Privacy Policy

1. Introduction

StudioFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our yoga and fitness studio management platform, including our website, mobile applications, and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, phone number, and business details when you register for an account.
• Studio Information: Studio name, location(s), class schedules, pricing, staff details, and other business information.
• Client Data: Information about your studio's clients that you input into the platform, including names, contact information, membership details, attendance records, and payment history.
• Payment Information: Billing address and payment method details processed through our secure payment partners (Stripe).
• Communications: Any correspondence you have with us, including support requests and feedback.

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Usage Data: Information about how you interact with the Service, including pages viewed, features used, and actions taken.
• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity and store certain information.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse
• Personalize and improve your experience
• Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf, such as payment processing (Stripe), email delivery, and hosting (Vercel, Supabase).
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• Legal Requirements: If required by law or in response to valid legal process.
• Protection of Rights: To protect our rights, privacy, safety, or property.
• With Your Consent: When you have given us permission to share your information.

We do not sell your personal information to third parties.

5. Data Processor Role

When you use StudioFlow to manage your studio's client data, we act as a "data processor" on your behalf. You (the studio owner/operator) are the "data controller" and are responsible for:

• Obtaining appropriate consent from your clients to collect and process their data
• Ensuring you have a lawful basis for processing client data
• Responding to data subject access requests from your clients
• Complying with applicable data protection laws in your jurisdiction

We will process client data only in accordance with your instructions and the terms of our agreement with you.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication requirements
• Secure infrastructure hosted on enterprise-grade cloud platforms
• Employee training on data protection and security practices

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you with our Service. We may also retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records for legitimate purposes

When you close your account, we will delete or anonymize your data within 90 days, except where retention is required by law.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal requirements.
• Portability: Request a machine-readable copy of your data.
• Opt-Out: Unsubscribe from marketing communications at any time.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, please contact us at privacy@studioflow.yoga.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your information when transferred internationally.

10. Children's Privacy

Our Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

11. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: