STY AI Auto Studio Privacy Policy

Last updated: 20 October 2026. Effective upon publication.

Who operates the app

STY AI Auto Studio is operated by Thet Win, whose website is swealtawyeik.com. Contact hello@swealtawyeik.com for privacy questions or data-deletion requests.

This policy covers STY AI Auto Studio and its Facebook Page integration. The app currently serves the operator's own Facebook Page, Thet Win – Aero, rather than offering a public service for managing other people's Pages. It generates original images and Burmese Unicode or English captions, checks content, applies the official logo, and publishes authorized content. A local video-branding utility exists, but automated Reel generation and publishing are not currently operational. Daily publishing is currently paused while a post-visibility issue is investigated.

Information processed

During Facebook authorization and setup, Meta can make the authorizing person's basic public profile information, such as their identifier, name and profile picture, and the list of Pages they manage available. This describes authorization access; the recurring workflow does not deliberately maintain a separate personal-profile or follower database. The app uses the selected Page's identifier, name, access token, granted permissions and token validity information to confirm authorization and communicate with Meta.

For publishing and verification, the app processes generated captions and media, topics, selected language, validation results, content fingerprints, Facebook post and photo identifiers, publication times, publication status, permalinks and limited diagnostic records. It reads the selected Page's own content and publication metadata when needed to verify posts. Its current workflow does not intentionally collect followers' personal profiles, private messages, or visitor comments, even where a granted permission may technically expose additional data.

If you contact us, the operator and the email service handling the inbox process your email address, message and the information needed to understand and verify your request. The publishing app does not automatically ingest that inbox. Do not send passwords, API keys or access tokens.

Why information is used

Information is used to authorize the correct Page, generate and check content, publish on that Page, verify results, prevent duplicate posts, enforce posting limits, investigate errors and respond to privacy or deletion requests. The app does not sell personal information or use Facebook data for advertising profiles.

Facebook permissions

The current integration uses pages_show_list to discover managed Pages, pages_read_engagement to read the selected Page's own content and metadata, and pages_manage_posts to create and manage its posts. Facebook's basic public_profile permission accompanies authorization. Although a publishing permission can allow editing or deletion, the automated workflow's purpose is authorized publishing and verification. Access remains subject to Facebook's permissions, app access level, account restrictions and the Page administrator's authorization.

Service providers and disclosure

Meta receives captions, media and necessary API requests when the app communicates with or publishes to Facebook. Public posts can be viewed, shared or copied by other people according to Facebook's actual visibility settings and restrictions.

OpenAI receives content-generation prompts, selected topics, generated captions and images for generation, moderation and quality review. Recent caption/topic history may be included to avoid repetition, and the official logo may be included to check branding. Facebook access tokens are not included in these AI prompts. Authentication credentials are transmitted only to the relevant API provider for authentication or token verification. Meta token verification also sends the Page token to Meta’s token-debugging endpoint. Responses API calls use store=false; this does not mean that all provider retention is disabled. OpenAI and Meta apply their own applicable privacy, security and retention terms. Their processing may take place outside your country.

Information may also be disclosed when legally required or reasonably necessary to protect security and legal rights. Any future cloud migration or materially different use of data will require an updated policy and appropriate configuration before that processing begins.

Storage and security

The initial publishing system runs on the operator's Mac. The configured API credentials are stored in macOS Keychain under the service STY-AI-Auto-Studio. The software also supports credentials supplied through its process environment. Credentials are read into memory when API calls are made. Generated media, captions, publication records and validation records are stored locally. The app avoids recording credentials in publishing history and uses authenticated HTTPS API connections. The app relies on macOS account, device and file-access protections; a separate encrypted database or app-level access-control system has not been implemented. Publication status or fixed error codes may also appear in operator-facing automation notifications. The contents and retention of any chat or automation-service records are controlled separately from the app’s local files. No system can guarantee absolute security.

Retention

Credentials remain in Keychain until removed or replaced; their validity also depends on the issuing provider and any revocation. Local content, publication history and diagnostic records currently have no automatic deletion schedule. They are retained while needed to operate the app, prevent duplicates, verify publications and investigate problems, and can be reviewed and deleted manually by the operator when no longer needed or upon a verified request, subject to applicable legal obligations. No periodic retention review or purge is currently automated. Privacy-request correspondence is handled in the contact inbox; no separate automatic email-retention schedule is implemented by this app. There is no automated deletion endpoint at present.

Deleting a local record or revoking app access does not automatically remove a published Facebook post or copies held by Meta, other service providers, viewers or backups. Provider-held data follows the relevant provider's retention and deletion processes.

