Privacy Policy — BBAE Studio

Bae Ventures Oy · Last updated: June 9, 2026

1. Who we are

BBAE Studio is a service operated by Bae Ventures Oy (business ID: 3384097, Helsinki, Finland). We provide AI-powered marketing automation tools to business clients. Contact: sup@bbae.fi

2. What data we collect

When you connect your social media or advertising accounts to BBAE Studio, we collect:

• Facebook/Instagram account data: Page IDs, Instagram Business Account IDs, access tokens

• Ad account data: Campaign names, ad performance metrics (impressions, clicks, spend, CTR), audience targeting settings

• Content data: Posts generated on your behalf and publishing history

• We do not collect personal data of your social media followers or end users

3. How we use your data

We use your connected account data solely to:

• Generate social media content on your behalf (via OpenAI GPT-4 and Anthropic Claude APIs)

• Audit and analyze your advertising account performance

• Publish approved content to your connected social media accounts

• Provide performance reports in the BBAE Studio dashboard

4. Third-party processors

Your content and account data may be processed by:

• OpenAI (content generation) — openai.com/privacy

• Anthropic (content generation and analysis) — anthropic.com/privacy

• Railway (hosting, EU-region servers)

We do not sell your data to any third party.

5. Permissions we request

When connecting your Meta account, we request the following permissions:

• instagram_content_publish — to publish approved posts to your Instagram Business account

• pages_manage_posts — to publish approved posts to your Facebook Page

• ads_read — to read your ad account performance data

• business_management — to access your Business Manager assets

You can revoke these permissions at any time via your Facebook Security Settings.

6. Data retention

• Account connection data is retained for the duration of your subscription

• All data is deleted within 30 days of subscription cancellation

• You may request immediate deletion by contacting sup@bbae.fi

7. Security

We use industry-standard encryption (HTTPS/TLS) for all data transmission. Access tokens are stored securely and never exposed publicly.

8. Your rights (GDPR)

As an EU resident you have the right to:

• Access your personal data

• Request correction or deletion

• Withdraw consent at any time

Contact: sup@bbae.fi

9. Changes to this policy

We will notify active users of material changes via email. Continued use of the service constitutes acceptance.