Privacy Policy

1. Introduction

Studio OS ("we," "our," or "us") operates a design workspace application at studio-os.app and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service.

By using Studio OS, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: When you create an account, we collect your email address and any display name you choose.
• Project data: Design briefs, color palettes, typography choices, task lists, and other content you create within the Service.
• Reference images: Images you upload or save to your projects, including those imported from connected third-party services.
• Communications: If you contact us for support or feedback, we retain the content of that communication.

2.2 Information We Collect Automatically

• Usage data: Pages viewed, features used, time spent, and interaction patterns within the Service.
• Device information: Browser type, operating system, screen resolution, and IP address.
• Log data: Server logs including request times, error logs, and performance metrics.

2.3 Information from Third-Party Services

When you connect third-party services such as Pinterest, Are.na, or Lummi to your Studio OS account, we receive limited data from those services to provide the requested functionality. The specific data we receive depends on your privacy settings on those platforms and the permissions you grant.

• Pinterest: When you authorize Studio OS to access your Pinterest account, we may access your public boards, pins, and associated metadata (titles, descriptions, image URLs) solely to display and import references you select. We do not post to Pinterest on your behalf without your explicit action. We do not store your Pinterest credentials.
• Are.na: When you connect your Are.na account, we access channel data and block content you have selected to import.
• Lummi: We access publicly available imagery through the Lummi API to provide curated inspiration content.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Personalize your experience, including curating daily inspiration based on your saved references
• Process and complete actions you take within the Service (importing references, exporting design specs, etc.)
• Send transactional communications such as account confirmations and important updates
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues, fraud, or abuse
• Comply with legal obligations

We do not use your content (project data, design briefs, reference images) to train machine learning models without your explicit consent.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

• Service providers: We work with third-party vendors who assist in operating the Service (e.g., cloud hosting via Supabase, AI inference via OpenAI). These providers are contractually bound to keep your data confidential and may only use it to provide services to us.
• Legal requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
• With your consent: We may share your information with third parties when you have given us explicit consent to do so.

5. Pinterest API Usage

Studio OS integrates with the Pinterest API to allow you to import your Pinterest boards and pins as reference material within your design projects. Our use of Pinterest API data is governed by Pinterest's API terms of service and Developer Policy.

• We only request Pinterest permissions necessary to provide the import functionality you request.
• Pinterest data is used solely to display and import content you have explicitly selected.
• We do not use Pinterest data for advertising, profiling, or any purpose unrelated to the import feature.
• You can revoke Studio OS access to your Pinterest account at any time through your Pinterest account settings.
• Upon revocation, we will stop accessing new Pinterest data. You may request deletion of previously imported Pinterest content by contacting us at privacy@studio-os.app.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you close your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, tax, or accounting purposes.

Content you have created in Studio OS (projects, references, briefs) will be deleted within 30 days of account closure unless you export it beforehand.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information (subject to legal requirements).
• Portability: Request a machine-readable export of your data.
• Objection: Object to certain processing of your data.
• Opt-out of marketing: You can opt out of promotional emails by clicking "unsubscribe" in any such email or by contacting us.

To exercise any of these rights, please contact us at privacy@studio-os.app. We will respond within 30 days.

8. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS), encryption of data at rest, and restricted access controls.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

9. Cookies and Tracking

Studio OS uses cookies and similar tracking technologies to maintain your session, remember your preferences (such as light/dark mode), and analyze usage patterns.

• Essential cookies: Required for the Service to function (authentication sessions, CSRF protection). These cannot be disabled.
• Preference cookies: Store your settings such as theme preference and language.
• Analytics cookies: Help us understand how users interact with the Service. You can opt out of analytics tracking by contacting us.

We do not use third-party advertising cookies or sell your browsing data to advertisers.

10. Children's Privacy

Studio OS is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete it. If you believe we may have collected information from a child under 13, please contact us at privacy@studio-os.app.

11. International Data Transfers

Studio OS is operated in the United States. If you access our Service from outside the United States, your information may be transferred to and processed in the United States or other countries. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of any sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@studio-os.app.

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and applicable local laws. Our legal bases for processing your personal data include: performance of a contract (providing the Service), legitimate interests (improving the Service), compliance with legal obligations, and your consent where we have requested it.

If you have concerns about our data processing that we have not addressed, you have the right to lodge a complaint with your local data protection authority.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will also notify you by email. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: