Studiologist

Privacy Policy

Last updated: 2026-07-17

1. Who this covers

This policy describes how the platform handles personal information for two groups: Shop Owners (studios that register a shop) and End Customers (people who create accounts or make purchases on a shop’s storefront). For an End Customer’s personal information, the Shop Owner is the business responsible for it (the “controller”) and the platform acts as their service provider (“processor”), handling data only to run the storefront on their behalf. Each Shop Owner remains independently responsible for their own storefront’s policies and legal obligations toward their customers.

2. Information we collect

  • Account data — your name, email address, and a securely hashed password; for shops, the business name and domain.
  • Order and booking data — items purchased, class enrollments, memberships, studio-visit history, and related records, so shops can fulfill them and you can review them.
  • Additional registrant data — if you book a spot for someone else, the name and email you provide for that guest.
  • Support and contact messages — anything you send through a contact form.

We do notcollect Social Security numbers, government IDs, precise geolocation, biometric data, or other “sensitive” categories, and we do not build advertising profiles or track you across other websites.

3. How we use information

To create and secure your account; to process orders, bookings, memberships, refunds, and waitlists; to send transactional email (receipts, confirmations, reminders, and account notices); to provide support; to prevent fraud and abuse; and to comply with legal, tax, and accounting obligations.

4. Payments (Stripe)

Card payments are processed by Stripe; card numbers go directly to Stripe and never touch our servers. We store only payment references (such as session and charge identifiers) and amounts needed for receipts, fulfillment, and refunds. Stripe processes your data under its own privacy policy.

5. Email and your choices

Transactional email — receipts, booking confirmations, reminders, password resets — is delivered via Resend. Non-essential messages (reminders, follow-ups, class status updates) include a one-click unsubscribe link, and signed-in customers can manage these preferences under Account → Settings. Truly essential messages (for example a receipt or a password reset) are always sent.

6. Cookies

We use a single first-party authentication cookie containing a signed token to keep you logged in. It is strictly necessary, is not used for advertising or cross-site tracking, and expires or is cleared when you log out. Because we set no analytics or advertising cookies, no cookie-consent banner is required.

7. Sharing and service providers

We do not sell or shareyour personal information, and we do not use it for targeted advertising. We disclose data only to the service providers that operate the platform, to the relevant Shop Owner (who sees their own customers’ orders and enrollments), and where required by law. Our sub-processors are:

  • Stripe — payment processing.
  • Resend — transactional email delivery.
  • Vercel — application hosting.
  • Supabase — database hosting.

8. Data retention

We keep account, order, and booking records while the associated account or shop is active. After an account is closed we delete or anonymize personal information, except that de-identified financial records are retained as long as tax, accounting, and dispute-resolution law requires (generally up to seven years). Contact messages and operational logs are kept only as long as needed for the purpose they were collected.

9. Your privacy rights

Depending on where you live in the United States, you may have the right to know what personal information we hold, to access a copy of it, to correct it, to delete it, to obtain it in a portable format, and to opt out of the sale or sharing of personal information or of targeted advertising. We honor these requests regardless of your state, and we will not discriminate against you for exercising them. Because we do not sell or share personal information or run targeted advertising, there is nothing to opt out of on that front.

How to exercise your rights: if you have an account, you can download a copy of your data or delete your accountyourself at any time under Account → Settings. You can also contact the studio you transacted with through its Contact page, and it will act on your request (and direct it to the platform where needed). For platform-level requests, reach the operator at hello@studiologist.com. We respond within the time required by applicable law (generally within 45 days). You may designate an authorized agent to make a request on your behalf; we may need to verify your identity before acting.

10. Children’s privacy

The platform is intended for adults and is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If a class is for a minor, an adult account holder registers on the child’s behalf and is responsible for the information provided. If you believe a child under 13 has given us personal information, contact the studio or the platform and we will delete it.

11. Security

We protect your information with encryption in transit, hashed passwords, encrypted storage of sensitive credentials, access controls, and tenant isolation between shops. No system is perfectly secure, but we work to safeguard your data and will notify you and the relevant authorities of a breach as required by law.

12. Changes

We may update this policy; material changes will be announced to Shop Owners by email or in-product notice before they take effect, and the “Last updated” date above will change.

13. Contact

Questions about your privacy? Contact the studio you transacted with through its Contact page, or reach the platform operator at hello@studiologist.com.