Privacy Policy

Effective October 8, 2026 · Last updated October 30, 2026

This policy explains how Cucinotta Productions LLC d/b/a BTS Studios handles personal information across our BTS Studios website, marketing and production services, and the BTS Studios Content Intelligence application.

1. Scope and who we are

This Privacy Policy applies to the BTS Studios website, inquiries, sales and marketing communications, production and agency services, and BTS Studios Content Intelligence (the “App”). The App helps authorized business users organize client media, connect approved sources, review advertising and social performance, and obtain AI-assisted content insights. We act as a controller/business for our own website, account, and business-contact data; for client-provided App data, we may act as a processor/service provider under the client's instructions. Client agreements or a data processing agreement may provide additional terms.

2. Information we collect

Website and business interactions

We may collect names, business and personal contact details, job titles, company details, inquiry and proposal information, correspondence, event participation, and transaction or service records. We may receive business contact or marketing information from public sources, referrals, business partners, or data providers where lawful.

Automatically collected information

Our websites and App may collect IP address, approximate location inferred from IP, browser and device details, referring pages, cookie identifiers, pages viewed, feature use, timestamps, diagnostic records, and security logs. We do not claim to collect precise GPS location through Content Intelligence.

Content Intelligence accounts and client materials

We may process user names, business emails, roles, authentication identifiers, access records, brand profiles, client-provided instructions, marketing metrics, campaign and creative performance, images, video, audio, captions, documents, metadata, and AI-generated analyses. Media may incidentally contain faces, voices, or other personal information. We do not intentionally use facial recognition to identify individuals or create biometric profiles through the App.

Connected accounts

With authorization, the App may obtain Google Drive files and metadata, Dropbox files and metadata, Meta/Facebook/Instagram business content, insights and advertising information, Google Ads account and performance data, YouTube channel and YouTube Analytics reports, Google Analytics website reports, Shopify and Amazon store order and product data, and information from other connected sources. Exact data depends on the integration, granted scopes, accessible accounts, and the features actually enabled.

3. How we use information

We use information to answer inquiries, provide proposals and contracted services, operate and secure accounts, manage authorized connections, inventory and analyze client media, generate marketing concepts and performance insights, process support requests, troubleshoot and improve functionality, maintain audit records, prevent abuse, and comply with law. We may use website visitor and business-contact information for permitted marketing, campaign measurement, retargeting, and communications subject to applicable consent and opt-out requirements. We do not use Google API data or private App client content to target advertising or build advertising profiles.

4. Google services and API Limited Use

What we read from each Google service. Each Google connection is separate and read-only, and the user chooses which account, channel, website or folders the App may use:

  • Google Ads (Google Ads API): campaign names and results for the chosen ad accounts, such as spend, impressions, clicks, conversions and conversion value. The App never creates, edits or deletes campaigns, ads or budgets.
  • YouTube (YouTube Data API, read-only): the list of channels the signed-in user manages, so they can choose their brand's channel, and that channel's video titles, publish dates, lengths and thumbnails. The App never uploads, edits, deletes, comments on or posts anything.
  • YouTube Analytics (read-only): the chosen channel's views, watch time, audience retention, traffic sources and audience reports (age, gender, country and device). These reports are aggregated by YouTube; they do not identify individual viewers.
  • Google Analytics (read-only): the chosen website's visit reports, such as visits by channel, source, medium, campaign, landing page, device and country, and the number of key events and purchases. These reports are aggregated; they do not identify individual visitors. The App never changes Analytics settings.
  • Google Drive (read-only): files and folders the user selects for footage, as described below. The App never changes or deletes Drive files.

We use this data only to show the brand's own results and content to the BTS Studios team members assigned to that brand, to answer their questions in the App, and to plan the brand's content and advertising. Results are refreshed automatically, usually once a night. Summaries of this data may be sent to our contracted AI provider solely to answer those questions, under terms that do not allow the provider to use it to train its models. A brand's data is never shown to other clients.

Access. When an authorized user connects Google, the App requests only the Google permissions necessary for the feature being enabled. Depending on the authorized scopes and selected resources, this may include account identity information, Drive file names, identifiers, types, sizes, folder relationships, previews, and file contents. The App may inventory authorized files, produce previews or other media derivatives, and analyze selected assets to generate user-facing content recommendations. The App does not treat OAuth authorization as permission to analyze an entire library indiscriminately; in-app source selection and analysis controls may further restrict processing.

