Privacy Policy
This policy explains what personal data Atlas Studio processes, why, on what legal basis, and what rights you have. Atlas Studio is an AI-assisted creative production workspace. It is designed to keep you in control of your data and of any action that leaves the workspace.
Connecting a third-party account (such as TikTok) to Atlas Studio does not by itself authorize Atlas Studio to publish any content. Publishing individual content always requires a separate, explicit approval that you give.
- Who is responsible
- Account & identity data
- Creative & production data
- Approval & governance data
- Connected third-party accounts
- Technical & security data
- Purposes of processing
- GDPR legal bases
- AI & external processors
- TikTok integration
- Publication processing
- Data sharing
- International transfers
- Retention
- Security
- Your GDPR rights
- Revocation & disconnection
- Children's privacy
- Changes to this policy
- Contact
1. Who is responsible
The controller responsible for the processing described here is Abiodun Olawuyi, an individual operating the Atlas Studio product under the brand JayQue from Germany. Atlas Studio is not operated by an incorporated company. Contact details are in the Legal Notice and in section 20 below.
2. Account & identity data
To use Atlas Studio you have an owner account. Depending on how the workspace is set up, this may include a name or identifier you choose and authentication information. Where a passphrase is used, Atlas Studio stores only a cryptographic verifier derived from it (using scrypt) — not the passphrase itself — so it can check a login without holding the secret.
3. Creative & production data
Atlas Studio processes the creative material you work with so it can run the production workflow, including:
- ideas, briefs, scripts, and storyboards you create or that are generated at your request;
- generated stills and video clips, assembled cuts, captions, and related production artifacts;
- the status of each production as it moves through the workflow.
This information is used to operate the workspace for you and is stored by the Atlas Studio deployment you use.
4. Approval & governance data
Because Atlas Studio requires your explicit approval for consequential actions, it records governance information such as authorization decisions, approval records, your publication settings and declarations, and a durable, append-only record of publication attempts and their outcomes. This record exists so that actions are accountable and cannot be silently repeated or misattributed.
5. Connected third-party accounts
If you connect an external account so that Atlas Studio can help you publish (for example, TikTok), Atlas Studio stores a provider-derived account identifier for that account — obtained from the provider's own user-information endpoint — so it can confirm it is acting on the correct account. Atlas Studio reads the access credentials needed for a request only at the moment of that request and does not copy them into its own records; its account-binding record holds only the provider-derived identifier, never access tokens or client secrets.
6. Technical & security data
Atlas Studio processes basic technical information needed to run and secure the software, such as timestamps, operational logs, and error information. This is used to keep the workspace working correctly and to protect its integrity.
7. Purposes of processing
- to provide the creative production workspace and its features to you;
- to prepare, and — only on your explicit approval — carry out, publication to accounts you have connected;
- to keep governance records so consequential actions are accountable;
- to secure the software and prevent misuse;
- to comply with legal obligations.
8. GDPR legal bases
We rely on the following legal bases under Article 6(1) GDPR:
- Performance of a contract / pre-contractual steps (Art. 6(1)(b)) — to provide the workspace you use.
- Consent (Art. 6(1)(a)) — to connect a third-party account and, separately, to publish specific content to it. You can withdraw consent at any time (see sections 16–17).
- Legitimate interests (Art. 6(1)(f)) — to secure the software and maintain accountable governance records, balanced against your rights.
- Legal obligation (Art. 6(1)(c)) — where processing is required to meet a legal duty.
9. AI & external processors
Depending on the features you use, Atlas Studio may send the content necessary to perform a task to third-party AI and media services acting as processors. These may include, according to the features enabled in your deployment, providers of large-language-model, text-to-speech, image and video generation, and stock-media services (for example Anthropic, OpenAI, ElevenLabs, Fal.ai, Replicate, and Pexels). Some processing — such as local speech transcription — may run on your own machine. Content is sent to a given provider only when you use a feature that requires it.
10. TikTok integration
If you choose to connect TikTok, Atlas Studio uses TikTok's official APIs with the permissions you grant, which may include reading basic account information (user.info.basic) and the ability to upload and publish video (video.upload, video.publish). Atlas Studio uses these to confirm the connected account, to read the current posting settings and constraints TikTok reports, and — only when you explicitly approve a specific publication — to upload and publish that video with the settings and declarations you chose.
Connecting TikTok does not authorize Atlas Studio to publish any content. Each publication is a separate, explicit act of authorization by you. Help from AI in creating or preparing content is never treated as your consent to publish it.
11. Publication processing
When you approve a specific publication, Atlas Studio sends the finished video and the publication settings and declarations you selected — such as visibility, interaction options, commercial-content status, and AI-generated-content disclosure — to the platform you are publishing to. Atlas Studio keeps a governance record of the attempt and its outcome. It reports a publication as completed only on the basis of the platform's own confirmation.
12. Data sharing
Atlas Studio does not sell your personal data. It shares data only: with the processors described in section 9 to deliver features you use; with a platform you publish to, at your direction and on your approval; and where required by law. It does not use your creative content to advertise to you.
13. International transfers
Some processors and platforms are based outside the European Economic Area, including in the United States. Where personal data is transferred internationally, it is protected by appropriate safeguards under Chapter V GDPR, such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.
14. Retention
Personal data is kept for as long as needed to provide the workspace to you and to keep the governance records described above, and thereafter only as long as required by law. You can delete creative content and disconnect accounts (see sections 16–17); some governance records may be retained where accountability or a legal obligation requires it.
15. Security
Atlas Studio is designed to minimise sensitive data: passphrases are stored only as a scrypt verifier, and connected-account tokens and secrets are not kept in its records (see sections 2 and 5). Appropriate technical and organisational measures are used to protect data, though no system can be guaranteed perfectly secure.
16. Your GDPR rights
Subject to the conditions in the GDPR, you have the right to: access your data (Art. 15); rectification (Art. 16); erasure (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time without affecting processing already carried out. You also have the right to lodge a complaint with a data-protection supervisory authority.
17. Revocation & disconnection
You can disconnect a connected account from Atlas Studio, which removes its stored account-binding identifier. You can also revoke Atlas Studio's access from within the third-party platform's own settings (for example, TikTok's app-permissions settings). Disconnecting stops further publication to that account.
18. Children's privacy
Atlas Studio is not directed to children. It is not intended for use by anyone under the age of 16, and personal data is not knowingly collected from children. If you believe a child has provided personal data, please contact us so it can be removed.
19. Changes to this policy
This policy may be updated as the product develops or as legal requirements change. Material changes will be reflected here with a revised "last updated" date.
20. Contact
For any privacy question or to exercise your rights, contact privacy@jayque.io.