← Back to StudioYour photos. Your business.
We give a shit about making your posts. We don’t want to snoop through your camera roll. Here is what that means in practice.
PictureRig is an early beta built by Rev Sand. Updated October 31, 2026.
- Workspaces: each workspace has separate saved preferences, outings and an Instagram destination. Workspaces on one login share Buffer authorization and usage/storage limits. Disconnecting Buffer affects all those workspaces. Deleting your Studio account removes all of them after you remove their saved outings.
- Browser-only mode: your preferences and story text are kept in this browser’s local storage. Selected photos stay in memory and are not uploaded by this brief builder.
- Optional Google sign-in: when enabled, we use your Google account identifier and verified email to identify your Studio account. We do not request access to Gmail, Drive, contacts or Instagram.
- Account preferences: tapping Save preferences to account stores your name, Instagram handle, timezone, voice examples, writing preferences and music preferences in the beta’s Cloudflare database. Do not enter passwords or sensitive personal information in these fields. Story text and photos are not included in this account save.
- Sign-in cookies: a short-lived cookie protects the sign-in flow. An HTTP-only session cookie keeps you signed in for up to seven days. Sign out to end that session. We do not store your Google password or retain Google access tokens.
- Retention and deletion: account preferences remain until you delete your Studio account. That control removes your account, saved preferences and sessions from the active database. Provider backups and service logs may persist under provider retention rules. Clearing browser data alone does not delete an account save.
- Hosting: Cloudflare hosts the app and database; Google handles sign-in. They process requests under their own policies. A short-lived hashed network identifier limits repeated sign-in attempts. No advertising or analytics scripts are included by this app.
- Leaving Studio: opening ChatGPT, Google Drive, Instagram or Buffer takes you to a separate service. Copying a brief and sending it there is your choice; those services have their own privacy policies.
Questions or deletion help: contact Rev at @randomstonercom. This beta is for adults.
Beta feedback: submitted reports store your screen/step, expected and actual results, app version, time and account identity for Rev to review. No photos, stories or logs are attached automatically. Deleting your Studio account removes its feedback. Separate access records retain approved or paused email addresses to enforce beta access.
Access and operational limits
Your saved content is private to your signed-in account in Studio. The beta admin panel manages access, feedback and service health; it has no feature for browsing other people’s private outings or photos. This is not end-to-end encrypted storage: authorized infrastructure operators and service providers may technically access stored data to operate, troubleshoot or secure the service. We cannot honestly promise that nobody operating the infrastructure could ever access it. We do not sell your uploaded content or use it as public marketing material without your permission.
Saved outings and private photo uploads
The separate Saved outings page stores only the story you explicitly save and the photos you explicitly upload. Working photo copies are converted to JPEG at up to 2560 pixels with location metadata removed by the upload screen. They are stored in private object storage and served only after checking your signed-in account and access. Rev’s admin panel cannot browse another user’s outings or photos. Uploads and drafting are available to accounts Rev approves for the beta.
Uploads are not screened or approved for publication. Uploading alone makes no AI request. When you choose Create draft or Revise draft, selected pictures are sent to OpenAI for automated screening. Unflagged pictures, your saved story, account preferences, prior draft and feedback are sent to OpenAI to generate the next draft. Draft responses are requested with API storage disabled; OpenAI may still retain data under its API data policies. For larger photo sets, unflagged photos are also assessed in small batches to shortlist up to 15. Draft requests are saved in a private background queue, so they can finish after you close the page. Job payloads are cleared after completion or failure; removing the outing removes its jobs. Optional image text and layout choices are saved with the draft. Downloaded JPEGs are created in your browser. Drafts remain private to your account in Studio and are removed when you remove the outing. No publishing action is made. You can remove photos or an entire outing on the Saved outings page. Remove saved outings before deleting your Studio account; this ensures uploaded files are removed first. Other browser-only story fields remain local unless you explicitly save them in Saved outings.
Optional Buffer connection preview
When enabled, connecting Buffer is a separate consent step. The current preview requests read-only account and post access. It stores your Buffer account ID and an encrypted access token. The connection expires within one hour; expired records are removed during routine cleanup. It does not request posting permission, publish content, or share another tester’s connection. Disconnect removes the token from Studio; revoke PictureRig in Buffer settings to remove the provider grant too. No automatic renewal is used in this preview. The Reel timing preview uses the existing photos in your browser and does not send them to a new provider. Choosing Save Reel timeline stores scene order and durations with your private draft. Removing the outing removes that saved timeline.