Privacy Policy

Last updated: January 27, 2026

This Privacy Policy explains how StudioDeck ("we," "us," "our") collects, uses, and protects information when you use our platform, website, and services (the "Service").

1. Information We Collect

1.1 From Studios (business owners):

• Business name, address, phone, email
• Owner name and login credentials
• Payment and subscription information (processed via Square; we do not store card numbers)
• Service menu, pricing, staff details, business hours
• Uploaded images (logo, staff photos)

1.2 From Clients:

• Name, phone, email
• Booking history and preferences at Studios they book with
• Payment information (processed via Square; we do not store card numbers)
• Reviews and uploaded photos

1.3 Automatically collected:

• Device and browser information
• IP address and general location
• Pages viewed and actions taken on the Service (basic analytics)
• Cookies used for authentication and session management

2. How We Use Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process bookings and payments
• Send appointment confirmations, reminders, and notifications
• Communicate service updates and support responses
• Detect and prevent abuse or fraud
• Comply with legal obligations

We do not sell your personal information to third parties.

3. Sharing Information

We share information only when necessary to operate the Service or when required by law:

• With Studios: When a Client books at a Studio, that Studio receives the Client's booking details (name, phone, email, service, time). This is essential to fulfilling the booking.
• With Square: Payment information is transmitted to Square Inc. to process transactions. Square's privacy policy governs their handling of this data.
• With service providers: We use Supabase (data storage), Resend (email), and Vercel (hosting). These providers process data on our behalf under confidentiality agreements.
• For legal reasons: We may disclose information if required by law, court order, or to protect rights, safety, or property.

We do not share Client information with other Studios beyond what's needed for the specific booking.

4. Data Storage and Security

Your data is stored on Supabase's infrastructure (hosted on Amazon Web Services). We use industry-standard security practices including encrypted connections (HTTPS), role-based access controls, and password hashing. No system is 100% secure, but we take reasonable steps to protect your data.

5. Your Rights and Choices

You can:

• Access and update your profile information from your account settings.
• Request a copy of your data by emailing support@studiodeck.shop.
• Request deletion of your account and associated data by emailing support@studiodeck.shop. We'll respond within 30 days.
• Unsubscribe from marketing emails via the link in the email.

Transactional emails (booking confirmations, reminders, receipts) are essential to the Service and cannot be unsubscribed from while your account is active.

6. Cookies

We use cookies to keep you signed in and remember your preferences. You can disable cookies in your browser, but doing so may affect Service functionality.

7. Children's Privacy

StudioDeck is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn we have, we will delete it. Studios must ensure their Clients meet age requirements under applicable law.

8. International Users

StudioDeck is operated from the United States. If you use the Service from outside the U.S., your information may be transferred to and stored in the U.S. Where possible, we comply with data protection standards that apply to your jurisdiction, but you should be aware of this transfer before using the Service.

For California residents: You have specific rights under the CCPA (California Consumer Privacy Act), including the right to know what personal information we collect, request deletion, and opt out of the "sale" of your data. As stated, we do not sell personal information. Contact support@studiodeck.shop to exercise your rights.

9. Retention

We retain your data for as long as your account is active. After account deletion, we retain some information for legal, tax, and fraud-prevention purposes (typically up to 7 years for financial records). Anonymized or aggregated data may be kept indefinitely.

10. Changes to This Policy

We may update this Policy occasionally. Material changes will be communicated by email or a notice on the Service. Continued use after changes means you accept the updated Policy.

11. Contact

For privacy questions or to exercise your rights, email support@studiodeck.shop.