Privacy policy

Controller

Ideomo UG (haftungsbeschränkt)
Kolonnenstr. 8
10827 Berlin, Germany
Email: datenschutz@treadmill.studio

What Treadmill does

Treadmill schedules Instagram posts (Reels and carousels) and publishes them at their time, to Instagram and, if you connect one, to your Facebook Page. For personal accounts, it sends an email reminder with a link to post it yourself.

Data we process

• Your account: name, email address and password (stored only as a hash).
• Sign-in sessions: a session cookie, and with each session your IP address and browser (user agent), to keep you signed in and protect the account.
• Connected Instagram account: account ID, username, profile picture link and an access token, which we store encrypted. We request the permissions instagram_business_basic and instagram_business_content_publish and use them only to show which account is connected and to publish the posts you schedule. We do not read your followers, messages or other content.
• Connected Facebook Page (optional): Page ID, Page name and a Page access token, stored encrypted. We request pages_show_list, pages_manage_posts and pages_read_engagement and use them only to let you pick the Page, publish your posts there and check that Facebook finished processing them.
• Your posts: titles, captions, videos and images, schedules, and the publishing status and links of published posts.
• Studio: your avatars (name, description, stills and the ElevenLabs voice chosen) and the scripts, voiceovers, word timings and generated clips of your pieces. An avatar of a real person holds photos of them and clips that show them.
• Subscription and credits: your Stripe customer ID, the status and period of your subscription, and your credit entries; with auto top-up, the ID of the card saved for it at Stripe. Payment details such as card numbers go only to Stripe, not to us.
• Reminder accounts: the email address the reminders go to.
• Server logs: IP address, time and requested address of each request, for operation and security.

Each post has a share link for posting it from the phone. Anyone who has the link can see the post's caption and media until the post is deleted.

Purposes and legal bases

• Providing Treadmill to you (account, scheduling, publishing, reminders, subscription and credits): Art. 6 (1) (b) GDPR.
• Keeping payment and booking records: Art. 6 (1) (c) GDPR with § 147 AO and § 257 HGB (German tax and commercial law).
• Server logs and session data for security and to prevent misuse: Art. 6 (1) (f) GDPR; our legitimate interest is a secure, working service.

Cookies

Treadmill sets only cookies it needs to work: the session cookie that keeps you signed in, and a short-lived cookie (15 minutes) while you connect Instagram or Facebook. There is no analytics, tracking or advertising.

Service providers and recipients

• Hosting provider: runs the application and database on servers in Germany.
• Amazon Web Services EMEA SARL (Luxembourg): stores your videos and images in Frankfurt (Germany).
• Stripe Payments Europe, Ltd. (Ireland): handles the subscription and credit purchases and receives your name, email address and payment details for this. For payment processing and fraud prevention, Stripe is partly a controller in its own right, under its own privacy policy.
• Replicate, Inc. (USA): generates the clips Treadmill makes for you (the video models Seedance and, for real people, OmniHuman) and the avatar stills made from your reference photos (the image model nano-banana, which Replicate runs through Google LLC, USA, who receives the photos for this). It receives the clip's prompt, the avatar's stills and that part of the voiceover, and returns the clip; we delete the inputs there once the clip is done.
• ElevenLabs, Inc. (USA): voices your scripts and transcribes voiceovers and clips (to time the words and check the clips). It receives the script and the audio for this.
• Email provider: sends reminders and notifications about your posts and accounts.
• Meta Platforms Ireland Ltd.: when a post is published, its caption and media go to Instagram and, if you chose so, to your Facebook Page. Meta fetches the media through time-limited links. From then on, Meta processes them under its own privacy policy.

We have data processing agreements with our processors. Amazon Web Services, Stripe and Meta may process data in the USA; all three are certified under the EU-US Data Privacy Framework, as is ElevenLabs. Replicate processes the clip inputs in the USA.

How long we keep data

• Account data: until your account is deleted.
• Posts and their media: until you delete the post, the Instagram account in Treadmill, or your Treadmill account.
• Access tokens of Instagram and Facebook: until you remove the account or the Page in Treadmill.
• Sessions: until they expire or you sign out.
• Server logs: 30 days.
• Subscription and credit records: ten years after the end of the year they were made (statutory retention), also after the account is deleted.

Deleting your data

• In Treadmill under Accounts, Remove next to the Facebook Page deletes its access token. Removing an Instagram account deletes its token, schedules, posts and their media.
• You can also revoke Treadmill's access in Instagram (Settings → Website permissions → Apps and websites) and in Facebook (Settings → Business integrations).
• To delete your Treadmill account and all its data, email datenschutz@treadmill.studio from the address you signed up with. We delete everything within 30 days.
• Posts already published on Instagram or Facebook stay there; delete them in Instagram or Facebook.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection, and you can withdraw consent at any time. Write to datenschutz@treadmill.studio. You can also lodge a complaint with a data protection authority; ours is the Berlin Commissioner for Data Protection and Freedom of Information.

Security

All connections are encrypted with TLS. Instagram and Facebook tokens are stored encrypted, and your media stay private: they are only reachable through short-lived links and the post's share link.

Changes

We update this policy when Treadmill changes. The date above shows the latest version.