Privacy Policy

Who we are

Naxbi Studio (“we”, “us”, “our”) operates the marketing site at naxbi.studio. This policy explains what data we collect on this site, why we collect it, and what we do with it.

Naxbi Studio is in pre-launch. The product itself is not yet available to the public; this site exists to describe what we build and to capture early-access interest via the waitlist.

What we collect

Waitlist email

If you submit your email through the waitlist form, we store that email so we can reach out when early-access spots open. We do not enrich it with third-party data, sell it, or share it with marketers.

Site analytics

We use a self-hosted instance of Umami to understand which pages visitors land on and how the site performs. Umami is privacy-friendly by design: it sets no cookies, does not track you across sites, and aggregates data at the page level rather than identifying individuals.

Server logs

Our web server keeps short-lived access logs (request paths, response codes, timestamps, truncated user agents) for operational debugging. Logs rotate within days and are not used for marketing.

When you connect a third-party platform

Once the Naxbi product is available to you, you may choose to connect a TikTok, Instagram, Facebook, Threads, YouTube, LinkedIn or X account. We use each platform's official OAuth flow, which gives Naxbi a scoped access token. We never receive or store your platform password.

For every connected platform: (a) we only access the data explicitly requested by the OAuth scopes shown to you on the consent screen, (b) the data is visible only to authenticated members of your Naxbi workspace, (c) we do not sell it, share it with data brokers or use it for advertising targeting, and (d) when you disconnect the account or close your workspace, we delete the data we received from that platform from our active systems within 30 days, unless a law requires us to keep a minimal record.

TikTok

Data accessed: your TikTok display name, username, avatar and bio (user.info.profile); account-level stats such as follower count, following count, total likes and video count (user.info.stats); and the list of your own published TikTok videos with id, caption, cover image, publish time, view count, like count, share count and comment count (video.list).

Why: to display the connected account on Workspace → Settings → Connected accounts, to populate the Workspace → Analytics page with your current TikTok baseline next to your other platforms, and to feed the per-workspace learning loop so the AI prompts learn from the angles that perform for your own audience. We do not download, mirror or re-publish your TikTok video files.

Revoke access: TikTok app → Profile → Settings and privacy → Security and permissions → Manage app permissions. Deletion: email hello@naxbi.studio; the TikTok data tied to your workspace is removed within 30 days of disconnection or request.

Meta (Instagram, Facebook, Threads)

Data accessed: account profile (name, handle, avatar, business account metadata), the list of your own published posts with engagement counters, and (only when you explicitly authorise it through Instagram Business Login) the publishing endpoint Naxbi uses to schedule new posts on your behalf. We only request the Meta Graph API permissions necessary for the features you turn on.

Why: connected account display, workspace analytics, the per-workspace learning loop, and content scheduling and publishing where you have authorised it.

Revoke access: Facebook → Settings & privacy → Settings → Apps and websites; Instagram → Settings → Apps and websites; Threads → Settings → Account → Apps and websites. Deletion: email hello@naxbi.studio or use Meta's revocation flow; the Meta data tied to your workspace is removed within 30 days.

Naxbi is not endorsed by, affiliated with or sponsored by Meta Platforms, Inc. Instagram, Facebook and Threads are trademarks of Meta Platforms, Inc.

YouTube

If you connect a YouTube channel, Naxbi's use of information received from Google APIs (including the YouTube API Services) adheres to the Google API Services User Data Policy, including the Limited Use requirements. For information about how Google handles your data, see the Google Privacy Policy.

Data accessed: your channel profile, channel statistics, and the list of your own uploaded videos with engagement counters.

Why: connected account display, workspace analytics, and the per-workspace learning loop. Naxbi does not transfer YouTube data to third parties for serving advertisements, does not use YouTube data to build profiles for advertising, and does not allow humans to read YouTube data except (i) for security, fraud or abuse investigations, (ii) to comply with applicable law, (iii) for aggregated and anonymised operational metrics, or (iv) with your own affirmative agreement for a specific support case.

Revoke access: at any time at https://security.google.com/settings/security/permissions. Deletion: email hello@naxbi.studio; the YouTube data tied to your workspace is removed within 30 days.

LinkedIn

Data accessed: profile (name, headline, avatar, vanity URL) and, where you have authorised it, the list of your own published posts with engagement counters.

Why: connected account display, workspace analytics, and the per-workspace learning loop.

Withdraw consent / revoke access: LinkedIn → Settings & Privacy → Data privacy → Other applications → Permitted services. If your access token expires, Naxbi re-prompts you before collecting any new data. If you withdraw consent, close your Naxbi workspace or request deletion, all Content collected through the LinkedIn APIs on your behalf is deleted from our active systems within 30 days, unless a law requires us to retain it.

X (formerly Twitter)

Data accessed: profile (handle, name, avatar, public account metrics) and the list of your own published posts with engagement counters.

Why: connected account display, workspace analytics, and the per-workspace learning loop. Naxbi does not use X content for advertising targeting and does not redistribute X content outside your own workspace.

Revoke access: x.com → Settings → Security and account access → Apps and sessions → Connected apps. Deletion of removed posts: if a post is deleted on X, Naxbi removes the corresponding cached entry from its analytics within 24 hours, in line with the X Developer Agreement.

What we do not collect

• We do not use advertising cookies or third-party trackers.
• We do not buy, sell, or rent personal data.
• We do not run remarketing pixels (no Meta Pixel, no Google Ads tag, no LinkedIn Insight).

How long we keep your data

• Waitlist email: until you ask us to remove it, or until the waitlist is retired (at which point we delete the list).
• Analytics: aggregated page views, retained for up to 24 months.
• Server logs: rotated and discarded on a rolling basis (days, not weeks).

Your rights

You can ask us at any time to:

• Tell you whether we hold your email and what we have on file.
• Remove your email from the waitlist.
• Provide a copy of the data we hold about you.

Email hello@naxbi.studio and we will action requests within a reasonable time frame, typically a few business days.

Data deletion

To delete your waitlist email, send a message to hello@naxbi.studio from the same address you used to join. We will remove that email from the waitlist records we control unless we need to keep a minimal record for abuse prevention or legal reasons.

Where data is stored

The site, the waitlist storage, and the analytics instance run on infrastructure located in the European Union. We do not transfer your data outside the EU.

Changes to this policy

We may update this page as Naxbi Studio evolves out of pre-launch. Material changes will bump the effective date at the top and, where appropriate, be announced to waitlist subscribers before they take effect.

Contact

Questions about this policy or your data: hello@naxbi.studio.