Privacy Policy

1. Who we are and what this Policy covers

Birdline is a trade name of Mike Pagan Studio Inc., a California corporation based in Los Angeles (“Birdline,” “we,” “us,” or “our”). We also operate as Birdline Studios. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have. Effective date: November 6, 2026.

This Policy covers:

• Our website — birdlinestudios.com and its subpages, including forms, calculators and embedded video (the “Sites”).
• The Birdline App — the production workspace at app.birdline.ai, including its integrations with ad, content and messaging platforms and its AI features (the “App”).
• Birdline Studios — our creative and production services, including the talent, creators and crews who take part in our productions (the “Studio Services”).
• Our communications with you — email, calls, Slack channels, review links and support.

Together, these are the “Services.” This Policy does not cover third-party platforms you connect to the App or use alongside it (for example Meta, Google, Slack, Figma or Notion). Their own privacy policies govern what they do with your data.

Business customers and the data they bring to us. When a company uses the App or hires Birdline Studios, it decides what campaign content, performance data and information about people to put into our Services. For that information we act as a service provider (or “processor”) on the customer’s instructions, and the customer’s own privacy practices apply. If you are an employee, contractor, creator or talent working with one of our customers and have a question about their data, contact that customer first; we will help them respond.

2. Information we collect

Information you give us

• Account and profile. Name, work email, password (stored only in hashed form), job title, profile photo, company name and size, and the organization or workspace you belong to.
• Contact and sales. Details you submit through “Book a call” forms (full name, work email, company, company size, how you heard about us), Calendly bookings, support requests and any messages you send us.
• Billing. Billing contact, company address and tax ID. Card numbers are collected and stored by our payment processor, not by us; we see only the card type, last four digits and expiry.
• Customer Content. Everything you put into the App: campaigns, briefs and overviews, shot lists, tasks and statuses, line-item budgets and rates, comments, brand assets (logos, product images, brand guidelines), reference files, deliverable links and any media you upload or connect.
• Information about other people you add. Teammates you invite (name and email), and the talent, crew, location and vendor contacts you keep in the App. You are responsible for having the right to share this information with us (see our Terms of Service).
• Studio Services. Project briefs, brand guidelines, product and shipping details, approvals and feedback, and the information needed for contracts, releases, invoices and payments.

Information we collect automatically

• Usage data. Pages and features used, campaigns and briefs opened, actions taken (for example, status changes or connections made), timestamps, online/offline presence shown to your teammates, and referring URLs.
• Device and connection data. IP address, browser and operating system, device identifiers, language settings and approximate location derived from your IP address.
• Logs and diagnostics. Error reports, performance data and security events.
• Cookies and similar technologies. See Section 6.

Information from platforms you connect

We receive this data only when you choose to connect a platform (see Section 5), and only within the permissions you grant.

• Meta (Facebook and Instagram) ad accounts. Ad account IDs and names, campaign, ad set and ad names and IDs, ad creative previews and thumbnails, delivery status, and performance metrics such as spend, impressions, reach, clicks, conversions and attributed revenue.
• Google Ads. The equivalent account, campaign and performance data for the accounts you select.
• Google Drive, Docs, Sheets and Slides; Notion; Figma. Only the specific files, pages or designs you choose to connect to a brief, plus the basic account identifiers needed to keep the connection working.
• Slack. Workspace and channel identifiers, your Slack user ID, and the content of the notifications you choose to send to Slack.
• Content and review tools (for example Frame.io, Dropbox, Box, Air). The folders and files you choose to connect to your Content Library.
• Instagram (organic). Performance metrics for brand-owned accounts you connect.

Information from other sources

• Service providers and partners. Payment confirmations, email delivery status, analytics and fraud-prevention signals.
• Public and business sources. Company information such as website, size and industry, used to understand prospects and customers.
• Referrals. If a teammate invites you to a workspace or someone refers you to Birdline Studios, we receive your name and email from them.

