Studiologist

Data Processing Addendum

Version: 2026-07-17

This Addendum forms part of the Terms of Service between the platform operator (operating as Studiologist, the “Processor”) and each Shop Owner (the “Controller”) and applies whenever the platform processes personal information about the Shop Owner’s End Customers on the Shop Owner’s behalf.

1. Roles

For End-Customer personal information, the Shop Owner is the business responsible for it (controller / the “business” under CCPA/CPRA) and the platform is a service provider / processor acting only on the Shop Owner’s documented instructions — namely, to operate the storefront, scheduling, payments, and email features.

2. Our commitments

  • Process personal information only to provide the Service, and not sell or share it, nor use it for our own commercial purposes or targeted advertising.
  • Keep personal information confidential and require the same of our personnel and sub-processors.
  • Apply reasonable technical and organizational security measures (encryption in transit, hashed passwords, encrypted secrets, access controls, per-shop tenant isolation).
  • Assist the Shop Owner in responding to End-Customer privacy requests (access, deletion, correction, portability), including via the platform’s built-in export and account-deletion tools.
  • Notify the Shop Owner without undue delay after becoming aware of a personal-data breach affecting their End Customers.
  • Delete or return End-Customer personal information after the shop closes, except records we must retain by law (see the Privacy Policy retention section).

3. Sub-processors

The platform uses the following sub-processors to deliver the Service:

  • Stripe — payment processing.
  • Resend — transactional email delivery.
  • Vercel — application hosting.
  • Supabase — database hosting.

We will give notice of a material change to this list so the Shop Owner has an opportunity to object.

4. International transfers

The Service and its sub-processors operate primarily in the United States. Where personal information is transferred, we and our sub-processors apply appropriate safeguards as required by applicable law.

5. Contact

Questions about this Addendum can be directed to the platform operator at hello@studiologist.com.