Privacy Policy
How Promo Studio handles the information it receives, and what never leaves your machine.
1. Who this policy is about
This Privacy Policy explains how Lusudong ("we", "us") handles personal information in connection with Promo Studio (the "Service"), the browser-based tool for building promo videos and app screen sets.
| Item | Details |
|---|---|
| Application | Promo Studio — the browser-based tool for building promo videos and app screen sets |
| Developer and operator | Lusudong ("we", "us"), the developer and operator of Promo Studio |
| Website | https://promozyra.com (domain: promozyra.com) |
| Privacy contact | nhsoft.lsd@gmail.com |
| Effective date | November 14, 2026 |
| Scope | The Promo Studio website and web application, together with the sign-in, subscription and support processes that go with them |
It applies to the Promo Studio website and application (together, the "Service") and to the account, subscription and support processes that go with it.
The short version: your creative work — the images, video, captions, layouts and audio you bring into the Service — never leaves your own device. What reaches us is the account information needed to sign you in, to know which plan you are on, and to run the Service.
2. The controller
Lusudong is the controller of the personal information described in this policy. The Service is operated as an individual business and is served from https://promozyra.com (promozyra.com); the site is hosted by Cloudflare, the sign-in is run by Supabase, and the payment is taken by our payment provider.
If you have a question about this policy, or a request about your information, contact us at nhsoft.lsd@gmail.com.
3. Information we collect
We keep the collection deliberately small. There are three places information can come from: the sign-in you do, the account record that comes with it, and the ordinary technical records any web service receives.
3.1 Account information (Google sign-in)
You sign in with Google. When you do, Google shares a small identity record with us through our authentication provider, and we store the parts of it we need. The whole list is here, because a list you cannot see is a list you cannot check:
| What we receive from Google | What we use it for |
|---|---|
| Your email address | To identify your account, to show which plan it is on, and to reach you about your account |
| Your display name | To greet you in the interface |
| Your profile picture | To show your avatar in the account menu |
| Your Google user ID | To keep your session and your subscription tied to you |
| Sign-in tokens | To keep you signed in — stored in your browser's local storage, not on our servers in a readable form |
That is the complete list. Google Sign-In is the only Google service we use: we do not ask for access to your mail, your Drive, your photos, your calendar, your contacts or your location, and we never see or store your Google password.
We do not use the information above for advertising, we do not build a profile of you, we do not sell it or share it for anyone else's marketing, and we do not use it to train any model — ours or anybody else's.
We do not use Google Workspace APIs, or any other Google API, to develop, improve or train non-personalized artificial intelligence or machine-learning models, and we do not use your Google data for that purpose either.
3.2 Subscription information
If you subscribe to a paid plan, we store a subscription record against your account: the plan you are on, its status, and the date it expires. The truth about your subscription lives in that record only — the interface reads it from there and never assumes a plan it has not read.
Payment is handled by our payment provider; we receive a confirmation of what was paid and when, but not your full card details.
3.3 Your projects and creative files
Everything you make in the Service — the screenshots and images you import, the captions you write, the segment timings, the templates you use, the music you add and the files you export — is written to your browser's own storage (IndexedDB) and never transmitted to us. The Service has no upload endpoint for your work, so we do not hold copies of it, we cannot see it, and we cannot restore it for you.
Because of this, clearing your browser's site data, using a different browser or a different device, or operating in a private window can leave the projects unreachable. Please keep your own copies of anything you care about.
3.4 Technical information
Like any website, our hosting provider and our authentication provider keep short-lived operational records — for example the IP address a request came from, the browser's user agent, and the time of the request — in order to serve the page, keep the service secure and diagnose faults. These records are kept for a short period and are not used to build a profile of you.
3.5 What we do not collect
- We do not use advertising cookies, cross-site trackers, fingerprinting or third-party analytics.
- We do not sell personal information and we do not share it for anyone else's marketing.
- We do not ask for, and do not want, your payment card numbers, your Google password, or confidential material you paste into your project.
3.6 Cookies, local storage and IndexedDB
The Service sets no tracking cookies and runs no third-party analytics. It uses your browser's own storage for the sign-in session, for interface preferences and for your projects. Here is what is stored where:
| Storage | What is kept there | Why |
|---|---|---|
| Cookies | None. The Service sets no cookie of its own. | Nothing to track with |
| localStorage | Your sign-in session, and interface preferences such as the chosen list layout | To keep you signed in and to remember how you left the page |
| sessionStorage | The page you were sent away from while signing in, and the export that was waiting for the sign-in | To bring you back to the right place after the round trip to Google |
| IndexedDB | Your projects: the images, video, captions, timings, templates and music you brought into the Service | To keep your work on your own device |
You can remove all of it by clearing site data in your browser — but that also removes your projects, because they live there and nowhere else.
3.7 No generative AI, and no Google API for making content
Promo Studio does not use generative AI. Every frame it produces is drawn in your browser from a template and the files you supply: no picture of a person is synthesised, invented or enhanced by a model, and no model is called at all while you work.
We do not use any Google API to generate, edit or analyse images, video or audio. The Google services in this app are limited to Google Sign-In, which is described in section 3.1.
You may only put material into the Service that you own or that you have permission to use. Creating, editing or sharing sexual or intimate imagery of a real person without that person's consent — non-consensual intimate imagery, or NCII — is forbidden here; see the Terms of Service.
