Privacy Policy

1. Controller Information

Data controller: MB Rei exitus (Lithuania, EU). For privacy inquiries or consent withdrawal requests, email hello@getstudiodock.com or use the support channel in StudioDock.

2. Data We Collect

• Account data (name, email, login credentials, company details).
• Booking and customer data entered by you or your clients.
• Google account and calendar sync data when you connect Google Calendar, including the account email, authorization tokens, booking event details needed for synchronization, and opaque busy-time intervals when you enable availability blocking.
• Payment metadata from integrated payment providers.
• Marketing contact and preference data when you ask a pre-trial setup question, request StudioDock planning material, or create an owner/team account.
• The selected AI Support question and answer only when you explicitly rate that answer or send it to the StudioDock team. Obvious identity and contact patterns are removed before this improvement copy is stored.
• Product feedback, rating, stated outcomes, and the separate publication permissions you choose to provide.
• Technical data (IP, browser, device, logs) required for security and operations.

3. Why We Process Data

• To provide and operate StudioDock services.
• To process bookings, payments, notifications, and customer communication.
• To sync confirmed bookings and booking changes to a connected Google Calendar and, when enabled, prevent new bookings during Google Calendar busy times.
• To send StudioDock product updates, changelog digests, and practical studio-operations emails to people who requested StudioDock information or created an owner/team account. These messages include an unsubscribe option.
• To secure accounts, prevent abuse, and maintain service reliability.
• To evaluate and improve StudioDock AI Support using privacy-redacted interactions that users chose to rate or hand off. Unrated chat bodies are not retained for this purpose.
• To comply with legal obligations and enforce our Terms.

4. Legal Bases (GDPR)

Depending on context, we process personal data under one or more of the following legal bases:

• Performance of a contract.
• Legitimate interests (service security, fraud prevention, product improvement, and relevant StudioDock product/news communication to StudioDock-owned audiences).
• Legal obligations.
• Consent, where required.

5. Feedback, customer proof, and Capterra

We use private product feedback to understand customer experience and improve StudioDock. If you separately permit publication, we record which elements may be used: the feedback text, studio name, account administrator's name and role, and studio logo. These choices are not preselected, are not required to use StudioDock, and can be withdrawn in account settings or through support.

Publication of identifiable feedback is based on consent. Internal feedback analysis and service improvement may rely on our legitimate interests, subject to your rights. We may also publish genuinely anonymized or aggregated workflow examples that no longer identify a person or customer. Capterra is an independent third-party review service; if you choose to open it, its own privacy terms apply, and StudioDock does not condition that invitation on a positive rating.

6. Data Sharing

We share personal data only as necessary with trusted processors and infrastructure providers, including hosting, analytics, email, and payment processing partners. AI Support questions are processed by a contracted AI service provider with provider-side response storage disabled; StudioDock does not provide the assistant with generic tools or customer, payment, credential, or raw database access. If you connect Google Calendar, we also share the minimum data required with Google to authenticate the connection and synchronize booking events on the connected calendar. A studio may allow an individual bookable team member to view a customer's name, email address and phone number only for a booking where that person accepted an assigned service. Access ends when that service ends. StudioDock records the notice version and an identifier-only access audit without copying the contact values into that audit. We do not sell personal data.

7. Google Calendar Integration

StudioDock offers an optional Google Calendar integration for studio operators who want bookings to appear in Google Calendar. When you connect this integration, we use Google authorization data and event-level calendar access to create, update, and remove StudioDock booking events for the studio account you choose to connect. If you separately enable busy-time blocking, we also read events from that calendar and store only their start and end times. We do not store external event titles, descriptions, attendees, or locations.

We do not use Google Calendar access for advertising, unrelated data analysis, or personal email access. You may disconnect Google Calendar from your StudioDock settings at any time.

8. International Transfers

If personal data is transferred outside the EEA, MB Rei exitus applies appropriate safeguards, such as standard contractual clauses or other lawful transfer mechanisms.

9. Data Retention

We retain personal data only for as long as needed for service delivery, legal compliance, dispute resolution, and legitimate business purposes.

Privacy-redacted AI Support questions and answers retained after an explicit rating or human handoff are automatically deleted within 90 days. Unrated AI Support chat bodies are not persisted for improvement analysis.

Identifier-only team contact-view audits are deleted after 90 days. Contact-permission history is retained while the team membership exists and deleted 180 days after that member is removed. These cleanup periods do not delete the booking or its customer-notice provenance, which follow the booking and account deletion rules.

10. Security

We implement technical and organizational security measures designed to protect personal data. However, no system is completely secure, and absolute security cannot be guaranteed.

11. Your Rights

Subject to applicable law, you may have rights to:

• Access, correct, delete, or restrict personal data.
• Object to processing and request portability.
• Withdraw consent where processing is based on consent.
• Unsubscribe from product/news emails at any time using the unsubscribe link in those emails.
• Lodge a complaint with a competent supervisory authority.

12. Cookies and Similar Technologies

StudioDock may use essential cookies and similar technologies required for authentication, session handling, and core product functionality. With your permission, we also use browser storage and measurement requests with Google Analytics, Meta and OpenAI to understand advertising results. You can decline this optional measurement or withdraw your choice using Cookie settings on our public website. Declining does not prevent registration.

For OpenAI advertising measurement, we send a completed-registration event only after a new StudioDock workspace is created. The request includes an advertising data-source ID, a random event ID and, when available, the OpenAI ad-click reference. Like other web requests, it also exposes network information such as your IP address and browser information to the recipient. We do not send your email, password, studio name, internal account ID or form contents, and we do not install OpenAI automatic form matching.

The OpenAI ad-click reference is stored in this browser for up to 30 days after consent; registration deduplication lasts for the browser session, up to 30 days. Withdrawal clears this local measurement state and prevents future requests, but cannot recall information already sent. OpenAI processes measurement data under its applicable advertising and privacy terms.

13. Changes to this Policy

We may update this Privacy Policy periodically. Material updates will be reflected on this page with a revised effective date.