Privacy Policy

You provide: name, email, phone, studio name, billing address, password (hashed), profile details, support inquiries, and any content you submit.

Automatically collected: IP address, device and browser type, operating system, referring URLs, pages viewed, interaction timestamps, and cookie/identifier data.

Payment data: processed directly by Stripe, Inc. We do not store full payment card numbers. We receive limited tokenized data (card brand, last four digits, expiration, billing zip) from Stripe.

From third parties: authentication data from Google if you use single sign-on; analytics data from analytics providers; fraud-prevention signals from Stripe Radar.

We use information to:

• provide, maintain, and improve the Services;
• process payments, manage subscriptions, and prevent fraud;
• authenticate accounts and secure the platform;
• communicate with you about your account, transactions, support, and product updates;
• send marketing communications you have opted into (you may unsubscribe at any time);
• analyze usage to improve Content and features;
• comply with legal obligations and enforce our Terms.

If you are in the European Economic Area, United Kingdom, or Switzerland, we process personal data on these legal bases:

• Contract — to deliver the Services you purchase;
• Legitimate interests — to secure, improve, and market the Services in a balanced way;
• Consent — for marketing emails and non-essential cookies (revocable at any time);
• Legal obligation — to comply with tax, accounting, and law-enforcement requirements.

We do not sell personal information. We share information only as follows:

• Service providers bound by contractual confidentiality and security obligations — including Stripe (payments), Supabase (database, auth, storage), Vimeo (video hosting), Cloudflare (CDN/security), and email and analytics providers.
• Legal & safety — when required by law, subpoena, or to protect rights, safety, or property of ProStudio OS, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to customary confidentiality.
• With your consent — for any other purpose disclosed to you.

We operate globally and may transfer your personal data outside your country of residence, including to the United States. Where required, we rely on the European Commission’s Standard Contractual Clauses or other lawful transfer mechanisms to protect your data.

We retain personal data only as long as necessary for the purposes described in this Policy, to comply with legal obligations (e.g., tax records for up to 7 years), resolve disputes, and enforce agreements. When data is no longer needed, we delete or anonymize it.

We protect personal data with administrative, technical, and physical safeguards designed to meet industry standards, including TLS encryption in transit, encryption at rest, row-level access controls, hashed passwords, signed URLs for private downloads, webhook signature verification, leaked- password checks, and role-based access for staff. No system is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data (subject to lawful retention exceptions);
• restrict or object to certain processing;
• port your data to another service in a machine-readable format;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@prostudioos.com. We will verify your identity and respond within the timeframe required by applicable law (typically 30 days).

California residents have the right to know what categories of personal information we collect, the purposes of collection, the categories of third parties with whom we share it, and to request deletion or correction. We do not sell personal information and do not “share” it for cross-context behavioral advertising as those terms are defined under the CPRA. You may submit a verifiable consumer request to privacy@prostudioos.com. We will not discriminate against you for exercising your rights.

We use strictly necessary cookies to authenticate sessions and operate the Services. With your consent we may use analytics cookies to understand usage patterns. You can control cookies through your browser settings; disabling necessary cookies may impair functionality.

The Services are not directed to children under 16 and we do not knowingly collect personal information from them. If we learn we have collected such information, we will delete it. If you believe a child has provided us personal data, contact privacy@prostudioos.com.

The Services may link to third-party websites or services we do not control. We are not responsible for their privacy practices. Review their policies before providing personal information.

We may update this Policy from time to time. Material changes will be communicated by email or in-app notice at least thirty (30) days before they take effect. The “Effective Date” at the top reflects the latest version.

For privacy questions or to exercise your rights, contact our privacy team at privacy@prostudioos.com.