4. Why we use information, and on what legal basis
We use the information above for the following purposes:
| Purpose | Information used | Legal basis (EEA/UK) |
|---|---|---|
| Create and operate your account, keep you signed in, and let exports work | Email, Google user ID, session tokens | Performance of a contract; our legitimate interest in securing the Service |
| Give you the plan and the exports your plan includes | Subscription record | Performance of a contract |
| Take payment and provide refunds and receipts | Subscription record, payment confirmation | Performance of a contract; compliance with legal obligations |
| Serve the Service, keep it available and investigate errors | Technical records | Our legitimate interest in operating and securing the Service |
| Answer your questions and handle complaints | Whatever you send us | Our legitimate interest in serving our users; compliance with legal obligations |
| Meet legal, tax and accounting duties | Account and subscription records | Compliance with legal obligations |
Where we rely on legitimate interest, we have considered your rights and interests and concluded that the processing is necessary and proportionate. You have the right to object to that processing; see section 9.
5. Who we share information with
We do not sell or rent personal information. We share only what is necessary, with the following recipients — and each of them gets only the part it needs:
| Recipient | What it receives | What it does with it |
|---|---|---|
| Google (via our authentication provider) | Your email address, display name, profile picture and Google user ID at sign-in | Identifies you during sign-in and is a separate controller of the information it discloses |
| Supabase (our authentication provider) | Your account record, your subscription record and the sign-in session | Holds the identity and the plan, and signs you in |
| Cloudflare (our hosting provider) | The requests it serves and short-lived operational records such as IP address and user agent | Serves the site and keeps it available and secure |
| Our payment provider | The plan, the amount and the payment confirmation | Takes the payment and settles refunds; it never gives us your card number |
| Professional advisers, auditors and authorities | Whatever the law requires us to disclose | Only where we are required to, or to establish or defend a legal claim |
None of them is given your projects: your images, video, captions and music never leave your device.
6. International transfers
Our providers may process information on servers outside your country, including in the United States. Where information is transferred out of the EEA or the UK, we rely on an adequacy decision or on standard contractual clauses together with supplementary measures, and we keep the transfers limited to what the Service needs.
7. How long we keep information
| Information | How long we keep it |
|---|---|
| Account information (email, name, picture, user ID) | For as long as your account is open, and for up to 30 days afterwards so that a sign-in can be reconciled and a refund can be settled — after that it is deleted |
| Subscription records and payment confirmations | For as long as the plan runs, and then for the period the tax and accounting rules require |
| Operational and security logs (IP address, user agent, timestamps) | Up to 30 days, and then deleted |
| Support correspondence | For as long as it takes to deal with the matter, and then a reasonable period to show what was agreed |
| Your projects, images, video, captions and music | Not retained by us at all — they are kept in your browser for as long as you leave them there |
8. Deleting your data and closing your account
You can close your account yourself: sign out, and write to us at the address below asking us to delete it. When we delete an account we delete the account record, the subscription record and the sign-in session; nothing of yours is left on our side afterwards, apart from the payment and tax records the law asks us to keep.
Your projects are in your browser rather than in our records, so they are deleted by clearing the site data of the Service in your browser (or by deleting the projects in the app). Please copy anything you want to keep before you do.
Write to nhsoft.lsd@gmail.com from the address on your account, so that we can find it. We aim to answer within one month.
9. Your rights
Depending on where you live, you may have the right to ask us to:
- give you access to the personal information we hold about you;
- correct information that is wrong or incomplete;
- delete information we no longer have a reason to keep;
- restrict or object to processing based on legitimate interest;
- receive the information you gave us in a portable, machine-readable form;
- withdraw a consent you gave, without affecting processing already done;
- complain to your data protection authority.
To exercise a right, write to nhsoft.lsd@gmail.com from the address on your account so we can find it. We may ask you to confirm your identity. We aim to answer within one month.
Your projects are in your browser rather than in our records. If you want them gone from our side, sign out and clear your browser's site data for the Service; that removes them from this device entirely.
10. United States
If you are a California resident, you have the rights described in the California Consumer Privacy Act as amended by the California Privacy Rights Act, including the right to know what personal information is collected, the right to delete, the right to correct, the right to opt out of sale or sharing, and the right to limit use of sensitive personal information. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use sensitive personal information in a way that would require a right to limit. To make a request, contact us at the address in section 9.
Residents of other U.S. states may have similar rights under the laws of their state. We apply the same route: write to us, and we will deal with the request.
11. Automated decisions
Your plan, the exports it includes and whether an export is unlocked are decided from the subscription record attached to your account. These are rules, not a judgement about you, and nobody reviews them by hand. If a decision produces an effect you disagree with, contact us and a person will look at it.
12. Children's privacy
The Service is not directed at children, and you must be old enough to enter into a binding contract in your country to use it (18 in the United States). We do not knowingly collect information from children. If you believe a child has given us information, contact nhsoft.lsd@gmail.com and we will delete it.
13. Security
We use encryption in transit (HTTPS/TLS) for every connection to the Service, and we treat your account and subscription records as confidential: they are held behind access controls and are never published. No method of transmission or storage is completely secure, so we cannot promise absolute security; if a breach affects your information and creates a legally reportable risk, we will notify you and the relevant authority as required.
14. Changes to this policy
We may update this policy as the Service changes or the law does. The date at the top of this page shows when the current version takes effect. If a change materially affects how we use information you have already given us, we will tell you before it takes effect, by email or in the Service.
15. Contact
Questions, requests and complaints about this policy: nhsoft.lsd@gmail.com.