Privacy,
made clear.

1. Who is responsible

mAIson, based in Switzerland, is responsible for the personal data described in this notice. Privacy questions and requests can be sent to maison.studio@hotmail.com or through our secure inquiry form; please write “Privacy request” in the message.

2. Data we process

We process only the information needed to operate the website and services:

• contact details, project type and message content submitted through the inquiry form or by email;
• technical request data such as IP address, browser information, timestamps and security logs;
• when a social account is connected, the account identifier, display name, profile information, granted permissions, access and refresh tokens, public post information and available performance metrics;
• content, captions, schedules, approvals and publishing status created inside the Founder Hub.

We do not sell personal data and do not use connected social-account data for advertising profiles.

Displayed studio figures. Your browser may keep the last valid copy of our public film-view figures and their source dates in local storage so they remain visible if a refresh fails. This copy contains no visitor identifier and is not used for visitor measurement. It is replaced when newer valid figures arrive and can be removed by clearing this website’s browser data.

Optional website measurement. Only after you choose “Allow”, we use a random, temporary browser-tab identifier to measure visits, pages and sections displayed, films visible on screen and their playback progress, selected links, visible page time and inquiry steps such as opening the form or confirmed receipt. We record only broad referral categories (for example Instagram or TikTok) and screen-size categories, not the full referring address. These measurements help us improve the website and understand which work attracts inquiries.

The analytics records contain no form answers, contact details, full page URLs or query strings, IP addresses or browser fingerprints. Hosting and security providers still process technical request data as described above. Measurement is separate from inquiry records and is not used to identify individual visitors or build advertising profiles.

3. Why we process it

Data is used to answer inquiries, deliver requested creative and production services, authenticate authorised accounts, prepare and publish approved content, show available performance information, maintain security, prevent misuse and comply with legal obligations.

Where required, processing is based on your consent. Otherwise it is based on performing a requested service, legitimate operational and security interests, or applicable law.

4. Social-media connections

If you connect TikTok, Instagram or another supported platform, you authorise mAIson to access only the permissions shown during that platform’s consent flow. Publishing remains subject to the explicit approvals shown in the Hub and the connected platform’s own settings and rules.

You can revoke a connection through the social platform or ask mAIson to disconnect it. Revocation stops new access; records that must be retained for security, evidence or legal reasons may remain for the necessary period.

5. Service providers and international transfers

We use carefully selected providers for hosting, database and storage, security, AI-assisted processing and social-platform APIs. These may include Vercel, Supabase, Microsoft, OpenAI, TikTok and Meta where their services are used. Data may therefore be processed in Switzerland, the European Economic Area, the United States and other countries in which a provider operates.

We require appropriate contractual and technical safeguards where data is transferred across borders.

6. Retention and security

Inquiry and project data is kept only as long as needed to respond, perform the work, maintain an appropriate business record and meet legal obligations. Social access tokens are kept only while the connection is active or required for an approved operation. Technical logs are retained for a limited security and troubleshooting period.

We use access controls, encryption in transit, restricted server-side secrets and operational safeguards. No internet service can guarantee absolute security.

Optional measurement records are normally removed after 90 days; scheduled cleanup can take up to one additional day. The temporary identifier is stored in your browser tab, expires after no more than 30 minutes and is replaced for a later visit. Your privacy choice is saved separately in this browser so we can respect it on your next visit. We do not set advertising or analytics cookies.

7. Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection or a portable copy of your personal data. You may also withdraw consent for future processing and complain to a competent data-protection authority.

Send requests to maison.studio@hotmail.com or through the secure inquiry form. We may ask for reasonable information to verify the request.

You can decline optional measurement without affecting films or inquiries. Open Privacy choices at any time and choose “Turn off” to stop future measurement and clear the temporary identifier from this tab. Previously collected records remain subject to the retention period above. We also respect enabled Do Not Track and Global Privacy Control signals.

8. Updates

We may update this notice when the service or legal requirements change. The effective date above identifies the current version.