3. How we use information

We use personal information to:

• Provide the Services. Create and secure accounts, run organizations and workspaces, sync connected-platform data into Insights, link ads to the briefs and deliverables that produced them, calculate metrics such as ROPS and ROCS, generate Creative Reports, and plan, produce and deliver Studio Services.
• Power AI features. Draft and refine briefs, summarize performance and suggest references based on your Customer Content (see Section 4).
• Support and communicate. Respond to requests, schedule calls, and send service messages about billing, security, connections and changes to the Services.
• Bill and manage accounts. Process payments, invoices, seats and subscriptions, and detect fraud and unpaid use.
• Improve and develop. Understand how features are used, fix bugs, test new features and build aggregated analytics that do not identify you or your company.
• Market. Send product news and offers to business contacts (you can opt out at any time), run and measure Birdline’s own advertising, and showcase our work with customer permission.
• Protect and comply. Enforce our Terms of Service, meet legal and tax obligations, respond to lawful requests, and protect the rights, safety and property of Birdline, our customers, our crews and others.

We do not sell personal information for money, and we do not use Customer Content or connected-platform data to advertise to anyone. Section 10 explains how advertising cookies on our Sites are treated under California law.

Legal bases (EEA, UK and Switzerland). We process personal information to perform our contract with you; for our legitimate interests in operating, securing, improving and marketing the Services; with your consent where the law requires it (for example, non- essential cookies); and to comply with legal obligations.

4. AI features

The App includes AI features such as Smart Brief (an assistant that drafts and refines creative briefs), Creative Reports (summaries of what worked in a campaign) and reference suggestions drawn from your workspace. These features work by sending the relevant parts of your Customer Content and connected-platform data — for example a brief, your brand guidelines or a campaign’s metrics — to third-party AI model providers that process it under contract with us.

• No training on your data. Our AI providers may use your data only to return results to you. They are contractually prohibited from using it to train or improve their models, and Birdline does not use your Customer Content or connected-platform data to train models made available to other customers.
• Human review. No one at Birdline reads your prompts or outputs except to provide support you request, to investigate abuse or security incidents, or as required by law.
• Retention. Prompts and outputs are stored as part of your workspace so you can see, edit and reuse them. They follow the retention rules in Section 8.
• Accuracy. AI output is generated automatically and can be wrong, incomplete or out of date. Review it before relying on it or publishing it.
• Studio Services. Birdline Studios may use AI tools to produce “AI Content” deliverables such as on-brand generative visuals and audio. How client materials may be used with those tools is set out in the applicable statement of work.

5. Connected platforms and third-party platform data

You choose which platforms to connect, from Insights → Manage Connections, from a brief’s references, or from the Content Library. Connections use OAuth, so Birdline never sees your platform password, and we access only the permissions (“scopes”) you approve on the platform’s consent screen.

Meta (Facebook and Instagram). Connecting Meta lets Birdline read ads data for the ad accounts you select, using the ads_read and business_management permissions, to populate Insights, link ads to briefs and generate Creative Reports. Birdline does not create, edit, publish or pause ads, post on your behalf, or access your personal profile, friends or messages. Our use of Meta data complies with the Meta Platform Terms and Developer Policies.

Google. Birdline’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Drive access is limited to the files you pick (the drive.file scope); Google Ads access is read-only reporting for the accounts you select. We do not use Google user data for advertising, and no human reads it except with your permission, for security purposes, or to comply with law.

Figma, Notion, Slack, Frame.io and storage providers. We read only the files, pages, folders or channels you connect, and we send to Slack only the notifications you configure.

What we do with platform data. We use it only to provide the features you asked for: showing performance in Insights, matching ads to the briefs and deliverables that produced them, calculating ROPS and ROCS, generating Creative Reports and pulling brief context. We do not sell platform data, use it to build advertising profiles, or combine it across customers except in aggregated, de-identified form (for example, category benchmarks that cannot be traced to any account).

Disconnecting. You can disconnect any platform at any time from Manage Connections or the relevant settings page. Disconnecting stops new syncing; data already synced into your workspace stays there until you delete it or close your account (Section 8). You can also revoke Birdline’s access from the platform itself — for example Meta’s Business Integrations settings or Google Account → Third-party apps and services. When Meta or Google notifies us that you have removed Birdline, we delete the data synced through that connection within 30 days.

6. Cookies, analytics and tracking technologies

We use cookies, pixels, local storage and similar technologies on the Sites and in the App.

We do not use advertising cookies inside the App, and we never place our own advertising cookies on your customers’ sites.

