Epic Fury StudioEpic Fury Studio
Privacy Policy
Epic Fury Studio is a desktop application that music teams use to edit short-form video and publish it to their own social media accounts. It does not sell, rent, or share personal data with anyone.
1 Who this covers
Everyone who starts or joins a studio in Epic Fury Studio, and the social media accounts they choose to connect. Anyone can join the waiting list on epicfury.dev; it keeps the email they give and whether they asked for the occasional update, until their studio is set up or they ask to be taken off it. Each studio is separate: nothing one studio stores is shown to another.
2 What is stored, and where
Most of what the app keeps stays in a folder on your own Mac. A small login server lets a team sign in and share work. It holds only what the table says.
| Data | Why | Where |
|---|---|---|
| Access tokens for connected accounts | To publish to, and read figures for, an account you connected | Your Mac, in a file only your macOS account can read |
| Video files | The clips being edited and published | Your own disk and your own cloud storage |
| Your name, team role and password check | So you can sign in and see only what your team lets you see | Login server. Passwords are never stored, only a one-way check |
| Your email | So you can download the app from this website. A download link is only given to an email that is on an account | Login server. Seen only by you and the people who can change your account |
| Waiting list | To email you when there’s room, and the occasional update only if you asked for it | Login server, seen only by Epic Fury Studio’s owner. Removed when your studio is set up or you ask |
| Signed-in devices | So a team can sign a device out | Login server: a device name, app version and when it was last seen |
| Team messages | Messages team members send each other in the app | Login server, deleted on a schedule |
| Queued posts | When a team member asks the team’s main Mac to post for them: which clip, which account and the post’s text. The video itself is not uploaded | Login server, until the post is sent or cancelled |
| Performance figures | So team members with access to an artist see the same figures for that artist’s posts | Login server, readable only by that team’s members who have access |
| Failed sign-in counts | To lock out password guessing | Login server, cleared after a short time |
3 Connected social accounts
When you connect a TikTok, YouTube, Instagram or Facebook account, that platform asks you directly to approve it. We never see your password. Some sign-in steps pass through the login server so the app’s own secret keys never ship inside the app. Your tokens pass through it but are not kept or logged there.
Nothing is posted unless a person chooses to post it. The app does not post on a schedule you did not set, does not post to accounts you did not connect, and does not read your feed, messages or browsing.
You can disconnect an account in the app at any time. That tells the platform to cancel the app’s access straight away and deletes its token. You can also revoke access in the platform’s own settings.
4 What we do not do
- We do not sell, rent, or trade personal data.
- We do not use it for advertising or profiling.
- We do not run third-party analytics or tracking in the app or on this website. This website sets no cookies, and the app collects no advertising or device identifiers.
- We do not use Google user data to develop, improve or train generalised AI or machine-learning models.
- We do not transfer Google user data to anyone outside the team that connected the account.
5 YouTube API Services
Epic Fury Studio uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google’s Privacy Policy describes how Google handles your data.
What it asks YouTube for
| Permission | What it is used for |
|---|---|
See your YouTube accountyoutube.readonly |
To list the connected channel and its videos, so a video published from the app is matched to the right channel and shown by name. |
See your YouTube Analytics reportsyt-analytics.readonly |
To read views, watch time, traffic sources and audience figures for that channel’s own videos. Read-only: it cannot change, upload or delete anything. |
Upload videosyoutube.upload |
Only for channels connected for publishing. A channel connected for analytics only is never offered as somewhere to post, and this permission is never requested for it. |
See, edit, and permanently delete your YouTube videos, ratings, comments and captionsyoutube.force-ssl |
Only for channels connected for publishing, and only for two things a team member asks for. Subtitles: after a video is uploaded, the song’s approved lyrics are added to it as a subtitle track, unless the person posting switched that off for the post. Replies: the app shows the latest comments on the channel’s own videos, and posts a reply only when a team member presses Reply on one comment, as the channel shown beside it. The app never edits, deletes or rates videos or comments, and never replies on its own. |
What happens to what it reads
The figures are stored on the Mac that read them. They are also shared through the login server with members of the same team who have access to that artist. Nobody outside that team can read them. They are not sold, shared, or used for advertising, profiling or training any model. YouTube reports only totals, so the app never sees individual viewers.
Stored YouTube data is refreshed when it is read again. Nothing read from YouTube is kept for more than thirty days without being refreshed from the API, and the app re-checks that it is still allowed to read each channel at least every thirty days. Disconnecting a channel in the app cancels the app’s access with Google, deletes its token, and deletes what was read from it within seven days. If you revoke access in your Google settings instead, that data is deleted within thirty days.
Taking it back
Disconnect the channel in the app, or revoke access at myaccount.google.com/permissions.
6 Instagram and Facebook
Instagram and Facebook are connected through Facebook Login. You choose which Facebook Pages, and the Instagram professional accounts linked to them, the app may use. Personal profiles cannot be connected.
What it asks Meta for
| Permission | What it is used for |
|---|---|
pages_show_list | To list the Pages you manage, so you can pick the ones to connect. |
business_management | To find Pages and Instagram accounts that belong to a business portfolio you manage. |
instagram_basic | To show the connected Instagram account’s name and picture, and to list its own posts so a video published from the app is matched to the right account. |
instagram_content_publish | To publish a video or carousel that a team member made and chose to post, at the time they chose. Only for accounts connected for publishing. |
pages_manage_posts | To publish a video that a team member chose to post to a connected Facebook Page. Only for Pages connected for publishing. |
pages_read_engagement | To read views, likes and comments counts on the Page’s own posts. |
instagram_manage_insights | To read reach, plays and engagement on the Instagram account’s own posts. |
An account connected for analytics only is asked only for the read permissions, and the app never offers it as somewhere to post. Figures read from Meta are kept and shared exactly as described for YouTube above, and are never used for advertising or sold.
Take it back by disconnecting the account in the app, or at Facebook Settings › Business integrations. How to delete your data is on the data deletion page.
7 TikTok
TikTok is connected through Login Kit, on TikTok’s own screen.
| Permission | What it is used for |
|---|---|
user.info.basic | To show the connected account’s display name and picture. |
video.publish | To post a video a team member chose to post, with the caption and privacy setting they chose in the app. |
video.list | To read view, like, comment and share counts on the account’s own videos. |
Before anything is posted, the app shows the account it will post to and lets you choose who can see the post, whether comments, duets and stitches are allowed, and whether it is branded content. Take access back by disconnecting in the app, or in TikTok under Settings › Security › Manage app permissions.
8 Third-party platforms
A published video goes to the platform you chose, and that platform’s privacy policy covers it from then on:
The login server runs on Cloudflare. The app’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
9 Keeping and deleting
Tokens stay until you disconnect the account or revoke access. Removing the app’s data folder deletes everything kept on your Mac. When someone is removed from a team, their sign-in stops working and their devices are signed out.
Step-by-step deletion instructions are on the data deletion page. To ask what is held about you, or to have it deleted, write to jack@lukegawne.com.
10 Security
Token files on your Mac can be read only by your own macOS account. Everything sent to the login server is encrypted in transit.
11 Children
The app is a professional tool and is not directed to children under 13.
12 Changes
If this policy changes, the date at the top changes with it.