Privacy policy

This policy covers persio.cc: the pages you are reading and the studio at persio.cc/studio, on every paid plan and pack. Persio is a product of Ambitious Machines, Inc., a Delaware corporation with its mailing address at 2810 N Church St, STE 90429, Wilmington, DE 19802, United States. “We” and “us” mean that company, which is the controller of the personal data described here.

What we collect

Your account

Your email address and the times you sign in. You sign in with a six-digit code or a link sent to your email, or with Google if you choose it. We never receive or store a password. With Google, Google also shares your name and the link to your profile picture.

Your studio and its work

The studio’s name and brand kit (logo, accent colour and contact line), and what you make in it: projects, the sketches, photos and references you upload, the renders and videos Persio makes, the prompts, presets and style notes behind each one, presentations, saved prompts and favourites. This is the material the product exists to work with, so it is kept for as long as the studio exists.

Credits and billing

We record every credit granted, spent and refunded, the plan the studio is on and the packs it buys. Card details are handled by Stripe and never reach our servers.

Technical logs

Standard request logs: the address a request came from, the time, the action asked for and any error. We use them to keep the service running and to investigate abuse. The limits on how many runs a studio can start are counted per studio and per person, not per address.

Visits to this site

The public pages of persio.cc load the Meta Pixel, from Meta Platforms Ireland, and Google Analytics, from Google Ireland, to count visits and to build advertising audiences. They record the pages you view, clicks on the email links (the walkthrough link among them), when the pricing comes into view, and your device and browser details, and Meta and Google set cookies of their own to do it.

PostHog, from PostHog, Inc. in the United States, receives the same page views and clicks. We use it to see which pages are read and how long a visit lasts. PostHog sets no cookie, stores nothing in your browser and does not record your screen. It receives your IP address and browser details with each request, and uses the address to estimate a rough location.

None of the three loads until you accept them in the banner shown on your first visit, and none loads if you decline. Your answer is kept in your browser, and Cookie settings at the foot of every page lets you change it. None of the three is loaded in the studio or on its sign-in pages. To object, write to machine@persio.cc.

What we do not do

• We do not train models on your work. Your uploads and renders are used to make your images and nothing else.
• We do not sell your data, and we do not share it with advertisers.
• We do not publish your renders or use them in our marketing without asking you first.

How a run handles your data

When you start a render or a video, the studio’s server composes the prompt from your presets, your sentence and the project’s style notes, and sends it with the run settings and the reference images the run needs to the model provider. Nothing else of your studio goes with it. The finished image or video is copied into your studio’s private storage.

Studio files are private. The studio, and anyone you share with, only ever receive links to them that expire. A project or a presentation becomes visible to others only when you turn on its share link, and turning the link off closes it again.

Who processes your data

Persio runs on a small set of providers. Each receives only what it needs to do its job:

• Amazon Web Services, for hosting this site and the studio (AWS Amplify), the studio’s server (AWS Lambda), scheduled jobs (Amazon EventBridge) and sign-in email (Amazon SES), in Frankfurt, Germany (EU), with pages delivered from the network location nearest to you. Amplify and Lambda see each request: your IP address, the page or action asked for and your browser details. SES receives your email address to send the sign-in code and link.
• Supabase, for the database, sign-in and file storage, in Frankfurt, Germany (EU). It holds your account, your studio and its brand kit, your projects, uploads, renders, videos and presentations, and the credit ledger. Studio files are private: the studio only ever receives links that expire.
• ElevenLabs, for image and video models, in the United States. For each run it receives the prompt, the run settings and the reference images the run needs, and runs the model with the company that makes it.
• Replicate, for image and video models, among them the ones that keep a drawing’s geometry, in the United States. For each run it receives the prompt, the run settings and short-lived links to the reference images the run needs.
• Stripe, for payments, subscriptions and the billing portal, in the United States. It receives your email address, your studio’s name and the plan or pack you buy. Card details are entered on Stripe’s own pages and never reach us.
• Google, for Sign in with Google, if you choose it, in the United States. It tells us your email address, your name and the link to your profile picture. We never receive your Google password.
• Cloudflare, for the persio.cc domain name, on its global network, nearest to you. It answers the lookups that find the site. The pages and the studio do not pass through it.

Your account and your studio are stored in the European Union. Using Persio means some of your data is also processed in the United States, by the providers above that operate there.

How long we keep it

Your studio’s work is kept while the studio exists. Delete a file and it is removed from storage at once. Delete the studio in Settings and its projects, files, presentations and brand kit are removed at once, and any subscription is cancelled. Copies in the database’s backups are gone within 30 days. Billing records are kept for as long as tax and accounting law requires.

Your rights

You can ask for a copy of your data, ask us to correct it or delete it, object to how it is used, or ask for its use to be restricted. Under the GDPR and laws like it these are rights, and we answer within 30 days. You may also complain to your data protection authority. Write to machine@persio.cc.

Security

Data is encrypted in transit and at rest. Every studio’s data is kept apart at the database level, so one studio cannot read another’s, and every read and write goes through the studio’s server, which checks who is asking. Access to production data is limited to what is needed to run and support the service.

Cookies and browser storage

The studio keeps your sign-in session and your theme choice in your browser’s storage. It sets no advertising or cross-site tracking cookies. On the public pages, your cookie choice is kept in your browser’s storage, and only after you accept do Meta and Google set the cookies described under Visits to this site; PostHog sets none.

Changes

If this policy changes in a way that matters to you, we will email you before the change takes effect. The date at the top always shows the current version.

Contact

Questions about this policy or your data: machine@persio.cc. By post: Ambitious Machines, Inc., 2810 N Church St, STE 90429, Wilmington, DE 19802, United States.