Privacy Policy
Last updated 6 November 2026
This policy explains what Oslo HQ collects when you use Studio by OSLO Labs, why, and the choices you have. We follow India's Digital Personal Data Protection Act, 2023.
What we collect
- Your mobile number or Google account (to sign you in) and, if you add them, your business name and GSTIN (for receipts).
- What you upload: product photos, logos, reference images and the details you type about your brand and products.
- What you make: generated images and videos, your likes and edits.
- Payment records from Razorpay or Paddle (we never see or store your card or UPI details).
- If you connect Instagram: your Instagram username, account id, profile picture and an access token that lets us publish the posts you choose.
- If you sign in with Google: your name, email address and Google account id (we don't get your Google password or contacts).
- Basic technical data (device, IP address) to keep the service secure, and the country your IP address is in, which sets the currency of a workspace created with Google sign-in.
How we use it
To run the service, generate your content, charge for plans, prevent abuse (for example, one free run per person), support you and tell you about our products (see below). We don't sell your data.
How we contact you
We may use your mobile number and other contact details to service your account (for example, help with getting started, payments and support) and to tell you more about our products, features and offers, on WhatsApp, SMS, email or by phone. We keep your number when you enter it, even if you don't finish signing in, so we can help you get started. Marketing messages are on by default: untick “Send me tips, offers and updates on WhatsApp or email” when you sign in, reply STOP to any message, or write to support@oslohq.com to opt out at any time. Messages about your account and payments continue while you use Studio by OSLO Labs.
Visit counts
To see which campaigns bring people to us, our site stores a random visitor id and the link you arrived from in your browser's local storage. We don't use advertising cookies or record your IP address for this.
When you connect Instagram, we only publish the posts you send from Studio by OSLO Labs; we don't read your messages, followers or other posts. The access token is stored encrypted. Disconnect any time on your Brand page, or remove Studio by OSLO Labs in Instagram's settings under Apps and websites; either way we delete the token. To have us delete your Instagram data, remove the app in Instagram and choose to delete your data, or write to support@oslohq.com.
Who processes it
Trusted providers that help us run Studio by OSLO Labs: Google Firebase (phone and Google sign-in), our customer-engagement platform (WhatsApp, SMS and email messages), Razorpay (payments in India), Paddle.com (our reseller and merchant of record for payments outside India), Meta (Instagram publishing, when you connect it), and AI model providers (such as BytePlus, Google, OpenAI and Anthropic) that receive your images and text only to generate your content. Our servers and storage are hosted by our cloud provider.
How long we keep it
For as long as your account is active. You can ask us to delete your account and content at any time; we delete it within 30 days, except records we must keep by law (such as invoices).
Your rights
You can access, correct or delete your personal data, and withdraw consent, by writing to support@oslohq.com. Our grievance officer can be reached at the same address.
Contact
Oslo HQ, Plot 21, Sector 142, Noida 201305, India.