HYR Studio (“we”, “our”, the “Service”) is operated by Heal Your Roots Systems Inc. d/b/a HYR Systems, a Delaware corporation. This policy explains what information we collect when you use the web application at app.hyrstudio.com, the iOS / Android mobile apps (bundle id com.hyrsystems.studio), and the HYR Studio Chrome extension, how we use it, and the choices available to you.
1. Information we collect
a. Account information
- Email address, display name, and avatar URL (from Google sign-in via Firebase Authentication, or from email/password sign-up).
- Organisation memberships you create or join.
b. Content you upload or create
- Audio, video, transcripts, documents, images, prompts, and any other source material you submit for processing.
- AI-generated outputs (slides, infographics, blog posts, social posts, thumbnails, videos, etc.) and the metadata describing how they were generated.
- Schedules, drafts, and library items you save inside the app.
c. Usage and device information
- Standard server logs (IP address, user agent, request paths, timestamps) used for security and debugging.
- Product analytics and marketing events, as described in Section 2, subject to the separate consent choices available in the Service.
- On mobile, the platform (iOS / Android), app version, and device model exposed by the operating system to our crash logs.
d. Payment information
- On the web, subscriptions are processed by Stripe. We never see or store your full card number; Stripe returns a customer ID and subscription ID we associate with your account.
- On iOS and Android, subscriptions are processed by Apple App Store / Google Play. We receive only the validated receipt / purchase token and product identifier — no payment instrument details.
e. Connected-platform information
- When you connect a third-party account, we receive account identifiers, profile details, authorization data, and the platform content or analytics needed for the features you enable.
- For YouTube, this can include channel and video identifiers, titles, descriptions, thumbnails, related-video mappings, and analytics returned by YouTube API Services.
- For other connected social platforms, this can include account details and the posts, media, permissions, or performance data needed to draft, schedule, publish, or report on content you request.
2. How we use information
- To provide the Service: authenticate you, process the content and requests you submit, save your sources and library, and make authorized content available to you and your team.
- To generate requested text, images, audio, video, or other outputs; manage schedules; connect platforms; and carry out publishing actions you request.
- To meter and bill subscriptions and credit usage, send account and service messages, protect the Service, and troubleshoot reliability issues.
- Google Analytics 4 is initialized only after you grant analytics consent. Meta Pixel is initialized only after you grant marketing consent. Google Tag Manager, which may contain analytics or marketing tags, is loaded only when both consent choices are granted. You can change these choices in the Service's privacy controls.
- We send marketing email only where you have opted in or where otherwise permitted by law. You can use the unsubscribe method included in marketing messages.
- When you request account deletion, we send a service-only email confirming that the request was completed. It does not include promotional invitations or feedback requests, and is separate from marketing email preferences.
3. HYR Studio Chrome extension
The Chrome extension connects your browser to your HYR Studio account. It has permission to work with webpages so you can save a page, create a post, insert Library content, and use YouTube Studio tools.
- When connected, the side panel requests your HYR topics, recent sources, post categories, and available Library or Podflow items so it can display them. The YouTube Studio helper may also request matching saved content or mappings for the current video.
- Active-page information: while the side panel is open, the extension may read the active tab's title, URL, and visible page text into the panel's in-memory state, including when you switch tabs or the active page changes. Reading a page to populate the panel does not by itself send that page text to HYR Studio. If you choose Save to My Sources, the extension sends the page title, URL, visible text, and any notes you submit to HYR Studio. If you select the current page and choose Generate social post, the page title, URL, and text in the selected source are sent for that requested generation.
- YouTube Studio information: when the YouTube Studio helper is open, it may send a current video ID or selected Short IDs to HYR Studio to find matching saved content, mappings, or pending updates. When you start an update or upload, the selected IDs and the content needed for that action are sent to HYR Studio and/or YouTube.
- Library insertion: when you right-click an editable field, the extension keeps a reference to that field and the cursor or selection position in the page. It does not read or send the existing field text. The Library item you choose is inserted into that page; the destination website then handles it under its own terms.
- Browser storage: Chrome sync storage contains the HYR Studio server address configured in extension settings. Chrome session storage holds temporary insertion context and Shorts-batch progress. Chrome local storage can hold pending YouTube upload metadata, such as a title, description, tags, visibility, thumbnail URL, and record identifier, until the extension applies it and HYR Studio confirms the result.
- The extension uses your existing HYR Studio browser session and the YouTube account connected in HYR Studio. It does not ask for or store your HYR Studio or YouTube password, and it does not store YouTube OAuth access tokens in the extension.
