Per-product transparency
Studio
Carousel and short-form content creation, with optional one-click publish to connected social channels.
studio.eleven11.pro
What we collect, why, and how long
| Data | Purpose | Lawful basis | Retention | Region |
|---|---|---|---|---|
| Account | Authenticate the customer; bind drafts to a workspace. | Performance of contract | Until account deletion + 90 days backups. | EU (Germany), EU (Finland) |
| Content artifacts | Render and store drafts, captions, and exported assets. | Performance of contract | Until customer deletes the draft, or account deletion + 90 days backups. | EU (Germany), EU (Finland) |
| OAuth tokens | Publish customer-authored content to channels the customer has connected (Instagram, Facebook). | Consent | Encrypted at rest; revoked on disconnect or account deletion (within 24 hours of either). | EU (Germany), EU (Finland) |
OAuth scopes we request
When you connect this product, we request the following permissions from the upstream platform. You can revoke any of these at any time from your account on the upstream platform; we honor the revocation within minutes.
pages_show_listLists the Facebook Pages you administer so you can pick which to publish to.
pages_read_engagementReads engagement metadata (reactions, comments, shares) on the Pages you connect, so Studio can surface basic analytics.
instagram_basicReads the Instagram Business Account linked to your Page (account ID, username) so we can address it for publishing.
instagram_content_publishPublishes content you author in Studio to the Instagram Business Account you select.
business_managementRequired by Meta to manage Pages and Instagram accounts on your behalf within the scope above.
Subprocessors involved
| Vendor | Purpose | Region | Conditional | DPA |
|---|---|---|---|---|
| Hetzner Online GmbH | Compute and storage hosting for Eleven11 services | EU (Germany), EU (Finland) | — | Vendor DPA |
| Cloudflare, Inc. | DNS, CDN, edge proxy, and tunneling | Global | — | Vendor DPA |
| Anthropic, PBC | Large language model inference. Used only when a customer has not configured their own BYOK provider; Eleven11 never silently routes BYOK-configured workloads to Anthropic. | United States | Only when no BYOK LLM provider is configured for the workspace. | Vendor DPA |
| Meta Platforms, Inc. | Instagram and Facebook publishing via Graph API for customer-connected accounts | User-region | Only when a customer connects a Meta account via Studio. | Vendor DPA |
| Customer-supplied LLM provider (BYOK) | LLM inference using credentials the customer brings. Customer is the Controller of this flow; Eleven11 acts as Processor only relative to the customer's configured provider. | Customer-controlled | Only when a customer configures their own LLM API key in their workspace. | — |
How to delete your data
Studio → Settings → Account → Delete Account. Or email [email protected] from your account address.