Your choices. You can control cookies in your browser settings; blocking strictly necessary cookies will stop sign-in from working. Where a cookie banner is shown, you can decline non-essential cookies. To opt out of advertising cookies you can also use the Meta ad preferences page, Google’s ad settings, or the Digital Advertising Alliance opt-out at optout.aboutads.info. We treat a Global Privacy Control (GPC) browser signal as a request to opt out of advertising cookies. We do not otherwise respond to “Do Not Track” signals.

7. How we share information

We share personal information only as described below. We do not sell it.

• Within your organization. Workspace admins and members can see your name, email, role and presence, and the content and activity you add to shared workspaces. When Birdline Studios works in your workspace, its team members see the same.
• Service providers. Companies that host, store, process and support the Services on our instructions and under contracts that limit how they may use data. Current categories and providers:

• Connected platforms. When you connect a platform, we exchange the data needed to run the connection (for example, sending authentication tokens and receiving ads data).
• People you choose. Anyone you share links, deliverables, review pages or notifications with.
• Studio production partners. The creatives, crews and vendors we engage for your project receive the project details they need: brand, brief, schedule, deliverable specs, and the contact details of your points of contact.
• Professional advisers. Lawyers, accountants, auditors and insurers, under confidentiality obligations.
• Legal, safety and enforcement. To comply with law or a valid legal request, to enforce our Terms of Service, or to protect the rights, safety and property of Birdline, our customers, our crews or the public.
• Business transfers. If Birdline is involved in a merger, acquisition, financing, reorganization or sale of assets, personal information may be transferred as part of that transaction and will remain subject to this Policy.
• With your direction or consent. For example, when you ask us to feature your brand in a case study or to introduce you to a production partner.

We may share aggregated or de-identified data that cannot reasonably identify you or your company (for example, benchmark statistics across campaigns) for any purpose.

8. Data retention and deletion

We keep personal information only as long as we need it for the purposes in this Policy, then delete or de-identify it.

Deleting your data.

• Inside the App. Workspace admins can delete campaigns, briefs, content and members at any time, and can disconnect platforms from Manage Connections.
• Your account or workspace. Email chirp@birdlinestudios.com from the email address on the account. We confirm the request, complete deletion within 30 days, and send you confirmation. Deleting an organization deletes the workspaces and content inside it for every member.
• Connected-platform data. Disconnect the platform in the App, or remove Birdline from the platform’s own settings (for example Meta’s Business Integrations). Either way, you can email us to have the synced data deleted immediately rather than waiting for account closure.

We may keep limited information after deletion where the law requires it (for example, tax records) or to resolve disputes and enforce our agreements.

9. Security

We protect personal information with technical and organizational measures appropriate to its sensitivity, including:

• Encryption in transit (TLS) and at rest, with platform access tokens stored encrypted.
• Role-based access inside the App (Admin and Member roles) and least-privilege access for Birdline staff, limited to what is needed to provide the Services.
• Logging and monitoring of access to production systems, and periodic review of our service providers’ security practices.
• Backups, and tested procedures for restoring them.

No system is completely secure, so we cannot guarantee that unauthorized access, loss or misuse will never occur. You help by using a strong, unique password, keeping your credentials private, limiting Admin roles to people who need them, and telling us right away at chirp@birdlinestudios.com if you suspect unauthorized access. If a security incident affects your personal information, we will notify you and any regulators as the law requires, without undue delay.

10. Your rights and choices

Everyone

• Access and update. Edit your profile, organization and billing details in Settings, or email us.
• Marketing. Unsubscribe using the link in any marketing email or by emailing us. You will still receive service messages about your account.
• Cookies. See Section 6.
• Connected platforms. Disconnect at any time (Section 5).
• Deletion. See Section 8.

To exercise any right, email chirp@birdlinestudios.com. We will verify your request using the email address on your account or other information you have given us, and respond within the time the law requires (45 days in most cases). You may use an authorized agent if you give them written permission and we can verify your identity.

California residents

If the California Consumer Privacy Act (CCPA) applies to you, you have the right to know what personal information we collect, use and disclose; to access it in a portable format; to correct it; to delete it; to opt out of “sale” or “sharing”; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.