The extension does not call Chrome's browsing-history API or send HYR Studio a continuous history of visited URLs. It does read the active tab while the side panel is open, as described above.
Chrome Web Store Limited Use
The use of information received from the HYR Studio Chrome extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use extension data to provide the features you choose and to operate, maintain, and secure those features. We do not sell extension data or use it for advertising or creditworthiness. We transfer it to service providers only as needed to provide the requested features and as otherwise described in this policy, required by law, or permitted in connection with a business transfer. We do not use extension content to train HYR's own generalized AI or machine-learning models.
4. Google and YouTube API Services
HYR Studio uses YouTube API Services to sync videos and analytics, upload videos you choose to publish, and update titles, descriptions, thumbnails, and related-video information at your request. By connecting YouTube, you agree to the YouTube Terms of Service. Google's Privacy Policy applies to Google's handling of your data.
HYR Studio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can review or revoke HYR Studio's Google account access at Google Account permissions. When you disconnect a YouTube account in HYR Studio, we remove its local account record and attempt to revoke its authorization with Google. If revocation is unsupported or unsuccessful, you may need to revoke access in Google Account permissions. Content already synced to HYR Studio remains until you delete it or your account.
5. Third-party service providers
Depending on the features you use and the accounts or integrations you connect, we share the minimum information needed with service providers and platforms, including:
- Google Gemini: prompts, selected source material, reference images, transcripts, or media needed to generate the output you request.
- Anthropic Claude: episode titles and transcript segments submitted for motion-section or slide planning.
- Google Cloud Storage: uploaded and generated media stored for the Service.
- Firebase Authentication: account identity and sign-in verification.
- Google Drive: documents or media you choose to import from or export to Drive.
- Replit Deployments: application hosting, database hosting, and associated infrastructure.
- Stripe (web) and Apple App Store / Google Play (mobile): subscription payments, purchase validation, and renewal events. These providers handle payment instruments; HYR Studio does not receive your full card number.
- Google Analytics 4, Google Tag Manager, and Meta Pixel: analytics or marketing events only when the required consent choices have been granted.
- SendGrid: email address, name, and the information needed to deliver account, service, or permitted marketing emails.
- Vizard.ai and ElevenLabs: video URLs, generation settings, text, or audio needed for features you or your organization enable with those providers.
- Unsplash and Tenor: search terms and requests when you use their stock-image or GIF search features.
- YouTube and other connected social platforms: account information, content, and actions needed to sync, analyze, schedule, or publish the content you request.
Third-party providers process information under their own terms and privacy policies. Some features require you or your organization to supply and authorize a provider account or API key.
6. How long we keep data
- Account data and saved content remain in your account until you delete them or close your account.
- When account deletion completes, we remove the account and associated records from the active application database. Backups, legal or financial records, object storage, and copies already held by service providers or connected platforms may be retained for their applicable operational, legal, or provider retention periods.
- Deleting your HYR Studio account does not remove content already published to or synced with third-party platforms. You may need to delete that content with the platform.
- We retain billing and transaction information for as long as required for accounting, tax, dispute, and legal purposes.
7. Your rights and choices
- Access and export: use the Service's available download and export tools for your content.
- Correction: update your profile from Account Settings.
- Deletion: delete individual items in the Service or use Account Settings → Delete Account. You can also contact us at the address below to request account deletion.
- Disconnect accounts: remove a connected account from HYR Studio settings. We delete its local connection record and request revocation where the provider supports it; if revocation fails or is unsupported, use the provider's own account settings to revoke access.
- Subscription cancellation: web users can cancel from the Stripe billing portal; iOS users via Settings → Apple ID → Subscriptions; Android users via Google Play → Subscriptions.
- Privacy choices: use the Service's controls to grant or withdraw analytics and marketing consent.
8. Children
HYR Studio is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect data from children. If you believe a child has signed up, contact us and we will review and address the account.
9. International transfers
The Service is hosted in the United States. Service providers may process information in other countries where they or their infrastructure operate. Data-protection rights and safeguards can vary by location.
10. Security
We use TLS for network traffic, encrypted credentials at rest, and access controls. No system is perfectly secure; please report security concerns using the Contact address below.
11. Changes
We will revise this page when our practices change. Material changes will be announced in-app at least 14 days before they take effect, where applicable.
12. Contact
Heal Your Roots Systems Inc. d/b/a HYR Systems
Legal, privacy, and account or data requests: support@hyrsystems.com