GoxStudioLast updated: November 10, 2026
This policy explains what personal data GoxStudio collects, why, how long we keep it, and the rights you have over it. GoxStudio is published by MAHFOUD DIGITAL SOLUTIONS SARL ("we", "us"), who is responsible for your data. Contact: hello@gox.studio.
Registered office
77 Rue de Fes, Imb Al Mabrouk, 8ème Étage N°22 - Tanger
RC 163131 · IF 48548066 · ICE 003703348000017
We apply this policy to everyone, wherever they live, and we follow the data protection laws that apply to you, including, where they apply, the EU and UK General Data Protection Regulation (GDPR) and Moroccan Law No. 09-08.
1. What stays on your computer
GoxStudio is a desktop app. Your videos, projects, transcripts, exports and settings stay on your computer. We do not upload your projects to our servers and we cannot see them.
2. What we collect, why, and on what basis
| Data | Why | Legal basis |
|---|---|---|
| Google sign-in account information, including your email address and account identifier | To sign you in through our authentication provider and connect you to your plan and credits | Performing our contract with you |
| Onboarding answers you provide, including country, role and editing experience | To show pricing for your country and understand who uses GoxStudio | [CONFIRM LEGAL BASIS] |
| Your plan, credits, the videos you have made, and your purchases | To give you what you are entitled to and count your free videos and credits | Performing our contract |
| Payment details you send us for a manual payment (for example name, phone number, amount, transfer receipt) | To confirm your payment and add your credits | Performing our contract; legal accounting duties |
| Technical data, including a hashed device identifier used to limit repeat free trials | To keep GoxStudio working, secure and free of abuse | Our legitimate interest in a working, secure service |
We never receive your Google password: you sign in on Google's own page, in your browser. Card payments, when we offer them, are handled by the payment provider; we do not see or store your card number.
3. Audio sent for transcription
When you use GoxStudio's built-in transcription, only the sound of the video (not the picture) is sent through our server to Google's Gemini API, which returns the transcript. We do not keep the audio or the transcript on our servers once the transcript is returned. Google processes it under the Gemini API Additional Terms and Google's Privacy Policy.
If you connect your own keys to other services (Settings › Providers), GoxStudio sends those requests directly from your computer to those services, under their own terms. Your keys are stored only on your computer.
4. AI agents you connect
GoxStudio works with AI agents you install and sign in to yourself (for example Claude Code or Codex). They run on your computer with your own account at their provider and can read the project you are working on. What they send to their provider is governed by that provider's terms and privacy policy, not by ours.
5. Who we share data with
We do not sell your personal data and we do not use it for advertising. We share it only with the providers that run GoxStudio for us, under contracts that require them to protect it:
- Google (sign-in and transcription);
- our hosting and database providers;
- GitHub (app downloads and updates);
- payment providers, when you pay by card;
- authorities, when the law requires it.
Some of these providers process data in other countries. Where the law requires it, we rely on appropriate safeguards for those transfers (for example the European Commission's standard contractual clauses).
6. How long we keep it
- Your account, plan and credits: as long as your account exists. When you delete it, we delete this data within 30 days.
- Purchase records: as long as tax and accounting laws require.
- Error reports and technical logs: at most 90 days.
7. Your rights
Depending on where you live, you can ask us to access, correct, delete or export your data, to restrict or object to its processing, and to withdraw any consent you gave. Write to hello@gox.studio; we answer within 30 days. You can also complain to your data protection authority (for example, in Morocco, the CNDP; in the EU, your country's supervisory authority).
8. Security
Data is encrypted in transit (HTTPS) and access to it is limited to what running GoxStudio requires. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
9. Children
GoxStudio is not meant for children under 16, and we do not knowingly collect their data.
10. Changes
If we change this policy, we will update the date above and tell you in the app when the change matters.