Privacy Policy

Anthem Studio ("we," "us," or "our") operates the website at anthemstudio.ai and the Anthem Studio platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, and profile picture through our authentication provider (Clerk).

1.2 Brand & Business Data

To power your AI marketing, you may provide brand details such as your business name, website URL, industry, target audience, brand voice guidelines, visual identity preferences, content strategy settings, and product or service descriptions.

1.3 Connected Accounts

When you connect third-party platforms (e.g., Facebook, Instagram, LinkedIn, X/Twitter, TikTok, Pinterest, Google Workspace, Canva), we store your platform username and encrypted OAuth access tokens necessary to publish and manage content on your behalf.

1.4 Content & Conversations

We store content you create or generate through the Service, including AI studio conversations, messages, generated text, images, email campaigns, and any feedback you provide on AI outputs.

1.5 Email Campaign Data

If you use our email features, we collect recipient email addresses you provide and track delivery events (sent, delivered, opened, clicked, bounced). Open and click tracking may record the recipient's IP address and user agent.

1.6 Usage & Analytics Data

We collect analytics snapshots from your connected social accounts (follower counts, engagement rates, post performance) as well as internal usage data such as AI model usage, token consumption, and feature interactions to operate and improve the Service.

1.7 Payment Information

Payment processing is handled by Stripe. We do not store your credit card number or full payment details on our servers. Stripe may collect billing information in accordance with their own privacy policy.

1.8 Cookies & Local Storage

We use cookies for authentication (managed by Clerk) and local storage to remember your theme preference and UI settings. We do not use third-party advertising cookies.

2. How We Use Your Information

• Provide the Service: Generate AI-powered marketing content, schedule and publish posts, send email campaigns, and display analytics.
• Personalization: Tailor AI outputs to match your brand voice, audience, and content strategy.
• Account management: Authenticate your identity, manage subscriptions, and process payments.
• Improve & monitor: Analyze usage patterns, diagnose technical issues, and improve the reliability and performance of the Service.
• Communication: Send transactional emails (e.g., account verification, billing) and, with your consent, product updates.
• Legal compliance: Fulfill legal obligations and enforce our Terms of Service.

3. Third-Party Services

We share information with the following categories of service providers, only to the extent necessary to operate the Service:

• AI providers (Anthropic, OpenAI, Google) — Your prompts and brand context are sent to AI models to generate content. These providers process data in accordance with their own privacy policies and data processing agreements.
• Social media platforms (Meta, LinkedIn, X, TikTok, Pinterest) — Content you approve is published to your connected accounts.
• Authentication (Clerk) — Handles sign-in, sign-up, and session management.
• Payments (Stripe) — Processes subscription billing and payments.
• Cloud infrastructure — We host data on secure cloud servers with encryption at rest and in transit.
• Error monitoring (Sentry) — Captures error reports to help us fix bugs. These reports may include technical request data but not your content.

We do not sell your personal information to third parties.

4. Data Security

We take the security of your data seriously and implement industry-standard measures, including:

• AES-256 encryption for stored OAuth tokens and sensitive credentials.
• TLS/HTTPS encryption for all data in transit.
• JWT-based authentication with secure session management.
• Role-based access controls for team accounts.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, unless we are required to retain it for legal obligations.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data.
• Portability: Request a machine-readable export of your data.
• Objection: Object to or restrict certain processing of your data.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected].

7. European Users (GDPR)

If you are located in the European Economic Area, our legal bases for processing your personal data include:

• Contract: Processing necessary to provide the Service you signed up for.
• Legitimate interest: Improving and securing the Service, preventing fraud, and internal analytics.
• Consent: Where you have given explicit consent (e.g., marketing communications).

You may lodge a complaint with your local data protection authority if you believe your rights have been violated.

8. California Users (CCPA)

Under the California Consumer Privacy Act, California residents have additional rights including the right to know what personal information is collected and how it is used, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

To make a CCPA request, contact us at [email protected].

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

[email protected]