Trust & Privacy

You sign in with Google or Apple via secure OAuth — OG Studio never sees or stores your provider password. Your session is held in your browser and can be ended at any time by signing out.

Privileged actions (admin tools, role grants, coin balance changes) are gated server side by role checks, not by anything stored in your browser.

Songs, lyrics, preferences and coin balances are stored per-user behind row-level security so one account cannot read another account's records. Internal bot configuration and admin tooling are restricted to signed-in users and admin roles.

Transport is encrypted with HTTPS/TLS end-to-end between your device, our app, and our backend.

We collect the minimum needed to run the app: your email and display name from the identity provider you choose, the prompts and songs you create, your in-app preferences, and a coin/transaction ledger to power generations and referrals. We do not collect location, IP-based location, contacts, advertising IDs, full device fingerprints, or page-by-page activity, and we do not sell personal data.

You can request deletion of your account and associated content by emailing the address below.

OG Studio uses a small set of trusted providers to operate: a managed Postgres backend with auth and storage, an AI gateway for lyrics and persona responses, a music-generation API for audio, and optional payment and analytics partners. Each provider only receives the data needed to perform its specific task.

We use first-party browser storage to keep you signed in and remember preferences such as your OG B0T mode. We do not use cross-site advertising trackers.

For privacy requests (access, export, deletion) or to report a suspected security issue, email ogbot196@gmail.com. Please include enough detail to reproduce the issue and avoid testing against other users' data.