Your data, and your clients' data.

StudioFront is an all-in-one studio management platform, operated by AI Founder OS LLC. When this policy says “we,” “us,” or “StudioFront,” it means AI Founder OS LLC.

For any privacy question or request, email us at support@studiofronthq.com.

This distinction matters. It means your clients' personal information belongs to your studio, not to us. We process it only to run the features you use, and only following your instructions. If one of your clients asks us to access or delete their information, we will direct them to you (the studio that controls that data) and help you respond.

Your studio account (we are the controller)

• Account & identity: your name, email address, and how you sign in. StudioFront uses passwordless sign-in — a magic link or a six-digit code sent to your email, or Google sign-in. We store the sign-in records that keep you logged in, not a password.
• Studio & business details: your studio name, page address, branding, packages, testimonials, and settings you enter to run your booking page and back office.
• Billing identity: if you subscribe, we store a Stripe customer reference and your plan and subscription status. Card details are handled by Stripe — we never see or store full card numbers.
• Mobile notifications: if you use the StudioFront mobile app, we store a device token so we can send you push notifications (for example, a new inquiry).

Client data you enter (we are the processor)

When you use StudioFront, you add information about your own clients and prospects. You control this data; we store and process it to provide the service. It can include:

• Clients & contacts: names, email addresses, phone numbers, and any notes you add.
• Leads & inquiries: the details submitted through your public booking form — name, email, phone, event type and date, location, budget, and message.
• Contracts & e-signatures: contract contents, and when a client signs, their typed/drawn signature, signer name and email, and — for a valid audit trail — the signing timestamp, consent record, IP address, and browser user-agent.
• Invoices & payments: invoice line items, amounts, and payment records (including the card brand and last four digits that Stripe returns — never the full card number).
• Proposals & bookings: the proposals you send and the events on your calendar.
• Galleries: the photos and videos you upload to deliver to clients, plus gallery view, favorite, and download activity.

Collected automatically

• Service logs: like most web apps, our hosting provider records basic request and diagnostic logs (such as IP address and timestamps) needed to run and secure the service.
• Gallery analytics (first-party): we count gallery views and downloads using a first-party session identifier stored in a cookie. We store this as a one-way hash, not a raw identifier, and we skip known bots.
• Spam / abuse protection:for public forms we store a one-way hash of the sender's IP address (not the raw IP) to rate-limit submissions.
• Error diagnostics: if error monitoring is enabled, we collect crash and error reports to fix bugs. These are configured to scrub personal information (emails, tokens, cookies) before they are sent.
• Marketing-inquiry attribution:our marketing site's inquiry form may record advertising click identifiers and send hashed contact details to Meta to measure ad performance (see Advertising & the inquiry funnel). This applies to the public marketing funnel, not the StudioFront app you work in.

StudioFront uses a small number of cookies, and only the ones needed to make the product work. We do not use advertising or cross-site tracking cookies in the app.

• Sign-in session (essential): keeps you logged in to your studio account.
• Theme preference (functional): remembers your light / dark / system appearance choice.
• Gallery cookies (functional): on public gallery pages, first-party cookies remember an anonymous visitor session (for view and download counts), which photos a visitor favorited, and whether a password-protected gallery has been unlocked for that session.

When a client pays by card, they are sent to Stripe's own checkout pages; any cookies there are set by Stripe on Stripe's domains, not by us. Note that our separate marketing website may use an advertising pixel; that is described below.

We do not sell your personal information, and we do not share it with third parties for their own marketing. We use a small set of trusted service providers (“processors”) to run StudioFront. Each receives only what it needs:

• Neon — our database host (United States). Stores the application data described above.
• Cloudflare (R2 storage, Images, and Stream) — stores and delivers the photos and videos you upload.
• Stripe — payment processing. This covers both the card deposits your clients pay you (through Stripe Connect, directly into your own Stripe account) and, if you subscribe, our billing of your StudioFront subscription.
• Postmark— sends transactional email (sign-in codes, inquiry auto-replies, invoice and contract delivery). Receives the recipient's email address and the message content.
• Vercel — application hosting (United States). Processes request traffic and server logs.
• Google — only if you choose to sign in with Google, to verify your identity.
• Expo — delivers push notifications to the StudioFront mobile app, if you use it.
• Calendly — if you connect it, we receive the invitee email and scheduled time when a prospect books a call.
• Sentry — error monitoring, when enabled, with personal information scrubbed before reports are stored.
• Meta — for advertising measurement on our marketing inquiry funnel only (see below).

We may also disclose information if required by law, to protect our rights or users' safety, or as part of a business transfer (such as a merger or acquisition), in which case we will honor this policy.

Our public marketing website includes an inquiry form for prospective photography/videography clients. To measure the performance of our own advertising, that funnel may store advertising click identifiers (from Google and Meta) with the inquiry, and send a server-side conversion event to Meta. The contact details in that event (such as email, phone, and name) are one-way hashed before they are sent; the visitor's IP address and browser user-agent are also included, as Meta requires.

This advertising measurement applies to the marketing inquiry funnel. The StudioFront application you log into to manage your studio does not run advertising or analytics trackers.

We keep your account and studio data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, and operational needs.

• Export anytime: you can download your studio data (clients, leads, bookings, invoices, line items, payments, and gallery and contract records) as CSV files from your Settings at any time.
• Shared links expire: the links you share with clients — galleries, invoices, contracts, and client portals — expire after a set period, after which they can no longer be opened.
• Deletion by request: we do not currently offer one-click account deletion. To delete your account and its data, contact us at support@studiofronthq.com, and we will remove it. Some information may be retained where the law requires it, or in routine backups for a limited time before those backups cycle out.

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise any of these, email support@studiofronthq.com. You can also export your data yourself from Settings at any time.

If you are a client of a studio that uses StudioFront: the studio controls your information. Please contact the studio directly to access or delete it. We will support the studio in handling your request.

We will not discriminate against you for exercising any of these rights.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past twelve months.

We take reasonable measures to protect personal information:

• Data is encrypted in transit using TLS/HTTPS.
• Our database and file storage run on managed, access-controlled infrastructure (Neon and Cloudflare).
• Access to studio data is scoped per studio, and the links you share are protected by hashed, expiring tokens.
• Error reports are configured to strip personal information before storage.

No system is perfectly secure, but we work to protect your information and to limit who can access it.

StudioFront is operated from the United States, and our database and hosting are located in the United States. Uploaded photos and videos may be cached on a global content-delivery network so they load quickly for your clients wherever they are. If you access StudioFront from outside the United States, you understand that your information will be processed in the United States.

StudioFront is a business tool intended for professional studios. It is not directed to children, and it is not intended for anyone under 18. We do not knowingly collect personal information from children. (Studios may photograph people of any age as part of their work; that content is controlled by the studio, and studios are responsible for obtaining the consents their work requires.)

We may update this policy as StudioFrontevolves. When we make material changes, we will update the “Last updated” date at the top of this page, and we review this policy at least once a year. If a change significantly affects how we handle your information, we will take reasonable steps to let you know.

Questions about this policy or your data? Email support@studiofronthq.com. StudioFront is operated by AI Founder OS LLC.