tofu studio

Privacy Policy

Last updated November 6, 2026

tofu studio (tofu.studio) is run by FORMWRK Studio / LLC, 6103 S Kenwood Ave Apt 3A, Chicago, IL 60637, United States. This policy says what we collect when you use it, what we do with it, and how to have it deleted. Questions go to hello@tofu.studio.

1. What we collect

  • Your account. You sign in with a code we email you. We keep your email address and the times you sign in.
  • Your organization. Its name, its members' email addresses and roles, and what you tell us about it: what you sell, who watches, your call to action and link, how you talk, the words to use and avoid, your posting times and hashtags, and the logo, photo, colour and font you upload.
  • What you upload and what we make from it. The recordings you upload, and what we make from them: an edited copy, a transcript, the face positions used to frame each clip, the clips themselves with their titles, hooks and captions, and the notes and replies your team leaves on them.
  • Connected accounts. When you connect YouTube, Instagram, a Facebook page or TikTok, the account's id, name and handle, the permissions you granted, and the access tokens the platform issues. Tokens are stored encrypted (AES-256-GCM) and never shown, to you or anyone.
  • Numbers from the platforms. Once a day, for each connected account: its followers and new followers by day, and for each of its posts the likes, comments, views, reach, saves, shares and watch time the platform reports. We show them to your organization beside its clips.
  • What we post. For each clip on each network: when it was booked and posted, the text it went out with, its link, and any error the platform gave. For TikTok, also the choices a member made for that clip when approving it: who can view it, whether others may comment, duet or stitch, and whether it is promotional or branded content.
  • Comments that ask for your link (Instagram). When your organization sets a keyword and someone comments it, or sends it in a DM, on your Instagram account: their Instagram-scoped id and username, the comment's id and the reel it is on, and whether and when we sent them your link. We read the comment's words only to look for the keyword, and do not keep them.
  • Cookies and optional analytics. We use cookies to keep you signed in. If you opt in and are 18 or older, Microsoft Clarity records masked interactions and measures visits, clicks, navigation and product milestones to help us improve tofu. We mask page content and do not send your email, worker key, recording text or custom user identity as analytics events. Clarity may use analytics cookies; we deny advertising storage. See Microsoft’s privacy statement. You can change your choice below.
  • Logs. Our host records requests (address, time, browser) to run and secure the service, and keeps them for a short period.

2. How we use it

Only to run tofu studio for your organization: to make clips from your recordings, to show them to your members for review, to publish the clips a member approves, at the posting times your organization set, and to keep you signed in. With your permission, we also use interaction data to improve the product. We do not sell your data, show ads, or use your content or data to train AI models. We publish nothing a member of your organization did not approve.

3. Google and YouTube

tofu studio uses YouTube API Services. When you connect YouTube, you also agree to the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy.

With the permissions you grant, we read your channel's name to show which channel is connected, and upload the clips your organization approves to it as Shorts, at their posting times. We read nothing else from your channel.

tofu studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke tofu studio's access at any time on your Google account's security settings page, or with Disconnect on Settings → Accounts.

4. Instagram, Facebook and TikTok

We use each platform's official API, with the permissions you grant, to publish the clips your organization approves at their posting times, to read the numbers above, and on Instagram to answer the comments that ask for your link (below). Each platform handles your data under its own policy: Instagram, Facebook, TikTok. You can remove our access in each platform's settings, or with Disconnect on Settings → Accounts.

From TikTok we read the connected account's name, username and picture, and what it may post (who it may post to, whether it allows comments, duets and stitches, and its longest video), to show beside Approve. We send TikTok only a clip a member approved with TikTok's choices, the caption they left, and those choices; TikTok gets the clip without its Follow button.

On Instagram, when your organization sets a keyword, Instagram tells us of each new comment and DM on your account. To a comment or DM that names the keyword we answer from your account, with a DM (your message, then your link once the person follows you) and a short public reply under the comment. We check whether they follow your account only after they write to it, and send nothing else to anyone.

5. Who else sees it

  • The members of your organization.
  • The platforms you publish to, which receive the clips and text you publish, when you publish them.
  • Our service providers, who process data only to run the service for us: Supabase (database and file storage, United States), Vercel (hosting, United States), Resend (the sign-in email, United States), Anthropic (the transcript of each recording and your organization's profile, to choose its clips and write their hooks and captions, and your notes on a clip, to answer them; United States), and Metricool (scheduling the posts to networks tofu studio does not post to itself yet, for organizations that use it).
  • External Mac helpers send scoped requests containing your organization’s content to your signed-in Claude Code account, under its own terms. tofu’s private worker handles transcription, editing and rendering. Internal full-worker installations may process media locally. Helper task payloads are deleted when their parent processing job ends.
  • Microsoft Clarity receives interaction data when you opt in to analytics.
  • Anyone the law requires us to disclose it to.

6. How long we keep it

For as long as your organization uses the service. A platform's tokens are deleted the moment you disconnect it. If you revoke our access through Google, we stop using your channel at once.

7. Deleting your data

Email hello@tofu.studio from the address you sign in with and say what to delete: a connected account's data, your organization, or everything. We delete it within seven days and confirm by email. You can also disconnect any platform yourself on Settings → Accounts, which deletes its tokens at once.

8. Security

Traffic is encrypted in transit. Platform tokens are encrypted at rest. Your organization's data is readable only by its members, and every file leaves our storage through a link that expires.

9. Your rights

You can ask to see, correct, export or delete the personal data we hold about you, wherever you live. Write to hello@tofu.studio; we answer within 30 days.

10. Children

tofu studio is not for children under 13, and we do not knowingly collect their data.

11. Changes

When this policy changes, the date at the top changes. If a change affects how we use data we already hold, we email the owners of every organization first.

PrivacyTerms

© 2026 tofu studio