Your choices and deletion requests

You may revoke STY AI Auto Studio's access through Facebook's Business Integrations settings. Revocation stops authorized future access when effective; it does not automatically delete previously published posts.

To request access, correction or deletion of information handled by this app, email hello@swealtawyeik.com with the subject STY AI Auto Studio — Data Request. Identify the relevant Page or post using its public URL or ID and describe the information and action requested. We may ask for proportionate evidence that you control the relevant account or information. Never send passwords or tokens. Requests are handled manually; there is no instant automated deletion service.

After verification, the operator will locate the relevant local media, captions, database entries, receipts and diagnostic files and handle deletion manually. Any credentials that must be removed will be removed from the configured credential store; provider-side revocation is a separate step. Deleting local records does not itself revoke a valid provider credential. We will explain the action taken or identify any specific information retained, its reason and, where possible, its retention period. Duplicate prevention alone will not be treated as a blanket reason to keep personal information after a valid deletion request. We aim to acknowledge requests within 7 calendar days of receipt and complete applicable deletion within 30 calendar days after receiving sufficient information to verify and process the request. These are manual-service targets, not guarantees; any shorter applicable legal deadline takes precedence. If completion is delayed, we aim to explain the delay and provide an updated expected completion date before the target period ends, subject to applicable legal requirements. Independent third-party processing times may differ. Deletion cannot guarantee removal from unaudited backups or independent provider records, and any such limitation will be explained. Removal of a public Facebook post is a separate action from deleting local app records and must be requested explicitly by its authorized owner. For information held independently by Facebook or OpenAI, you may also need to use that provider's request process. Rights depend on applicable law.

Website analytics and your choices

Website analytics notice updated: 31 October 2026. Effective when published. This section applies to visitors to swealtawyeik.com and www.swealtawyeik.com, including this policy and the data-deletion page. The app-specific sections above continue to describe STY AI Auto Studio. This website notice does not change Win Picker or its separate privacy arrangements.

Cloudflare. Cloudflare hosts and protects the website and provides existing Web Analytics. Its analytics beacon measures visits, page views, approximate countries, devices and page performance without analytics cookies or individual fingerprinting. Cloudflare also processes network and request information to deliver and secure the site. Its service terms and retention practices apply. See Cloudflare’s privacy policy. The Google Analytics choice below does not disable Cloudflare’s separate cookieless analytics or hosting/security processing.

Optional Google Analytics 4. If you accept Google Analytics, we use it to understand audience trends, popular pages, navigation and selected outbound-link activity. Google receives page views, approximate location, device/browser information, referral information and pseudonymous cookie identifiers. Google receives network information, including your IP address, when your browser connects; Google states that GA4 uses IP addresses for location processing and does not log or store individual IP addresses. Data may be processed outside Singapore. See Google’s privacy policy and Google Analytics data collection.

Google’s tag is blocked until you accept. Advertising storage, advertising user-data use and advertising personalisation are denied. The website tag disables Google Signals and ad-personalisation signals. We do not add Facebook Pixel, advertising tags, form-content tracking or user IDs. Our events use predefined page/section names and selected link destinations, rather than email addresses, messages or free-form link text. Page URLs omit query strings and fragments; referrers omit paths and query strings. Only a small allowlist of campaign values is passed for referral reporting.

Consent and cookies. Use the consent panel to accept or decline optional Google Analytics. Both choices let you use the website. You can reopen Privacy & cookies in the footer at any time. Your preference is stored in a first-party sty_website_consent cookie for up to 180 days and shared between the root and www addresses. This preference cookie is used to remember your choice, not to measure visits. If browser storage is blocked, your choice may not persist.

After acceptance, site-specific Google Analytics cookies beginning sty_website_ga can remain for up to 180 days. You may withdraw consent using the same controls. Withdrawal disables this site’s Google tracking, removes its analytics cookies and reloads the page to unload Google’s tag. Other open tabs apply changed preferences when revisited. Declining Google Analytics does not delete information already received by Google. Google-held data retention follows the GA4 property’s configured retention settings and applicable Google terms; cookie expiry and deletion are separate from report retention.

For website privacy questions or requests about data handled by the operator, contact hello@swealtawyeik.com. Do not send passwords or access tokens. The manual app-data deletion instructions elsewhere on this website concern the publishing app and do not automatically erase analytics records held by Google or Cloudflare.

Changes

We will update this policy when the app's operation materially changes and display the revised date. Questions can be sent to hello@swealtawyeik.com.