model provider to make a video or photo follow that provider's own retention.

11. Advertising pixels and your opt-out

On our public pages (not inside your studio, and not on pages that carry sign-in links, keys or payment details) we use advertising pixels from TikTok, Meta and Google to measure our ads: page views, submissions of the free-trial email form, trial sign-ups and clicks on buy buttons. These providers may set cookies and receive your IP address, browser details and the page visited. We do not send them your email, name, API key or account details.

Under California law this may count as "selling" or "sharing" personal information for cross-context behavioral advertising. You can opt out at any time on our "Do not sell or share my info" page (/privacy/choices, linked at the bottom of every page), and we honor the Global Privacy Control signal: if your browser sends it, the pixels do not load.

12. Your voice

If an account adds its own voice, we process the recording to make a digital copy of that voice (a voice clone at ElevenLabs, through our gateway) and use it only to voice that account's videos. The recording is sent to ElevenLabs twice, once to remove background noise and once to make the clone, and is then deleted from our servers. We keep the provider's voice reference while the voice is in use, and a record of the consent given (what was confirmed, when, and a fingerprint of the recording) as proof. We do not use the voice to train AI models, show it to other accounts or sell it.

When you delete the voice or record a new one, when the account is closed, or after 90 days without use, we stop using it and delete the copy held by ElevenLabs (usually within an hour; retried until confirmed).

13. Posting to your social accounts

You can connect your own TikTok, Instagram, YouTube or LinkedIn account and ask us to post to it. Connecting is optional. We post only to the account you connected yourself and only on your instructions: we do not decide on our own what to post or when, and we never ask for or store your password for these platforms.

On TikTok, Instagram and YouTube, we post a video you made with Alvin's Club Studio, after you choose it and confirm the post. Every such video is posted with the platform's AI-generated content label where the platform provides one (TikTok and YouTube); this cannot be turned off. On Instagram, the caption includes a "Made with AI" disclosure.

On LinkedIn, we post what you ask us to post: text, links, photos or videos that you or your AI assistant (such as Meta Muse) provide, or a video you made with Alvin's Club Studio. A post is published when you ask for it, or at a time you set yourself in your assistant (for example a weekly post you scheduled there). You can ask us to edit the text of a post we published for you, or to delete it.

What we receive and store, for each connected account: the account or channel ID, the display name or username, the profile picture or channel thumbnail URL, and the access and refresh tokens the platform gives us. Tokens are encrypted at rest and only our posting service can use them. For each post we make, we keep the ID, link, status and time the platform returns; for LinkedIn posts, also the text, the link and the web addresses of the photos or videos you asked us to post.

What we do not do: we do not read your feed, your other posts or videos, your followers or connections, comments, messages or analytics. We do not use data received from these platforms for advertising, do not sell it, do not share it with third parties except as described in section 4, and do not use it to train or improve AI models.

How long we keep it: tokens and account details are deleted as soon as you disconnect the account in your studio, when you remove our app in the platform's settings (where the platform tells us), or when the platform no longer accepts the token. Post records are kept for 90 days, then deleted.

TikTok. We use TikTok Login Kit and the Content Posting API with the permissions user.info.basic (your display name and avatar, so you can see which account is connected) and video.publish (to post the video you confirmed, with the privacy, interaction and commercial content settings you chose). TikTok's Privacy Policy (https://www.tiktok.com/legal/page/us/privacy-policy/en) applies to your use of TikTok. You can remove access in the TikTok app under Settings and privacy > Security > Manage app permissions; we then delete your TikTok data.

Instagram. We use the Instagram API with Instagram Login with the permissions instagram_business_basic (your professional account's ID, username and profile picture, and the link to Reels we publish for you) and instagram_business_content_publish (to publish the Reel you confirmed). Only Instagram professional accounts can be connected. Meta's Privacy Policy (https://www.facebook.com/privacy/policy) applies to your use of Instagram. You can remove access in Instagram under Settings > Apps and websites; Meta then sends us a deletion request, we delete your Instagram data, and you can check the status at the link Meta shows you.

YouTube. Alvin's Club Studio uses YouTube API Services. We request youtube.upload (to upload the video you confirmed to your channel, with the title, description, privacy status and "made for kids" setting you chose, marked as altered or synthetic content) and youtube.readonly (to show which channel you connected and the processing status of videos we uploaded). By posting to YouTube you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and the Google Privacy Policy (https://policies.google.com/privacy) applies. You can revoke our access at any time from your Google account security settings at https://security.google.com/settings/security/permissions. If you revoke access, we delete the YouTube data we stored about you within 30 days (immediately if you disconnect in your studio), and we re-check that stored YouTube data is still authorized at least every 30 days. We do not allow third parties to serve ads in Alvin's Club Studio.

Alvin's Club Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

LinkedIn. If you connect LinkedIn, we request openid, profile, email and w_member_social to show which member is connected and to publish, edit and delete the posts you ask for. LinkedIn gives us no refresh token, so the connection ends after 60 days and you connect again. You can disconnect at any time by asking your assistant (for example "disconnect my LinkedIn") or in your studio, which deletes the connection, and you can remove our access in LinkedIn under Settings > Data privacy > Permitted services. Posts already on LinkedIn stay there until you delete them.

To delete your data from connected accounts, disconnect them in your studio, remove our app in the platform's settings, follow https://studio.alvinsclub.ai/data-deletion or email service@alvinsclub.ai.