Privacy Policy

Effective date: June 1, 2026  ·  Last updated: October 21, 2026

Overview

The short version: StudioPal collects the information needed to run your studio — student rosters, enrollment records, billing history, attendance data, and account details. We use it to operate the platform, not to sell it. You control your studio's data, and we help you keep it organized and secure.

This Privacy Policy explains how StudioPal ("we," "our," or "us") collects, uses, and shares information when you use the StudioPal platform and website (collectively, the "Service"). It applies to studio owners, managers, faculty members, and parents or guardians who use StudioPal.

By using StudioPal, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

Who we are

StudioPal is a studio management SaaS platform that helps activity studios — including dance studios, music schools, martial arts dojos, gymnastics programs, and similar organizations — manage their day-to-day operations. The Service is operated by StudioPal.

For privacy-related inquiries, you can reach us at david@studiopal.app.

Data we collect

We collect different categories of information depending on how you interact with StudioPal.

Information you provide directly

Category Examples Who provides it
Account information Name, email address, phone number, password All users
Studio information Studio name, address, contact details Studio owners & managers
Student profiles Student name, date of birth, contact details, notes Parents / guardians; Studio managers
Family profiles Parent / guardian names, email addresses, phone numbers Parents / guardians
Enrollment data Class selections, enrollment status, waitlist position Parents / guardians; Studio managers
Attendance records Session attendance, present / absent / late status Faculty; Studio managers
Billing & payment records Charge amounts, due dates, payment status, payment notes Studio managers
Liability waivers Waiver acceptance status, timestamp Parents / guardians

Information collected automatically

  • Log data — IP address, browser type, pages visited, timestamps, and error logs generated when you use the Service.
  • Device information — device type, operating system, and browser version.
  • Usage data — features used, actions taken, and session duration, used to understand how the platform is being used and to improve it.
  • Cookies and similar technologies — session cookies to keep you logged in and preference cookies to remember your settings. We do not use advertising or tracking cookies.

Information from third-party services

  • Stripe — when you subscribe to StudioPal, payment is processed by Stripe. We receive confirmation of payment status and a billing record, but we do not store your full card number, CVV, or bank account details. Those remain with Stripe. See Stripe's Privacy Policy.
  • Tencent — we use Tencent's messaging services to deliver SMS verification codes for phone number confirmation and account security. Your phone number is transmitted to Tencent for the purpose of delivering the code. See Tencent's Privacy Policy.

How we use it

We use the data we collect to:

  • Operate and deliver the Service — create and manage your account, run studio workspaces, process enrollments, record attendance, and display billing records.
  • Authenticate users — verify your identity when you log in, including sending SMS verification codes via Tencent.
  • Process payments — collect StudioPal subscription fees via Stripe.
  • Send service notifications — deliver system-generated notifications related to enrollments, attendance, billing, and account activity. We do not send marketing messages without your explicit consent.
  • Improve the platform — analyze usage patterns to fix bugs, develop new features, and improve performance.
  • Provide support — respond to questions and resolve issues you report.
  • Comply with legal obligations — retain records where required by law and respond to valid legal requests.

We do not sell your personal information. We do not use it for advertising. We do not share student data with third parties except as described in this policy.

How we share it

We share data only in the following circumstances:

Within your studio workspace

Data entered into a studio workspace — such as student profiles, enrollment records, and billing history — is visible to users with appropriate roles in that workspace. Studio managers have the broadest access; faculty see class rosters and attendance; parents see only their own family's data.

Service providers

We work with a limited set of third-party service providers who process data on our behalf under contractual data protection terms:

  • Stripe — subscription billing and payment processing.
  • Tencent — SMS delivery for verification codes.
  • Cloud infrastructure providers — hosting, storage, and database services. These providers access data only to deliver infrastructure services and are bound by confidentiality obligations.

Legal requirements

We may disclose information if we believe in good faith that disclosure is required to comply with applicable law, a valid legal process, or to protect the rights, property, or safety of StudioPal, our users, or the public.

Business transfers

If StudioPal is involved in a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify affected users before any such transfer takes effect.

With your consent

We may share data for other purposes with your explicit consent.

Data retention

We retain your data for as long as your account is active or as needed to provide the Service. Specific retention practices:

  • Active studio data (student profiles, enrollment records, attendance, billing) — retained for the life of the studio workspace.
  • Deactivated student profiles — student profiles cannot be deleted, only deactivated. Deactivated profiles remain in your workspace for record-keeping but are excluded from active counts and billing limits.
  • Closed accounts — when you close your StudioPal account, we will delete or anonymize your personal data within 90 days, except where we are required by law to retain certain records.
  • Backup data — data in system backups may persist for up to 30 additional days after deletion from active systems.

Security

We take reasonable technical and organizational measures to protect your data from unauthorized access, loss, or misuse. These measures include encrypted data transmission (TLS), access controls by role, and regular security reviews.

No system is completely secure. If you believe your account has been compromised, contact us immediately at david@studiopal.app.

Your rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request that inaccurate or incomplete data be corrected.
  • Deletion — request deletion of your personal data, subject to legal retention requirements. Note that student profiles in a studio workspace can be deactivated but not deleted, as records may be needed by the studio.
  • Portability — request your data in a machine-readable format.
  • Objection — object to certain types of processing, such as processing for analytics.
  • Withdrawal of consent — where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, email david@studiopal.app. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA).

Right to know

You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.

Right to delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law.

Right to opt out of sale

StudioPal does not sell personal information. We have not sold personal information in the past 12 months.

Right to non-discrimination

We will not discriminate against you for exercising your CCPA rights. You will receive the same level of service regardless of whether you make a privacy request.

How to submit a request

California residents may submit a request by emailing david@studiopal.app with the subject line "California Privacy Request." We will verify your identity and respond within 45 days, with an option to extend by an additional 45 days if necessary.

Authorized agents may submit requests on your behalf; we may require written proof of authorization.

Children's privacy

StudioPal is a business tool for studio operators. It is not directed at children. However, the Service is designed to manage student records, which may include minors.

Student profiles for minors are created and managed by their parent or guardian, or by the studio on behalf of the family. We do not knowingly collect personal information directly from children under 13. If you believe a child's information has been submitted without appropriate parental consent, please contact us at david@studiopal.app so we can address it.

Studio owners and managers are responsible for ensuring they have the appropriate consents from parents or guardians before entering student data into the platform.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you by email or by a prominent notice within the platform at least 14 days before the change takes effect.

Your continued use of StudioPal after a policy update constitutes acceptance of the revised policy.

Contact us

If you have questions, concerns, or requests about this Privacy Policy or how we handle your data, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days.