Privacy Policy

Last updated: 2 August 2026

iStudio (“we”, “us”) is a social publishing tool at istudio.genai.io.vn that lets you connect a Facebook Page and schedule or publish posts to it. This policy explains what we collect, why, how we protect it, and how you can delete it.

Who we are

iStudio is operated as part of the GenAI (genai.io.vn) product family. You sign in with your GenAI ID account, then optionally connect a Facebook Page you manage so that iStudio can publish content on your behalf. We only ever act on the Pages and content you explicitly connect and submit.

What we collect

Account profile — when you sign in through GenAI ID single sign-on, we store your account identifier, email address, display name, and avatar.
Facebook Page connection — when you connect a Page through Facebook Login, we store the Page’s ID, name, and picture, and a Page access token that lets us publish to that Page. The token is encrypted at rest and is used only to publish the content you schedule.
Content you create — the captions, links, media (images/videos) you upload, and the schedule times of the posts you build in iStudio.
Publishing records — the status of each scheduled post and the ID of the resulting post on the platform, so we can show you what published and retry failures.
Session data — a login cookie holding an opaque session identifier.

We do not collect payment information, and we do not run third-party advertising or analytics trackers.

How we use it

To authenticate you and keep you signed in.
To publish or schedule the posts you create to the Facebook Page you connected.
To show you the status and history of your posts and connected Pages.

We do not use your content or Page data for any purpose other than delivering the publishing features you asked for.

How we share it

We share data only where it is necessary to run the service:

Meta / Facebook — we send your post content and Page access token to the Meta Graph API to publish to your Page. Meta’s handling of that data is governed by Meta’s own policies.
Cloudflare — our application, database, and media storage run on Cloudflare’s infrastructure.

We do not sell your data or share it with any other third parties for advertising or marketing.

Where it is stored and how it is protected

Data is stored in Cloudflare D1 (database) and Cloudflare KV (sessions and uploaded media). Facebook Page access tokens are encrypted before being stored. All traffic to istudio.genai.io.vn is served over HTTPS.

Data retention

We keep your account, connected Pages, content, and publishing records for as long as your account is active. When you disconnect a Page, its stored access token is deleted. When you delete your data or account (see below), we remove your records from our systems.

Deleting your data

You are in control of your data at any time:

Disconnect a Page — removing a connected Page in iStudio deletes the stored Page access token for it immediately.
Delete everything — to delete your iStudio account and all associated data (profile, connected Pages, content, and publishing history), email us at the address below with the subject “Delete my data”, using the email on your account. We will process the deletion and confirm when it is complete.
Revoke access from Facebook — you can also remove iStudio from your Facebook account at any time under Settings & Privacy → Settings → Apps and Websites, which revokes our access to your Pages.

Children’s privacy

iStudio is not directed to children under 13, and we do not knowingly collect data from them.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date at the top of this page.

Contact

Questions about this policy or requests to delete your data: contact@genai.io.vn.