Privacy Policy

Last updated: [[EFFECTIVE DATE]] · This policy explains what Studio Toolbox collects, why, and your rights over it.

Who we are

Studio Toolbox (“we”, “us”) operates this website at studiotoolbox.com and sells booking, staff-scheduling, and point-of-sale software for creative studios. The data controller is [[LEGAL ENTITY NAME, ADDRESS, COUNTRY]]. For any privacy question or request, contact privacy@studiotoolbox.com.

What we collect and why

When you create an account or buy

Your name, email address, and billing address; the products you purchased and your order history. We use this to deliver your purchase, issue and manage your license, provide support, and meet tax and accounting obligations. Legal basis: performance of our contract with you, and our legitimate interest in running the business.

When you request a demo

Your email address and, optionally, your name. We use it to send your demo link and, because you asked us about our products, occasional related product email. Every such message identifies us, includes our mailing address, and has a one-click unsubscribe — you can opt out at any time and we will stop within 10 business days (as Canada’s anti-spam law requires). Legal basis: your consent / implied consent from your inquiry, and our legitimate interest in following up.

When our software checks its license

When you activate a paid plugin or app on your site, and periodically thereafter, it contacts our license server and transmits: your license key, the site URL or terminal identifier where it is installed, and the plugin, WordPress, and PHP version numbers. We use this only to validate the license, enforce site limits, and deliver updates. We do not collect any other data from your site, your bookings, or your customers, and we never transmit that data to ourselves. Local and staging installations are recorded but do not count against your site limit.

Note: the software you install processes your own studio’s data (your customers, bookings, and sales) on your WordPress site or your own hardware. That data stays with you — we never receive it. For that data, you are the data controller and this policy does not govern it.

When you use the demo sandbox

The live demo runs a disposable copy of our software in your browser or on a temporary sandbox. Anything you type into a demo is sample data in a throwaway environment and is deleted when the demo expires. Demos do not send real email or take real payments.

Cookies and analytics

We use strictly necessary cookies for logging in, your cart, and checkout (set by WordPress and WooCommerce). [[IF ANALYTICS ADDED: name the tool, its purpose, and the consent mechanism here.]]

Who we share it with

We do not sell your personal data. We share it only with the service providers that make our business run, each under a data-processing agreement:

• Payments: [[PROCESSOR — e.g. Paddle / Lemon Squeezy / Stripe]] processes your payment. Card details are entered with them, not us — we never see or store your full card number.
• Email delivery: [[TRANSACTIONAL EMAIL SENDER]] sends order, license, and demo emails on our behalf.
• Hosting: our site and license database are hosted on [[HOSTING PROVIDER — DreamHost]].

Some providers may process data outside your country, including outside the EU. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

How long we keep it

Account, order, and license records are kept for as long as you have an account and for the period afterwards that tax and accounting law requires ([[RETENTION PERIOD]]). Demo leads that never become customers are kept for [[DEMO LEAD RETENTION]] and then deleted or anonymized. Disposable demo environments are deleted on expiry.

Your rights

Depending on where you live (for example under the EU GDPR or Canada’s PIPEDA), you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email privacy@studiotoolbox.com; we will respond within the timeframe the law requires. You also have the right to complain to your local data-protection authority.

How we protect it

We serve the site over HTTPS, restrict access to the systems that hold personal data, and back up the license database. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant authority as the law requires.

Changes to this policy

We will post any changes here and update the date above. Material changes will be communicated to account holders by email.