01 · The relationship
Who this policy applies to.
This policy applies to StudioFold, its website, dashboards, client-facing portals, document tools and related services (together, the “Service”). It applies to studio owners, administrators, coordinators, team members, clients and visitors.
When a studio uses the Service to upload or manage information about its clients, the studio may act as the data controller or business responsible for that information. In those cases, StudioFold generally processes that information on the studio’s instructions as a service provider or data processor.
02 · The information
What we collect.
We collect information needed to create accounts, operate studio workspaces, deliver documents and keep the Service secure.
Account and workspace information
- Name, email address, WhatsApp number, phone number and login or verification details.
- Studio name, logo, business descriptor, address, contact details and branding preferences.
- Subscription, plan, billing and support information.
Studio and client information
- Client or couple names, contact details, event dates, venues, locations, event types and project notes.
- Quotation, contract, invoice, costing, payment-status, crew-assignment and delivery information.
- Messages, inquiry details, reminders, responses and other content entered into a workspace.
Content and files
We process files and content you upload or generate, including logos, photographs, background images, PDF documents, custom fonts, quotation content, contract content and invoice content. Please make sure you have permission to upload personal information or images relating to another person.
Technical and usage information
We may receive device, browser, IP address, approximate location, log, diagnostic, session and interaction information needed to provide, secure and improve the Service. See the Cookies section below for more detail.
03 · The purpose
How we use information.
- Provide, personalize and maintain the Service, including dashboards, project workspaces, calendars and document generation.
- Authenticate users, send WhatsApp OTPs or other verification messages, prevent misuse and protect accounts.
- Generate, save, preview, export and deliver quotations, contracts, invoices and related PDFs.
- Send service communications such as sign-in codes, confirmations, security alerts, reminders and support responses.
- Process subscriptions, payments, refunds and account entitlements through the applicable payment provider.
- Provide customer support, troubleshoot issues, monitor reliability and improve features.
- Comply with applicable law, enforce our agreements and protect the rights, safety and property of users, clients and StudioFold.
Where required, we rely on consent, performance of a contract, legitimate interests, compliance with legal obligations or another lawful basis available in the jurisdiction that applies to you.
04 · Studio responsibility
Customer data in studio workspaces.
Studios decide what client and event information to enter into the Service and who can access it. Studios are responsible for providing appropriate notices, obtaining permissions where required, choosing the right workspace access settings and responding to requests from their clients.
We may use workspace data only to provide, secure, support and improve the Service, or as otherwise instructed by the studio or permitted by law. We do not sell uploaded customer data, use it for third-party advertising, or review it for unrelated business purposes.
06 · A clear boundary
Who can access workspace data.
Studio workspace data is intended to be accessible through the Service only to the studio’s authorized users and the client-facing recipients chosen by that studio. Workspace-level permissions are designed to keep one studio’s records separate from another studio’s records.
StudioFold does not routinely browse or review client names, quotations, contracts, invoices or financial records. Because StudioFold operates the Service and its secure infrastructure, a small number of specifically authorized personnel or service providers may have limited technical access when necessary for security, fraud prevention, support requested by a studio, billing, legal compliance, incident investigation or service operation. Such access is restricted to the purpose, scope and period reasonably needed and is subject to confidentiality and security controls.
StudioFold personnel do not receive access merely because a workspace exists. We do not sell or disclose workspace data for unrelated commercial purposes. Studios remain responsible for inviting the right users and managing their own workspace permissions.
05 · The partners
When information is shared.
We may share information with carefully selected providers that help us run the Service, such as hosting and database providers, authentication and OTP providers, email delivery providers, WhatsApp Business or messaging providers, payment processors, analytics or error-monitoring providers, storage providers and professional advisers. These providers may have technical access only where needed to perform their service and are required to protect the information.
Those providers may process information only as needed to provide their services to us and subject to appropriate confidentiality and security obligations. We may also disclose information when required by law, to respond to lawful requests, to protect safety and rights, or as part of a merger, acquisition, financing or sale of assets.
We do not sell personal information or share it for third-party behavioural advertising.
07 · Communications
WhatsApp, email and other messages.
If you use WhatsApp sign-in or choose WhatsApp for studio announcements, reminders or client communications, we process the phone number, message content, delivery status and related metadata needed to send those messages. WhatsApp and its providers may process information under their own terms and privacy policy.
We may send essential service messages even when you opt out of promotional messages. You can stop non-essential communications using the unsubscribe or opt-out method in the message, through your workspace settings where available, or by contacting us.
We do not guarantee delivery, availability or security of third-party communication channels.
08 · The browser
Cookies and local storage.
We use cookies, local storage and similar technologies for authentication, session management, preferences, security, document settings and essential functionality. We may also use limited diagnostics or performance technologies to understand failures and improve reliability.
You can control cookies through your browser settings. Disabling essential storage may prevent sign-in or parts of the Service from working. We do not use cookies for third-party advertising.
09 · The record
Retention and deletion.
We retain account, workspace, document, communication and technical information for as long as needed to provide the Service, maintain business records, resolve disputes, enforce agreements, prevent abuse and meet legal, tax or accounting obligations.
Studios can request deletion of their account or workspace information by contacting us at [PRIVACY EMAIL]. Some information may remain where required by law, needed to establish or defend legal claims, or retained in secure backups for a limited period before it is overwritten.
When a studio shares a client’s information with us, the studio may need to handle the client’s deletion or access request. We will reasonably assist the studio where our role and applicable law require it.
10 · Your choices
Your privacy rights.
Depending on where you live, you may have rights to access, correct, update, delete, restrict or object to processing of your personal information, withdraw consent, receive a portable copy, or complain to a data-protection authority.
To make a request, contact [PRIVACY EMAIL] with enough information for us to understand and verify the request. If the information belongs to a studio workspace, we may direct you to the relevant studio first. We will not discriminate against you for exercising a privacy right.
We may need to verify identity, ask for clarification, apply lawful exemptions and charge a reasonable fee where law permits. We aim to respond within the period required by applicable law.
11 · The safeguard
Security and international transfers.
We use reasonable technical and organizational safeguards such as access controls, authentication, scoped workspace access, encrypted connections, provider security controls, backups and monitoring. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.
Information may be processed in countries different from the country where you live. Where required, we use appropriate safeguards for cross-border transfers and require service providers to protect information consistently with this policy and applicable law.
If you believe your account or information has been compromised, contact [SECURITY EMAIL] promptly and change your password or verification credentials where possible.
12 · Age limits
Children’s information.
The Service is intended for adults and businesses. It is not directed to children under [MINIMUM AGE]. If you believe a child has provided personal information directly to us, contact [PRIVACY EMAIL] so we can review and delete it where appropriate.
13 · The policy
Changes to this policy.
We may update this policy as the Service, providers or legal requirements change. We will publish the revised version here and update the “Last updated” date. If a change is material, we will provide additional notice where required. Your continued use of the Service after the effective date means the updated policy applies to future use.
14 · A direct line
Contact us.
[LEGAL ENTITY NAME]
[BUSINESS ADDRESS]
[CITY, STATE / REGION, POSTAL CODE]
[COUNTRY]
Privacy email: [PRIVACY EMAIL]
Data protection contact: [DPO OR PRIVACY CONTACT, IF APPLICABLE]
For a request relating to client data inside a studio workspace, please also contact the relevant studio owner or administrator.