Privacy Policy — StandIn Labs

Overview

StandIn Labs ("we", "us", or "our") operates the platform available at standinlabs.com and app.standinlabs.com. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.

By creating an account or using our services, you agree to the practices described in this policy. If you do not agree, please do not use the platform.

Information We Collect

Account Information

When you register, we collect your email address and name (if provided). You may sign up using your email/password or via Google Sign-In. When you use Google Sign-In, Google provides us with your name, email address, and profile picture solely to create and identify your account. Your account is managed through Clerk, our authentication provider. We store a reference to your Clerk user ID in our database.

Payment Information

Billing is handled entirely by Stripe. We never see or store your card number, CVV, or full payment details. StandIn Labs only stores your Stripe Customer ID, subscription plan, subscription status, and billing period dates so we can manage your access level and credit allocation.

Content You Upload or Generate

We store the following content you create on the platform:

Avatar photos you upload (stored in Supabase Storage under your account)
Reference images and driving videos you upload for generation jobs
AI-generated outputs (images, videos, audio files) produced by your requests
Text prompts and parameters used to generate content
Scheduled post content and captions

This content is stored in a private Supabase Storage bucket scoped to your user ID. Other users cannot access your files.

Social Media OAuth Tokens

When you connect Instagram or TikTok for auto-posting, we store the OAuth access token and account identifiers returned by those platforms. We use these tokens solely to publish your scheduled posts. We do not read your social media feed, followers, messages, or any data beyond what is required to post on your behalf.

You can revoke access at any time from your Settings page, which deletes the stored token from our database.

Usage Data

We automatically collect limited technical data when you use the platform, including IP address, browser type, pages visited, clicks, and feature usage. On the landing page this data is only collected with your cookie consent. On the app, it is collected for authenticated users as described in our Cookie Policy. This data is used for security monitoring, debugging, session recording, and understanding how the product is used. We do not sell this data.

How We Use Your Information

To provide the service — process generation requests, manage credits, handle billing, and deliver outputs.
To post on your behalf — use your connected social media tokens to publish scheduled content at the time you choose.
To communicate with you — send transactional notifications (e.g. generation completed, credit low) and occasional product updates. You can opt out of non-transactional emails at any time.
To prevent abuse — detect and investigate violations of our Terms of Service, including prohibited content generation.
To improve the platform — understand aggregate usage patterns. We do not use your generated content to train third-party AI models without explicit consent.

Third-Party Services We Use

To deliver our platform, we share data with the following processors. Each has its own privacy policy.

Google AnalyticsWebsite traffic analysis and usage measurementAnonymised IP, pages visited, session data

PostHogSession recording and product analyticsPages visited, clicks, user ID (authenticated users), browser metadata

ClerkAuthentication and user identity managementEmail, name, login metadata

Google (Sign-In)Google OAuth authentication (Sign in with Google)Name, email address, profile picture

StripePayment processing and subscription managementBilling events, customer ID

SupabaseDatabase and file storageAll account and content data

EvoLink / KlingAI video, motion swap, and video remix generationInput media and prompts

OmniHumanAI lip sync video generationInput audio and images

Google (Nano Banana Pro)AI image and video generationText prompts and reference images

ElevenLabsAI voice synthesisText scripts

Trigger.devBackground job processingJob payloads (user ID, generation parameters)

Meta (Instagram Graph API)Publishing posts to InstagramAccess token, media content

TikTok (Content Posting API)Publishing posts to TikTokAccess token, media content

We do not sell your personal data to any third party for marketing purposes.

Data Retention

Account data — retained while your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g. billing records).
Generated content — stored in your library until you delete it, or until your account is deleted.
Billing records — retained for 7 years as required by financial regulations.
Social media tokens — deleted immediately when you disconnect an account from Settings.

Your Rights

You have the right to:

Access the personal data we hold about you.
Correct inaccurate data via your account settings.
Delete your account and associated data at any time from Settings > Account.
Export your generated content from your Library.
Withdraw consent for social media posting by disconnecting your accounts.
Object to processing for marketing — use the unsubscribe link in any marketing email.

To submit a data request or ask questions about your data, email us at support@standinlabs.com.

Cookies and Local Storage

We use cookies and browser local storage for authentication session management (via Clerk) and to remember your UI preferences such as sidebar state. On the marketing site (standinlabs.com), analytics tools — Google Analytics, PostHog, Meta Pixel, and TikTok Pixel — are only activated with your explicit consent via the cookie banner. On the app (app.standinlabs.com), PostHog session recording is active for all authenticated users as a condition of using the Service; by creating an account you agree to this as disclosed in these Terms of Service. We do not sell cookie data. Marketing-site visitors can withdraw consent at any time via the Cookie Preferences link in the footer, or clear cookies through your browser settings (though this will sign you out).

Children's Privacy

StandIn Labs is intended for users who are at least 18 years old. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us at support@standinlabs.com and we will delete the account promptly.

International Data Transfers

Our services are hosted and operated from servers in the United States. By using StandIn Labs, you consent to the transfer of your data to the US and other countries where our service providers operate. We ensure appropriate safeguards are in place for any such transfers.

Changes to This Policy

We may update this Privacy Policy as the platform evolves. When we make material changes, we will notify you by email or via an in-app notification. The date at the top of this page always reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

For any privacy-related questions or data requests, contact us at: support@standinlabs.com