Last updated 10 September 2026
Who we are
Sudio is operated by Amarcode Studios Limited, registered in England & Wales, the data controller for the personal data described here. Registered office: 10 Laurence Court, Canterbury, Kent, CT1 2WR, United Kingdom. Data-controller contact: support@synion.io.
What we collect
Your email address and sign-in credentials (handled by Hanko, our authentication provider). The label and optional email an agent gives when it asks to work on your account, and your approval or refusal with any reason you write. A hash of your API key — never the key itself. The prompts, briefs, recordings and images provided to the Service by you or your agents, and the media generated from them. Usage counts against your quota, and technical logs needed to run the Service. Analytics cookies are set only with your consent (see the Cookie Policy).
Why we use it
To provide the Service (authenticate you and your agents, generate and store media, meter your quota), to keep your account secure (registrations expire, keys can be revoked, requests are rate-limited), to respond to support requests, and — with consent — to understand how the Service is used. Our lawful bases are performance of a contract, our legitimate interest in running a secure service, and consent for analytics.
What we never do
We do not read the text your agents write to us as instructions, we do not share content between accounts, and we do not sell personal data. Log lines carry identifiers and lengths, never the content of a prompt, a label or a key.
Who we share it with
Processors acting on our instructions: Hanko (authentication); providers of generative models, speech synthesis and video rendering, which receive the prompts, recordings and images needed for a given generation; hosting and object-storage providers; and Google Tag Manager/Analytics when you have accepted analytics cookies.
Where it is kept
Infrastructure runs in the United Kingdom and the European Union. Where a processor transfers data elsewhere, appropriate safeguards apply.
YouTube and Google user data
If you connect a YouTube channel, Sudio uses Google's YouTube API Services and this notice covers that use together with the Google Privacy Policy (https://policies.google.com/privacy). With your consent on Google's screen we receive a refresh token, your channel's id and its title, and we ask for two permissions only: to upload videos to your channel and to read your channel's name. We use them for one thing: to publish the videos you or your agent choose to publish, with the title, description, tags, privacy and category you give. We do not read your subscribers, your other videos, your comments or your watch history, and we do not use YouTube data for advertising. The token is stored encrypted and is never shown to you, your agent or anyone else; the channel id, title, and the link and status of each publication are kept on your account so its pages and your agent can read them. Disconnecting the channel on your account page discards the token; you can also revoke Sudio's access at any time from your Google account's security settings (https://myaccount.google.com/permissions), after which nothing further is published. Videos already on your channel are yours and stay under YouTube's terms (https://www.youtube.com/t/terms).
How long we keep it
Account data and generated media are kept while your account is active and for a reasonable period afterwards, then deleted. Pending agent registrations expire after fifteen minutes; approved, denied and claimed ones are kept as part of your account history. You can request deletion at any time.
Your rights
Under UK GDPR you can ask to access, correct, delete or port your data, restrict or object to processing, and withdraw consent. You can complain to the Information Commissioner’s Office (ico.org.uk).
Contact
Write to support@synion.io for any question about your data or to exercise your rights; we answer within a month as UK GDPR requires. By post: Amarcode Studios Limited, 10 Laurence Court, Canterbury, Kent, CT1 2WR, United Kingdom.