Use and storage. Google data may be processed by our application infrastructure and contracted processors to provide these requested functions. Authorized file content, metadata, generated previews, analyses, and connection credentials may be stored as needed to operate the App, subject to access controls and deletion procedures. Connection credentials are encrypted and stored only on our servers; they are never shown to users or shared with unrelated parties.

Sharing and human access. We disclose Google user data only as necessary to provide or improve user-facing App features, with the user's appropriate consent, to security and infrastructure processors operating under restrictions, or as otherwise allowed by applicable Google policy and law. Authorized BTS personnel or client-approved editors may access relevant materials when necessary to provide the requested service, support, or security response and within applicable permission boundaries. We do not sell Google user data, transfer it to data brokers, use it for personalized advertising, or use it to train generalized AI models.

Limited Use. Content Intelligence's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Where Google Workspace-specific requirements apply, we also follow applicable product policies.

Revocation and deletion. Users can disconnect a Google service in the App at any time, or revoke access in their Google account permissions (myaccount.google.com/permissions), and request deletion of data imported into the App by emailing social@btsstudios.com. Revoking access stops future authorized retrieval but does not necessarily erase previously imported copies; submit a deletion request for those copies. See our data deletion instructions. If our uses of Google data materially change, we will update disclosures and obtain additional consent when required.

5. Meta, Instagram, Dropbox and other integrations

Authorized connections may permit us to access business account identifiers, pages, posts, permitted comments or engagement data, ad account information, campaigns, creative, insights, and selected cloud files. We use this information to display and analyze the authorized client's content and marketing performance and to generate related recommendations. Access is limited by granted permissions and applicable provider terms. Disconnecting a provider or revoking its permissions generally stops future access; request deletion separately for copies already imported. Meta-related deletion requests may be sent to social@btsstudios.com or through our deletion instructions. We do not sell imported client content.

5a. Shopify and online stores

When a merchant connects their Shopify store, the App reads, with the merchant’s approval in Shopify: orders (order dates, totals, taxes, shipping, discounts, refunds and currency), the products and quantities in each order, the store’s product catalog, and, where Shopify provides it, the marketing tags of the visit that led to an order (UTM source, medium, campaign and content, and whether a Google or Meta ad click was present). The App does not read or store shoppers’ names, email addresses, phone numbers or postal addresses. Access is read-only; the App never changes a store.

We use this data only to report the merchant’s sales next to their advertising and content results, to check that their tracking data is accurate, and to plan their creative. We do not sell it, use it for advertising, or share it with other clients.

A merchant can disconnect at any time by removing the app in Shopify (Settings › Apps), which stops all access. We respond to Shopify’s privacy requests: customer data requests, customer data erasure, and store data erasure. When a store is erased or uninstalled, we delete its imported data as Shopify requires. Requests can also be sent to social@btsstudios.com.

6. AI processing and client content

The App may send approved text, media, metadata, and performance information to contracted AI or media-processing providers to create summaries, classifications, concepts, and other requested outputs. Results may be inaccurate and require human review. Client content remains subject to applicable client ownership rights; access to the App does not transfer ownership to BTS Studios. We do not use private client content or Google API user data to train publicly available general-purpose AI models. We review AI providers’ retention and training terms before sending data to them; this notice does not promise zero retention by every provider. Where a client's material includes other people's personal information, the client is responsible for appropriate notices, permissions, and lawful instructions.

7. Legal bases for processing (EEA and UK)

Where GDPR or UK GDPR applies, our legal bases depend on the activity: contract for account management and service delivery; legitimate interests for business communications, fraud prevention, security, service improvement, and appropriate B2B activities after balancing relevant rights; consent for optional cookies, certain marketing, or other activities requiring consent; and legal obligation for compliance and recordkeeping. When we process personal data on behalf of a business client, that client generally determines its legal basis and we process under documented instructions. You may withdraw consent at any time without affecting prior lawful processing.

8. Cookies, analytics and advertising

Our public website may use necessary cookies, analytics tools, advertising pixels, and similar technologies for site operation, measurement, and permitted marketing or retargeting. These may involve third-party ad networks, social platforms, and analytics providers, including Google Analytics where enabled. Optional cookies are subject to consent where required. Browser controls may block cookies, but this can affect functionality. Where applicable, users may request an opt-out of targeted advertising or “sale”/“sharing” as defined by state privacy laws by emailing social@btsstudios.com. We will honor legally required opt-out preference signals where applicable and technically supported. The App's private Google data and client media are not used for BTS website retargeting.

