Privacy policy

The service is offered under the working name Studioflow (Studioflow (working name)). The full legal name and address of the operating entity are being confirmed as part of the review noted at the top of this page.

For any privacy question or request, use the contact page and choose “Privacy or data request”.

• Visitors to the public website.
• People who sign in: members of a studio’s workspace and the client guests a studio invites.
• People who send us a message through the contact form.
• Personal data inside studio workspaces, which we process on behalf of each studio.

Account data

Your name, email address, profile photo link and Google account identifier, received from Google when you sign in, plus your time zone, language and display preferences.

Workspace content

What a studio and its people put into the product: clients and their contacts, projects, tasks, time entries, rates, expenses and receipts, estimates, invoices, payment records, comments, files and the audit log of changes.

Security records

Session records, made of a hash of the session token, your browser’s user agent and sign-in and last-seen times, and rate-limit counters keyed by one-way hashes of IP addresses or email addresses.

Contact form

Your name, email address, company if you give it, the topic and your message, and a one-way hash of the IP address used, kept to prevent abuse.

Payments

For subscriptions, Stripe collects payment details and we receive customer and subscription identifiers, the plan, status and amounts, never card numbers. For client invoices, payments go to the studio’s own Stripe account, and we record amounts, status and Stripe references.

Email

When the product sends email, such as invitations, invoices, reminders and notifications, our email provider keeps a record of each message, including its content and delivery events, for 30 days. If open tracking is enabled for the site, the provider may record when an email with HTML content is opened. Action buttons in product emails, such as invitation and payment links, are sent without click tracking.

Website analytics

Our hosting platform counts visits to the public website in aggregate: pages viewed, the referring site, country, browser, operating system and device type.

Data kept in your browser

A session cookie that keeps you signed in, your appearance setting, temporary sign-in state in session storage while Google sign-in completes, and time entries that are waiting to sync while you are offline. There are no advertising or cross-site tracking cookies.

• To provide the service you or your studio signed up for, as part of our contract.
• To keep the service secure and prevent abuse, which is in our and our customers’ legitimate interests.
• To bill subscriptions and keep financial records, as part of our contract and to meet legal obligations.
• To answer messages you send us, in our legitimate interest or at your request before a contract.
• To comply with the law.

We do not sell personal data, and we do not use it for advertising.

For workspace content, each studio decides what is collected and why, and we process it on the studio’s behalf. Requests about that content should go to the studio first, and we help studios respond to them.

For account, billing, security, website and contact data, we decide how it is processed and are responsible for it.

Studios that need a data processing agreement can ask through the contact page. Its terms are being prepared as part of the review noted at the top of this page.

We use these providers to run the service:

• Google, through Firebase Authentication: sign-in with Google accounts.
• Stripe: subscription billing, and client invoice payments through each studio’s connected account.
• Modulify: application hosting, file storage and delivery, transactional email and website analytics.
• Cloudflare: database hosting.

These providers may rely on their own sub-processors, such as infrastructure and email delivery services, under their own terms. Optional connections, such as calendars, Slack, task tools or accounting software, receive data only if a studio sets them up, and are then also governed by that provider’s terms.

Our providers may process data in the United States and in other countries. Where data protection law requires it, these transfers rely on safeguards such as the standard contractual clauses in the providers’ terms.

• Workspace content is kept while the workspace exists. When an owner deletes a workspace, its records are deleted, except where the law requires financial records to be kept longer.
• Account data is kept while your account is active.
• Sessions expire after 30 days, and a session that is signed out stops working immediately.
• Rate-limit counters cover short time windows and hold only one-way hashes.
• Our email provider keeps email records for 30 days.
• Contact form messages are kept for as long as needed to handle the request. A fixed period will be set as part of the review.

Depending on where you live, you can ask to access, correct, export or delete your personal data, to restrict or object to how it is processed, and to withdraw consent where processing relies on it. You can also complain to your data protection authority.

• You can update your name and preferences in your profile settings.
• Workspace owners can export their workspace records.
• For anything else, use the contact page. We answer within the time the law requires.

Every request is checked on the server against the workspace, the person’s role and the record itself; sessions are stored only as hashes; payments happen on Stripe-hosted pages; and files are private. The security page lists the controls in place today and what is still awaiting review.

The service is for businesses and is not intended for anyone under 16.

When this policy changes, the dates at the top of this page are updated. For significant changes, workspace owners are told in the product or by email before the change applies.

Questions and requests about this policy go through the contact page.