Privacy policy
Last updated September 28, 2026
Stygian is a workspace for managing businesses, creating content, and publishing to accounts you authorize. Contact z@onyxlab.ai with privacy questions or deletion requests.
Information we use
Google sign-in provides your account identifier, verified email address, name, and profile image. We store your business profiles, personas, content, schedules, account setup records, and activity history. When you authorize a social provider, we store encrypted authorization tokens, the selected account identity, and the posts, comments, and analytics needed for the features you use. Optional account management features also store the login details and inbox information you provide or authorize.
How your information is used and shared
We use this information to authenticate you, isolate your businesses, manage your subscription, provide account analytics, generate content, and perform the actions you authorize. Relevant brand information, selected content, and observations may be sent to your configured AI provider or authorized agent to fulfill your requests. Social credentials, account passwords, and inbox contents are excluded from the model and MCP workspace context.
Stripe processes payments and stores payment method details. Stygian stores Stripe identifiers and subscription status, not full card numbers. Hosting, database, storage, and connected service providers process information needed to operate these features. Their own terms and privacy policies also apply. Disconnecting Stygian does not delete content already published on those services.
Google and YouTube
Stygian uses YouTube API Services when you connect a channel. With your authorization it reads the channel's name, handle, and picture; the upload and processing status of videos you publish through Stygian; recent comments on your channel, so you can reply; and daily views, likes, and comments from YouTube Analytics. It uploads only the videos you publish, with the title, description, and settings shown to you, and posts only the replies you send. This information is stored in your workspace to show your analytics and conversations and is refreshed when your channels sync; comments and analytics not refreshed within 30 days are deleted. Stygian confirms with Google every day that your authorization is still valid. If you revoke Stygian's access in your Google settings, Stygian deletes the channel's stored YouTube analytics and comments and asks you to reconnect. Disconnecting a channel in Stygian deletes them immediately and revokes Stygian's access at Google. Your own posts and the replies you wrote are kept, without the comments they answered. See the YouTube Terms of Service and the Google Privacy Policy. You may revoke Stygian's access at any time on the Google security settings page.
TikTok
When you connect TikTok, Stygian reads the account's display name, picture, and follower count. It sends the videos and photos you choose to your TikTok drafts, or posts them with the settings you confirm on the Post to TikTok screen, and keeps a record of each confirmation: who confirmed, when, and the chosen settings. Photos sent to TikTok are served from stygian.app at unguessable addresses so TikTok can download them. If you allow it, Stygian also reads the views, likes, comments, and shares of the videos on the connected account, to show how your posts perform. Stygian never adds a watermark, logo, or link to what it sends to TikTok, labels AI-generated media as such, and never posts publicly to TikTok without your confirmation of that post. See the TikTok Terms of Service and the TikTok Privacy Policy. Disconnecting TikTok in Stygian deletes its stored follower counts. You can also remove Stygian's access in the TikTok app under Settings and privacy, Security, Manage app permissions.
When you connect a Facebook Page through Facebook Login for Business, Stygian reads the Pages you chose to share so you can pick one, and for that Page reads its name, username, picture, and follower count; Page and post insights; reaction, comment, and share counts for posts Stygian published; and recent comments on the Page's posts with the commenter's name, so you can review them. It publishes to that Page only the posts, photos, and Reels you publish or schedule in Stygian. It also reads your own Facebook profile picture, used only as the picture of your tracked personal profile. Disconnecting the Page in Stygian deletes Stygian's access token; you can also remove Stygian in Facebook under Settings and privacy, Business integrations, and request deletion of your data as described on the data deletion page.
Threads
When you connect a Threads profile, Stygian reads its name, username, and profile picture so you can see which account it posts as, and publishes to it only the posts, photos, and videos you publish or schedule in Stygian. It does not read your followers, replies, or insights. Disconnecting Threads in Stygian deletes Stygian's access token. Removing Stygian in Threads (Settings, Account, Website permissions) also ends its access, and asking Meta to delete your data removes the connection and the stored picture; see the data deletion page.
Stygian connects LinkedIn company Pages only, never personal profiles. When you connect, it reads which Pages you administer and each Page's name, public address, and logo, so you can choose one, and refreshes them when your channels sync. It posts to that Page only the text and videos you publish. It does not read your LinkedIn profile, connections, or messages. Disconnecting the Page in Stygian deletes Stygian's access token; you can also remove Stygian in LinkedIn under Settings, Data privacy, Permitted services.
Cookies and security
We use necessary session and OAuth cookies for sign-in and account connections. The sample workspace stores demo data in your browser. Provider credentials are encrypted on the server. Access to real workspaces is checked against the signed-in owner; agent access requires a separate expiring grant.
Your choices and retention
You can edit your business information, pause automation, disconnect providers, and revoke agent grants. Workspace information remains stored while you use the service unless you remove it or request deletion. To request a copy, correction, or deletion of your information, contact us from your sign-in email. We verify ownership before fulfilling a request. Payment records may be retained where required for accounting, disputes, or legal obligations. See data deletion instructions.
Stygian is operated by Silicon Vanguard LLC, 2108 N St, Ste N, Sacramento, CA 95816.