Legal
How Standard Deviation handles information on standard-dev.com, inside StandardOS, and through the advertising and analytics accounts you connect to it.
Standard Deviation is a marketing consultancy and software company based in Brooklyn, New York. We run standard-dev.com and its subdomains, including StandardOS at app.standard-dev.com. Questions about this policy go to noah@standard-dev.com.
We use this information to run the service: to produce the analyses, reports, plans and creative you ask for, to act on your accounts when you direct us to, to keep the service secure and working, to answer you, to understand how the site is used, and to measure and target our own advertising.
We do not sell personal information. We do not use connected platform data to advertise to you or to anyone else, and we do not combine one client's connected data with another's.
standard-dev.com uses these tags. StandardOS itself uses only the cookies it needs to sign you in and keep your session secure.
_ga, which last up to two years._fbp, which lasts 90 days, and Meta may also read its own cookies if you are signed in to Facebook or Instagram. Meta uses this data under its own Privacy Policy.The Meta pixel is advertising measurement and targeting. Under some US state laws that counts as sharing personal information for targeted advertising, and you can opt out as described under Your choices and rights. The pixel is not used inside StandardOS and never receives connected platform data.
StandardOS uses large language models to produce analyses, plans and creative. The content you submit and the connected data a feature needs are sent to the model provider for that task (currently Anthropic, OpenAI and Google) and come back as results. We send what the task needs rather than whole accounts, and we reach these providers through their business APIs rather than their consumer products.
Standard Deviation's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide and improve the StandardOS features you can see, such as Google Analytics and Search Console reporting and Google Ads planning. It is not used for advertising, it is not sold, and it is not shared with anyone except as needed to provide those features, for security, or when the law requires it. Nobody at Standard Deviation reads it unless you ask for help, it is needed for security, or the law requires it.
Data received through Meta's platform is handled under Meta's Platform Terms and Developer Policies. It is used only to provide StandardOS features to the business that connected the account, and it is deleted as described below.
Service providers that host and run the service: Railway for the application and database, Cloudflare for the website and network, and an email delivery provider for messages we send you. The AI providers named above. Google and Meta, for the website analytics and advertising described under Cookies and tracking. Professional advisers where needed. Authorities when the law requires it. If Standard Deviation is sold or merged, data moves with it under this policy.
To disconnect an account or ask for deletion, see Data deletion.
Data moves over TLS. OAuth credentials and other secrets are encrypted at rest. Access is limited to the people who need it to run the service. The service is hosted in data centers in the United States.
You can disconnect any platform in StandardOS at any time, remove StandardOS from your Meta or Google account settings, and ask us for a copy, a correction or the deletion of your data by emailing noah@standard-dev.com. You can block or delete cookies in your browser settings, opt out of Google Analytics with Google's opt-out add-on, and control how Meta uses website activity for ads under Ad preferences in your Meta Accounts Center. You can also email us to opt out of the Meta pixel sharing described above. Depending on where you live, including the EU, the UK and California, you may have further rights over your data; write to us and we will honor them. We will not treat you differently for exercising them.
StandardOS is built for businesses. It is not directed at anyone under 18 and we do not knowingly collect their data. Wherever you are, your data is processed in the United States.
When this policy changes we will post the new version here and update the date at the top. If a change is material, account holders get an email.