O22
Back to o22.studio →

Draft — counsel review pending

This is the short version of our privacy posture. Full policy lands with launch counsel review. The deletion, consent capture, and audit-log practices below are committed and will not change materially.

Privacy

Version 0.1 · Updated 2026-05-16

What we store about you

  • · Account: email, name, OAuth provider ID.
  • · Brand profile: logo, color palette, voice samples, product photos, audience description — whatever you upload or have us extract.
  • · Voice clone consent audio: a separate audio recording of you (or a documented voice owner) consenting to clone. Retention-locked for 30 days minimum.
  • · Render history: every variant pack you generated, with the brief and the finished MP4s.
  • · Consent log: per-event records of every Terms or consent acceptance — timestamp, IP, exact text hash you saw.
  • · Cost + usage analytics: anonymized aggregate spend, durations, error rates.

Who can see your data

Only you and Omar (the founder). No third-party data brokers. No analytics vendors that resell. We use Google Cloud for compute and storage, Stripe for payments, and ElevenLabs for voice cloning — each of these only sees the data they need to perform their service. None of them get your brand profile in aggregate.

How to delete your data

Go to Account Settings → Delete brand profile. We run a two-phase deletion: immediate cascade of your data from our systems, then a background retry queue to delete your voice clone from ElevenLabs (up to 7 days if their API is degraded). You get a deletion certificate by email when both phases complete. Consent log records are retained in a soft-delete bucket for 30 days post-deletion (audit and legal retention), then hard-deleted.

Download your data

Go to Account Settings → Download My Data. We return a ZIP with your consent log, brand assets, render history, and audit trail within 45 days (GDPR Article 15). Requested by email at privacy@o22.studio? Same SLA.

Voice cloning specifically

ElevenLabs requires us to capture explicit consent audio from any voice owner before we clone their voice. If you clone your own voice, we record a 10-second statement from you. If you clone a third-party voice (a spokesperson, a hired actor), you must produce signed written consent. Voice clones can be deleted at any time from your account, which triggers an ElevenLabs DELETE call that we retry until success.

Contact

For privacy questions: privacy@o22.studio