• Categories we collect. Identifiers (name, email, IP address); customer records (billing details); commercial information (plans, invoices); internet activity (usage and device data); approximate geolocation (from IP address); professional information (title, company); audio and visual information (recordings and photos from Studio productions, Section 13); and inferences used only to improve the Services. Sources and purposes are described in Sections 2 and 3; disclosures to service providers in Section 7.
• Sensitive personal information. We collect account credentials and, for Studio participants, payment and tax details. We use them only to provide the Services, and we do not use or disclose sensitive personal information to infer characteristics about you.
• Sale and sharing. We do not sell personal information. Advertising cookies on our Sites may count as “sharing” for cross-context behavioral advertising. You can opt out through the cookie banner, by enabling Global Privacy Control in your browser, or by emailing us with the subject “Do Not Sell or Share.” We do not knowingly sell or share the personal information of anyone under 16.
• Shine the Light. We do not disclose personal information to third parties for their own direct marketing.

Other US states

Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Oregon, Texas, Virginia and Utah) have similar rights of access, correction, deletion, portability and opt-out. If we decline a request, you may appeal by replying to our decision email; we will respond within 45 days.

EEA, UK and Switzerland

You have the right to access, rectify, erase and port your personal information, to restrict or object to processing, and to withdraw consent at any time without affecting earlier processing. You may also complain to your local data protection authority. Mike Pagan Studio Inc. is the controller of personal information collected through the Sites, for billing and for marketing; for Customer Content and platform data in a customer’s workspace, the customer is the controller and we are its processor, so please direct requests about that data to the customer.

11. International data transfers

Birdline is based in the United States, and we process and store personal information there. Our service providers may process it in the United States and other countries. Birdline Studios also works with crews and creatives wherever a production takes place, so project details may be shared with partners in those countries.

Where we transfer personal information from the EEA, UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant), on our providers’ certification under the EU-U.S. Data Privacy Framework, or on another lawful transfer mechanism.

12. Children’s privacy

The Sites and the App are built for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children under 16 through them; if we learn that we have, we delete it.

Studio productions sometimes feature minors. In that case we collect a minor’s information only from, and with the written consent of, a parent or legal guardian, and only as needed for the production, its permits and releases, and payment. Parents and guardians can contact us at any time about that information (Section 15).

13. People who take part in Birdline Studios productions

This section applies to talent, UGC creators, interviewees, client team members who appear on camera, and the independent creatives and crews (“Birds”) who work on our productions.

What we collect. Name, contact details and representation (agent or manager); your likeness, voice and performance as recorded in footage, photographs and audio; wardrobe sizing and other details needed for the shoot; availability, rates and credits; the information needed to pay you (bank details, tax forms such as a W-9 or W-8, and union or guild status where it affects payment); travel and accommodation details when we arrange them; and, where the law requires it, proof of age and work permits.

Why. To plan and run the production, to document the rights you grant in a release or license, to pay you and meet tax, insurance, permit and labor-law requirements, to deliver the finished work to the client, and to show our work in Birdline’s portfolio and the App’s work galleries.

Who sees it. The client who commissioned the production (your name, likeness and the terms of your release, as they appear in the deliverables); the production partners who need it (payroll companies, insurers, travel, equipment and location vendors); and the platforms where the client publishes the finished work.

Your likeness. How your likeness and performance may be used — for how long, where, and in which media — is set out in the release or license you sign. If you have a question about those terms after the shoot, contact us and we will tell you what the release allows.

Behind the scenes. We often photograph and film on set for behind-the-scenes content and our portfolio. Tell the producer before the shoot if you do not want to appear in it.

Keeping it. Footage, photographs and release documents are production records. We keep them as described in Section 8, and for as long as the finished work is in use under a release or license.

Joining our network. If you apply to work with Birdline Studios, we keep your application, portfolio and contact details so we can match you to future projects. Email us if you want your details removed.

14. Changes to this Policy

We may update this Policy as the Services, the law or our practices change. When we do, we will post the new version at birdlinestudios.com/privacy and update the effective date at the top. If a change materially reduces your rights or changes how we use personal information we already hold, we will tell you first — by email to your account address or by a notice in the App — at least 30 days before it takes effect. Your continued use of the Services after that date means you accept the updated Policy.

15. How to contact us

Questions, requests and complaints about privacy can be sent to:

• Company: Mike Pagan Studio Inc. dba Birdline
• HQ: Torrance, CA
• Email: chirp@birdlinestudios.com
• Support: birdlinestudios.com/support

We aim to answer every privacy inquiry within 10 business days.