9. When we share information

We may share relevant information with hosting, storage, security, authentication, communications, analytics, advertising, payment, professional advisory, AI and media-processing providers; authorized client team members; and legal authorities where required. Website marketing data may be disclosed to advertising and analytics providers as described above. App client data is shared only for authorized service delivery and permitted purposes, not sold to data brokers. Information may also be transferred in a corporate transaction with appropriate safeguards. Where required, we use data-processing terms with service providers and restrict their processing to appropriate purposes.

10. Security and access

We use administrative, organizational, and technical safeguards appropriate to the information and risks, including access restrictions and security monitoring. The App is designed around client/brand separation and role-based access. Only authorized personnel, approved editors, and necessary service providers can access client materials. No internet system is completely secure.

11. Retention and deletion

We retain information only as needed for the disclosed purposes, contracts, security, legitimate business needs, and legal obligations. Account and client data may be retained while an authorized relationship remains active; support, transaction, security, and legal records may be kept longer where justified. When retention is no longer justified, information is deleted or de-identified, subject to limited backup cycles and lawful exceptions. Disconnecting an integration does not itself guarantee deletion of imported content. To request account, media, integration, or other personal-data deletion, email social@btsstudios.com and identify the relevant account and data. We may verify identity and authority before processing. See Data Deletion Instructions.

12. Your rights under GDPR and UK GDPR

Depending on the circumstances, individuals may request access, correction, erasure, restriction, portability, or objection to processing, and may withdraw consent. You may also complain to your local EEA supervisory authority or the UK Information Commissioner's Office, as applicable. Some rights are subject to statutory exceptions. We respond within applicable legal timeframes and may verify identity. If we act as processor for a client, we may refer your request to the relevant client/controller. If applicable law requires an EU or UK representative or a data protection officer, the relevant contact details must be provided separately once designated.

13. United States state privacy rights

Residents of states with applicable consumer privacy laws, including California and New Jersey, may have rights to know or access information, correct, delete, obtain copies, opt out of certain sales, sharing or targeted advertising, limit some sensitive-data uses, and appeal certain decisions. Rights and exceptions vary by state. Categories potentially processed include identifiers, commercial and professional information, internet/network activity, approximate geolocation, audio/visual content, and inferences from marketing information. We do not intentionally collect biometric identifiers through the App. Some website advertising disclosures may qualify as “sharing” or targeted advertising under state law even where no money is exchanged. Submit requests or appeals to social@btsstudios.com; include “Privacy Request” or “Privacy Appeal” in the subject. We will verify requests as appropriate, recognize authorized agents where required, and will not unlawfully discriminate for exercising privacy rights. California residents may also make applicable Shine the Light requests through the same email.

14. Canada and other jurisdictions

Where applicable, individuals in Canada and other jurisdictions may have rights to access, correct, withdraw consent, or otherwise control personal information subject to local law. Requests may be directed to our contact address below.

15. International transfers

Information may be processed in the United States and other locations where our vendors operate. Where required for EEA/UK transfers, we rely on an appropriate transfer mechanism, such as an adequacy decision or approved standard contractual clauses with any required supplementary measures. Applicable client data processing agreements may specify further transfer terms.

16. Children

Our website and App are directed to business users and are not intended for individuals under 18. We do not knowingly create App accounts for minors or intentionally solicit their personal information. Client-supplied media may incidentally depict minors; clients must ensure they have the necessary permissions and legal basis. Contact us if you believe a child has provided personal information directly to us.

17. Automated decisions and profiling

Content Intelligence generates content and marketing recommendations rather than decisions intended to have legal or similarly significant effects on individuals. Website advertising services may infer interests for ad delivery where enabled. If our practices change to include legally significant automated decisions, we will provide additional notices and rights as required.

18. Changes to this policy

We may update this policy as our website, App, providers, or legal requirements change. We will revise the date above and provide additional notice or seek consent where required, particularly before materially new uses of connected Google data.

19. Contact us

Cucinotta Productions LLC d/b/a BTS Studios
Attn: Privacy / Content Intelligence
Email: social@btsstudios.com
Website: www.btsstudios.com