Studiologist

Privacy Policy

Last updated: 2026-09-30

1. Who we are

This website is run by the studio named on it (“we”, “us”), using studio-management software. We are the business responsible for the personal information you give us here. This policy covers people who create an account, book a class, or buy something on this site.

Some studios run the software themselves; others use a hosted service run by the software’s maintainers. If we use the hosted service, its operator stores and processes your information only on our behalf, as our service provider, to run this site — never for its own purposes, and never sold or shared. Either way, payments go through our own Stripe account and email through our own email account.

2. Information we collect

  • Account data — your name, email address, and a securely hashed password; for shops, the business name and domain.
  • Order and booking data — items purchased, class enrollments, memberships, studio-visit history, and related records, so shops can fulfill them and you can review them.
  • Additional registrant data — if you book a spot for someone else, the name and email you provide for that guest.
  • Support and contact messages — anything you send through a contact form.

We do notcollect Social Security numbers, government IDs, precise geolocation, biometric data, or other “sensitive” categories, and we do not build advertising profiles or track you across other websites.

3. How we use information

To create and secure your account; to process orders, bookings, memberships, refunds, and waitlists; to send transactional email (receipts, confirmations, reminders, and account notices); to provide support; to prevent fraud and abuse; and to comply with legal, tax, and accounting obligations.

4. Payments (Stripe)

Card payments are processed by Stripe; card numbers go directly to Stripe and never touch our servers. We store only payment references (such as session and charge identifiers) and amounts needed for receipts, fulfillment, and refunds. Stripe processes your data under its own privacy policy.

5. Email and your choices

Transactional email — receipts, booking confirmations, reminders, password resets — is delivered via Resend. Non-essential messages (reminders, follow-ups, class status updates) include a one-click unsubscribe link, and signed-in customers can manage these preferences under Account → Settings. Truly essential messages (for example a receipt or a password reset) are always sent.

6. Cookies

We use a single first-party authentication cookie containing a signed token to keep you logged in. It is strictly necessary, is not used for advertising or cross-site tracking, and expires or is cleared when you log out. Because we set no analytics or advertising cookies, no cookie-consent banner is required.

7. Sharing and service providers

We do not sell or share your personal information, and we do not use it for targeted advertising. We disclose data only to the service providers that help us run this site, and where required by law. They are:

  • Stripe — payment processing.
  • Resend — transactional email delivery.
  • Our website and database hosting providers (for example Vercel and Supabase), which store and serve this site on our behalf.
  • If we use the hosted service, its operator — as our service provider only (see section 1).

8. Data retention

We keep account, order, and booking records while your account is active. After an account is closed we delete or anonymize personal information, except that de-identified financial records are retained as long as tax, accounting, and dispute-resolution law requires (generally up to seven years). Contact messages and operational logs are kept only as long as needed for the purpose they were collected.

9. Your privacy rights

Depending on where you live in the United States, you may have the right to know what personal information we hold, to access a copy of it, to correct it, to delete it, to obtain it in a portable format, and to opt out of the sale or sharing of personal information or of targeted advertising. We honor these requests regardless of your state, and we will not discriminate against you for exercising them. Because we do not sell or share personal information or run targeted advertising, there is nothing to opt out of on that front.

How to exercise your rights: if you have an account, you can download a copy of your data or delete your accountyourself at any time under Account → Settings. You can also contact the studio through its Contact page. We respond within the time required by applicable law (generally within 45 days). You may designate an authorized agent to make a request on your behalf; we may need to verify your identity before acting.

10. Children’s privacy

This site is intended for adults and is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If a class is for a minor, an adult account holder registers on the child’s behalf and is responsible for the information provided. If you believe a child under 13 has given us personal information, contact us and we will delete it.

11. Security

We protect your information with encryption in transit, hashed passwords, encrypted storage of sensitive credentials, and access controls. No system is perfectly secure, but we work to safeguard your data and will notify you and the relevant authorities of a breach as required by law.

12. Changes

We may update this policy; when we do, the “Last updated” date above will change, and we will tell account holders about material changes before they take effect.

13. Contact

Questions about your privacy? Contact the studio through its Contact page.