1. Introduction
Boyan Georgiev, operating as Studioscope ("we," "our," or "us"), operates the Studioscope platform available at studioscope.app (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Full name and email address
- Company name and job title (if applicable)
- Password (stored in hashed form)
- Billing information (processed by our payment provider, Stripe)
- Profile picture and preferences
2.2 User-Generated Content
We store content you create, upload, or submit through the Service, including:
- Project files, documents, photos, and videos
- Comments, annotations, and chat messages
- File attachments and uploads
- Project and task data
2.3 Usage Data
We automatically collect:
- Application Logs: Feature usage, actions performed, errors encountered
- Device Information: Browser type, operating system, screen resolution, device type
- Network Information: IP address, approximate location (city/country level)
- Session Data: Login times, session duration, pages/features accessed
- Performance Data: Load times, crashes, and diagnostic information
2.4 Information from Third Parties
We may receive information from:
- Authentication Providers: If you sign in via Google or other OAuth providers
- Payment Processors: Transaction status and billing details (we do not store full credit card numbers)
- Website analytics: Aggregate information about visits to our public marketing pages
3. How We Use Your Information
We use your personal data for the following purposes:
- To provide and maintain the Service — operating the platform, authenticating users, and delivering features (legal basis: contractual necessity)
- To process payments and subscriptions — billing, invoicing, and payment processing (legal basis: contractual necessity)
- To send transactional communications — account notifications, password resets, project updates (legal basis: contractual necessity)
- To improve the Service — analyzing usage patterns to enhance features and user experience (legal basis: legitimate interest)
- To detect and prevent abuse — fraud prevention, security monitoring, and enforcing our Terms of Service (legal basis: legitimate interest)
- To comply with legal obligations — responding to lawful requests, maintaining records (legal basis: legal obligation)
We do not sell your personal information to third parties. We do not use your data for targeted advertising.
4. Data Sharing and Disclosure
We may share your information in the following circumstances:
- With your team or organization: If you use a studio/organization plan, administrators can access usage data and manage accounts within your organization.
- With service providers: We engage third-party companies to facilitate the Service. These include:
- Vercel (application hosting)
- Supabase (database, authentication, file storage)
- Stripe (payment processing)
- Cloudflare (video streaming)
- Resend (transactional email)
- Vercel Web Analytics and Speed Insights (public-site analytics and performance)
- For legal compliance: When required by law, subpoena, or court order.
- During business transfers: In connection with a merger, acquisition, or asset sale (you will be notified).
Each third-party service provider has its own privacy policy governing the use of your information.
5. Data Storage and Security
5.1 Infrastructure
We use specialist service providers to host and operate the Service, including Vercel, Supabase, Stripe, Cloudflare and Resend. Depending on the service and your location, these providers may process data in the United States and other countries.
5.2 Security Measures
We use technical and organisational measures designed to protect personal information, including encrypted connections, access controls and security monitoring. No system can guarantee absolute security.
- Encrypted connections where personal information is transmitted
- Access controls for the Service and its supporting systems
- Security monitoring and incident-response procedures
5.3 Data Breach Response
In the event of a data breach that affects your personal information, we will assess the incident and notify the relevant authority and affected individuals where required by applicable law. Where notification is required, we will provide information about the incident and the steps we are taking to address it.
6. Data Retention
We retain your personal data only for as long as necessary:
- Account data: Duration of account + 30 days after deletion
- User-generated content: Duration of account + 30 days after deletion
- Usage logs: 12 months
- Payment records: 7 years (legal requirement)
- Support tickets: 3 years
After account deletion, we remove or anonymize your data within 30 days, except where retention is required by law.
7. Your Rights
7.1 All Users
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Delete your account and associated data
- Export: Download your data in a machine-readable format
7.2 GDPR Rights (EEA/UK Residents)
If you are located in the European Economic Area or the United Kingdom, you have additional rights:
- Right to restrict processing
- Right to object to processing based on legitimate interests
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with your local data protection authority
We have not appointed a statutory Data Protection Officer. For privacy questions or to exercise your rights, contact us at privacy@studioscope.app.
If you are in the UK, you can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
7.3 CCPA Rights (California Residents)
- Right to know what personal information is collected and how it is used
- Right to delete personal information
- Right to opt out of the sale of personal information (we do not sell data)
- Right to non-discrimination for exercising your rights
To exercise any of these rights, contact us at privacy@studioscope.app or use the account settings in the application.
8. International Data Transfers
We may transfer personal information to countries outside the UK or EEA when our service providers process data there. Where transfer rules apply, we use a transfer mechanism permitted by applicable law and assess any additional safeguards that may be needed.
- An adequacy decision, where one applies
- Appropriate contractual safeguards, such as the UK IDTA or UK Addendum to the EU Standard Contractual Clauses, where needed
9. Children's Privacy
The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal data, please contact us at privacy@studioscope.app and we will take steps to delete that information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service at least 30 days before the changes take effect. We encourage you to review this Privacy Policy periodically.
11. Contact Us
Studioscope is operated by Boyan Georgiev, a sole trader based in London, England. For privacy-related enquiries:
- Email: privacy@studioscope.app
- Address: London, United Kingdom