Privacy Policy
Effective: September 25, 2026
This site (mayastudio.ai) and the Maya Studio app are operated by MayaStudio ("we"). This policy says what we collect, which is deliberately very little.
What we collect
- The waitlist, if you join it. Your email address; the answers you choose to give about what you'd use Maya Studio for (the features you pick, your niche, and anything you write); whether you asked for build updates; which link brought you (for example, "from a DM"); and when you joined. Your browser is also given a random key, once, so it can save your answers; it identifies nothing else. We don't record your IP address or your device.
- Aggregate analytics. Our hosting provider's web analytics, which is cookie-less and does not track you across sites. We see page counts and referrers, not people.
This site has no accounts, and the waitlist is the only form on it.
What the waitlist is for
- To email you when Maya Studio opens, and to let people on the list in first.
- If you ask for them, occasional build updates.
- To learn, in total, which features people want most. We read the answers as counts, not as profiles of you.
Unsubscribe or ask to be removed at any time by emailing hello@mayastudio.ai, and your entry is deleted. See how to delete your data.
What we don't do
- No advertising or tracking cookies.
- No sale or sharing of personal data.
- No profiling, no cross-site tracking.
Where it lives, and who can see it
The site and the waitlist run on our hosting provider's servers. Waitlist entries are kept there until you ask us to delete them, or until the waitlist closes after launch, whichever comes first.
Only we can read the list. The website can add you to it, but it can't show the list to anyone, and it never says whether an address is already on it: signing up again looks the same as signing up the first time, and changes nothing.
Questions
Anything about this policy: hello@mayastudio.ai. If you've emailed us, we have your address because you sent it; ask and it's deleted.
Children
This site is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has joined the waitlist or sent us something by email, write to us and it's deleted.
Links off this site
Links to Instagram, TikTok, YouTube, and any tool we mention lead to services we don't operate. Once you follow one, that service's own privacy policy governs what it collects. We receive nothing back about your visit.
The Maya Studio app and the accounts it runs
Maya Studio is a Mac and iPhone app, in development, that writes, makes and posts videos for creator accounts. Today it runs only our own accounts. This section says what it does with an account connected to it, and, further down, what it does with other people's public posts and comments.
The app is also an MCP server: AI agents we connect to it, such as Claude, can use its tools to read and act on the data described in this section. It only accepts connections from the same Mac, so an agent reaches it only if we run that agent there. The app's own scheduled work runs through Claude as well. What an agent reads is then handled under its provider's terms.
What it reads and sends, by platform
- Instagram. It reads the account's ID, username and follower count; its list of posts; each post's views, reach, likes, comments, saves, shares and average watch time; and the comments on its posts (see below). It sends the videos, photos, carousels and stories the user chooses to post, with their captions, and a first comment. Instagram fetches each file from an unguessable web address on our hosting provider's storage, and the file is deleted once Instagram has it (if that delete fails, a sweep removes it within a day and a half).
- Threads. It reads the account's ID and username, and each post's views, likes, replies, reposts, quotes and shares. It sends the text, photo and video posts the user chooses to post, fetched the same way as on Instagram.
- TikTok. It reads the account's ID, display name and profile picture; the posting options TikTok offers that account (who can see a post, whether comments, Duet and Stitch are allowed, the longest video it can post); the account's list of videos; and the view, like, comment and share counts of those videos. It sends only the videos, photos, captions and post settings the user chooses to post, or to send to their TikTok drafts, and labels them as AI-generated. Profile pictures are shown, not stored.
- YouTube. It reads the channel's ID and name, each video's view, like and comment counts, and how much of its videos people watch on average. It uploads the videos the user chooses to post, with their title, description and visibility, and marks them as containing AI-generated content.
Where it's kept, and who else gets it
- Sign-ins stay in the Keychain, synced by iCloud Keychain to the user's own devices.
- Post IDs, links and view counts are kept in the app's database on those devices. The record of what was posted where also syncs through the user's own iCloud account, and the Mac can keep a daily backup of its database (the last seven) in the user's own storage.
- No one else gets it. None of it reaches a MayaStudio server, apart from the comment replies described below, and none of it is sold or shared.
- Disconnecting: disconnecting an account in the app's settings deletes its sign-in from the Keychain. You can also remove Maya Studio from the apps connected to your account in that platform's own settings.
If you comment on our Instagram posts
The app reads the comments on our own Instagram posts: each commenter's username, the comment's text, its likes and when it was posted. The AI agents we connect to the app read them, usernames included, when it reviews how a video did, to judge whether people understood it and to decide what to make next, and it may quote a comment in the review it writes for us. It never replies to them. They're kept in the app's database on our Mac and in its backups, not synced anywhere else, and not sold or shared. 180 days after a comment was posted, its username and text are erased automatically; the Mac's daily backups, which hold the last seven days, can keep them up to a week longer. We don't use them to contact you, apart from the comment replies described below, if you comment the keyword. To have yours deleted, see how to delete your data.
Comment replies on Instagram
On some of our Instagram posts, commenting a keyword (for example, "STUDIO") gets you a direct message from that account with the link you asked for, and a short public reply under your comment. It only answers comments made on our own posts. Each comment is answered once, each person at most once a day, and if you write back within 24 hours you get one more message. All of this is automatic.
- What we keep: the Instagram user ID and username of the person who commented, the comment's ID, which keyword it matched, whether the message and reply were sent, and when. We don't keep the text of your comment or of any message you send back.
- Why: so no one is messaged twice for the same comment, and so we can see that it's working.
- How long: 30 days, after which it's deleted automatically.
- Who else gets it: no one. It's stored on our hosting provider's servers, and it isn't sold or shared.
- Opting out: don't comment the keyword, or delete your comment. To have your record deleted sooner, see how to delete your data.
Trend research
To choose what our videos talk about, the app looks at what's popular on TikTok, Instagram, YouTube and Reddit, using research services that return public posts for a few keywords. From some of those public posts it saves the link, the creator's public username, the caption, the public view and like counts, a transcript of what's said, and up to five of the post's public comments, without their authors. It's used only to spot trends, the AI agents we connect to the app read it for that, and it's deleted after 45 days (a post we saved by hand is kept until we remove it). We don't contact the people behind these posts or build profiles of them.
The app also keeps a log of its scheduled AI work, the last 200 runs, on our Mac. Those logs can include copies of the comments and public posts described above, and they're deleted as newer runs replace them.
Changes
If this policy changes, the new version appears here with a new effective date.