Privacy Policy

Effective: May 1, 2026. This policy explains what Studio Toolbox collects, why we collect it, and what rights you have over it.

Who we are

Studio Toolbox Limited operates this website at studiotoolbox.com. The company is registered in Ontario, Canada. Our mailing address is 126C Main Street N, Markham, ON L3P 1Y1, Canada. We sell booking, staff scheduling, and point of sale software for creative studios. Studio Toolbox Limited is the data controller. For a privacy question or request, write to support@studiotoolbox.com.

What we collect and why

When you create an account or buy

We collect your name, email address, and billing address. We also keep a record of the products that you bought and your order history. We use this data to deliver your purchase, to issue and manage your license, to give support, and to meet tax and accounting obligations. Legal basis: performance of our contract with you, and our legitimate interest to run the business.

When you request a demo

We collect your email address. Your name is optional. We use it to send your demo link. We also send occasional product email, because you asked us about our products. Every message identifies us, gives our mailing address, and includes an unsubscribe link. You can opt out at any time. We stop within 10 business days, as the Canadian anti-spam law requires. Legal basis: your consent or implied consent from your inquiry, and our legitimate interest to follow up.

When our software checks its license

When you activate a paid plugin or app, it contacts our license server. It does this again at regular intervals. It sends your license key, the site URL or terminal identifier, and the version numbers of the plugin, WordPress, and PHP. We use this data only to validate the license, to apply site limits, and to deliver updates. We do not collect other data from your site, your bookings, or your customers. We record local and staging installations, but they do not count against your site limit.

The software that you install processes the data of your own studio on your WordPress site or your own hardware. This includes your customers, bookings, and sales. That data stays with you, and we never receive it. For that data you are the data controller, and this policy does not apply to it.

When you use the demo sandbox

The live demo runs a disposable copy of our software in your browser or in a temporary sandbox. Text that you type into a demo is sample data in a temporary environment. We delete it when the demo expires. Demos do not send real email and do not take real payments.

Cookies and analytics

We use strictly necessary cookies for login, your cart, and checkout. WordPress and WooCommerce set these cookies. For visitor statistics we use Independent Analytics. This tool runs on our own server and keeps the data in our own database. It sets no tracking cookies and sends no data to a third party.

Who we share it with

We do not sell your personal data. We share it only with the service providers that operate our business. Each provider works under a data processing agreement.

• Payments: Paddle.com Market Ltd processes your payment as the merchant of record. You enter your card details with Paddle and not with us. We never see or store your full card number.
• Hosting and email: DreamHost hosts our website and our license database. DreamHost also delivers our order, license, and demo email.

Some providers process data outside your country, and outside the EU. Where the law requires it, these transfers use safeguards such as Standard Contractual Clauses.

How long we keep it

We keep account, order, and license records while you have an account. After that we keep them for six years after the end of the tax year, to comply with Canadian law. We delete demo requests after 180 days. We delete temporary demo environments when they expire.

Your rights

Your rights depend on where you live. Two examples are the EU GDPR and the Canadian PIPEDA. You can have the right to access, correct, export, or delete your personal data. You can also have the right to object to some processing, to restrict it, and to withdraw consent. To use any of these rights, write to support@studiotoolbox.com. We answer in the time that the law requires. You can also complain to your local data protection authority.

How we protect it

We serve the site over HTTPS. We restrict access to the systems that hold personal data. We back up the license database. No system is fully secure. If a breach affects your personal data, we notify you and the relevant authority as the law requires.

Changes to this policy

We post each change here and update the date above. We send an email to account holders about a material change.