Privacy Policy

This Privacy Policy describes how Studiflow collects, uses and protects your information when you use our website and services.

What we collect

  • Account information. Name, email address and other details you provide when creating an account or workspace.
  • Onboarding information. Details you share during setup, such as your creative discipline, services, target clients and location preferences.
  • Billing information. Subscription and payment details are handled by Stripe. We do not store complete card numbers.
  • Google account connection. If you choose to connect a Google or Gmail account, we receive OAuth tokens and basic account metadata required to enable email features.
  • Email and conversation data. If you connect Gmail, Studiflow may access email threads and conversation data solely to provide the relationship and outreach workflow features you have requested.
  • Usage and technical information. Standard log data, device and browser information, and error reports to help us maintain and improve the service.

How we use your information

  • Provide, operate and improve the Studiflow service.
  • Create and manage your account and workspace.
  • Process and manage subscriptions through Stripe.
  • Connect permitted third-party services you authorise.
  • Enable relationship tracking, outreach workflow and related productivity features.
  • Maintain security, reliability and customer support.

Gmail and Google data

Connecting a Google or Gmail account is entirely optional and occurs only after you explicitly authorise it. We request only the permissions required to provide the service.

Gmail OAuth tokens are stored securely and encrypted server-side. Studiflow does not sell Gmail data or use it for advertising. Google data is used only to provide the functionality you have requested within Studiflow.

Studiflow's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Payments

Payments are processed by Stripe. Studiflow does not directly store your full card details. Stripe's privacy policy applies to payment processing.

Data sharing

We do not sell your personal information. We may share data with service providers who help us operate the service, such as:

  • Stripe — payment processing
  • Google — Gmail and account integration
  • Supabase — data infrastructure
  • Hosting and infrastructure providers

These providers are bound by contractual obligations to protect your data and use it only for the purposes we specify.

Data retention and deletion

We retain your information for as long as your account is active or as needed to provide the service, comply with legal obligations and resolve disputes. When you delete your account, we will remove or anonymise your personal information in a reasonable timeframe, subject to legal and operational requirements.

You can contact us to request access, correction or deletion of your personal information. We will respond within a reasonable period, subject to verification and any legal constraints.

Security

We use reasonable technical and organisational safeguards to protect your information, including encryption in transit and at rest, access controls and secure hosting environments. No online service can guarantee absolute security.

International processing

Your information may be processed using cloud infrastructure and service providers located outside Australia. We take steps to ensure appropriate safeguards are in place when data is transferred internationally.

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

Contact

For questions or requests about this Privacy Policy, please contact us through your Studiflow account or the support channels available to you.