StudioKontrol — Privacy Policy

Last updated: August 1, 2026 Effective date: August 1, 2026

This Privacy Policy explains how StudioKontrol, LLC ("StudioKontrol," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use the StudioKontrol website, applications, and services (the "Service"). It also describes your privacy rights, including rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA").

By using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

1. Who We Are

StudioKontrol, LLC is a Florida limited liability company that provides a platform for recording studios, producers, and creative professionals to manage projects, scheduling, clients, artists, and files.

Two roles for personal data:

• For information about our own account holders and website visitors, we act as a controller (we decide how and why it is processed).
• For personal information that a studio customer uploads about their clients, artists, or collaborators, we generally act as a processor / service provider on that customer's behalf. In that case, the customer is responsible for that data, and our Data Processing Addendum governs how we handle it.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, password, and, for paid plans, billing contact details.
• Profile and business information: studio name, role, and preferences.
• Customer Content: projects, schedules, notes, files, and data about your clients or artists that you choose to store in the Service.
• Communications: messages you send to us (for example, support requests to legal [at] studiokontrol [dot] com).

2.2 Payment Information

Payments are handled by Stripe, Inc. We do not store full card numbers on our servers. Stripe collects and processes your payment details under its own privacy policy. We receive limited information such as the last four digits, card brand, and transaction status.

2.3 Information Collected Automatically

• Usage data: pages viewed, features used, actions taken, and timestamps.
• Device and log data: IP address, browser type, operating system, and device identifiers.
• Cookies and similar technologies: as described in our Cookie Policy.

2.4 Information From Third Parties

If you sign in through a third-party authentication provider or connect an integration, we may receive basic account information from that provider as authorized by you.

We do not knowingly collect sensitive personal information beyond what is necessary to provide the Service, and we do not sell personal information (see Section 7).

3. How We Use Information

We use personal information to:

• Provide, operate, secure, and maintain the Service;
• Create and manage your account and authenticate you;
• Process payments and manage subscriptions (via Stripe);
• Send transactional and administrative messages (via our email provider);
• Provide customer support and respond to your requests;
• Monitor, analyze, and improve the Service, including troubleshooting and developing new features;
• Detect, prevent, and address fraud, abuse, and security issues; and
• Comply with legal obligations and enforce our Terms of Service.

We process personal information because it is necessary to perform our contract with you, to pursue our legitimate business interests in operating and improving the Service, to comply with law, or with your consent where required.

4. How We Share Information

We share personal information only as described here:

• Service providers (subprocessors). We use trusted vendors to run the Service, including:
  • Stripe, Inc. — payment processing.
  • Supabase — database, authentication, and file storage hosting.
  • Resend — transactional email delivery. These providers may process personal information only to provide services to us and are bound by contractual confidentiality and data-protection obligations. A current list of subprocessors is available on request at legal [at] studiokontrol [dot] com.
• Studio customers. If you are an artist, client, or collaborator whose data was entered by a studio, that studio controls your information and can access it.
• Legal and safety. We may disclose information to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, safety, and property of StudioKontrol, our users, or the public.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

5. Data Retention

We keep personal information for as long as your account is active and as needed to provide the Service. After account closure, we delete or de-identify personal information within a reasonable period, except where we must retain it to comply with legal, tax, accounting, or security obligations, or to resolve disputes and enforce our agreements. Backups are retained for a limited period and then overwritten.

6. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and reliance on reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your password confidential and for maintaining your own backups of important Customer Content.

7. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights regarding personal information we hold as a controller:

• Right to know / access: request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
• Right to delete: request deletion of personal information we collected from you, subject to legal exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of sale/sharing: we do not sell or share personal information for cross-context behavioral advertising, so no opt-out is necessary; if this ever changes, we will provide a "Do Not Sell or Share My Personal Information" mechanism.
• Right to limit use of sensitive personal information: we use sensitive information only as needed to provide the Service.
• Right to non-discrimination: we will not discriminate against you for exercising your rights.

How to exercise your rights. Email legal [at] studiokontrol [dot] com with your request. We will verify your identity before responding. You may use an authorized agent, subject to verification. We will respond within the timeframes required by law (generally 45 days, extendable once).

Categories of Personal Information (CCPA disclosure)

In the past 12 months we may have collected: identifiers (name, email, IP address); customer records (billing contact); commercial information (subscription and transaction history); internet activity (usage and log data); and content you upload. We collect this from you directly, automatically through your use of the Service, and from our service providers. We use and disclose it for the business purposes described in Sections 3 and 4.

8. Other U.S. State Privacy Rights

If you reside in a U.S. state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Utah, or Texas), you may have similar rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of certain processing. To exercise these rights, contact legal [at] studiokontrol [dot] com.

9. International Users

The Service is operated from the United States. If you access it from outside the U.S., your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. If you are in the EEA, UK, or a Latin American country with data-protection laws, additional rights may apply; contact us and we will address your request in accordance with applicable law.

10. Children's Privacy

The Service is intended only for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, contact legal [at] studiokontrol [dot] com.

11. Third-Party Links and Services

The Service may link to or integrate third-party websites and services that we do not control. This Policy does not apply to them. Review their privacy policies separately.

12. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or through the Service and update the "Last updated" date above. Your continued use after the changes take effect constitutes acceptance.

13. Contact Us

StudioKontrol, LLC 1500 NW 79th Ave, Doral, FL 33126, USA Email: legal [at] studiokontrol [dot] com