Privacy
Effective May 2026
studio (operated by Studio Labs, "we," "us," "our") runs the website at use.studio and the studio app on iOS and Android. This page explains what data we collect, why we collect it, and what we do with it.
What we collect
- Account details — your email, your handle, your display name, and (if you set one) a profile photo.
- Content you upload — posts, images, captions, commission briefs, messages.
- Payment details — handled by Stripe. We never see your card number. We do see the metadata of completed commissions (amount, currency, date).
- App diagnostics — crash reports and basic device information needed to keep the app running.
Why we collect it
- To run your account and show your work to the right people.
- To process commissions and route payments through Stripe.
- To send transactional emails (commission accepted, message received, payout sent).
- To fix bugs and improve the app.
Who we share it with
We share data with the third parties we need to operate the service — Stripe for payments, AWS S3 for image storage, Resend for transactional email, Expo for push notifications, and Cloudflare for hosting. We don't sell your data, and we don't share your posts, messages, or commission details with advertisers or data brokers. The one exception is website analytics — see Cookies & analytics below.
Connected social accounts
studio can post your work to accounts you connect — Instagram, Facebook, Threads, TikTok, X, YouTube, Pinterest, or Bluesky. Connecting is entirely optional and studio works normally without it.
When you connect an account we store:
- An access token from that platform, encrypted at rest, which is what lets us post on your behalf.
- Your account ID and handle on that platform, so we can show you which account is connected.
- A record of each cross-post — which post went where, whether it succeeded, and the link to it.
We use these only to publish the posts you explicitly choose to send. We don't read your feed, your followers, your messages, or your analytics. We don't post anything you haven't selected, and we never post on a schedule you didn't set.
Disconnecting. Settings → Connections → Disconnect removes the token and the connection from our database immediately. You can also revoke studio's access from the platform's own settings, which has the same effect. Either way, posts already published stay where they are — most platforms, Instagram included, give apps no way to delete a post after publishing, so removing them is something only you can do from that platform.
To delete everything associated with a connected Meta account, see data deletion.
Your rights
- Access — ask us what we have on file. We'll send it within 30 days.
- Correction — fix anything that's wrong, either in-app or by emailing us.
- Deletion — close your account and we'll remove your data. Some records (transaction history, where legally required) may be retained.
- Export — get a copy of your work and your commission history.
These rights apply regardless of where you live (GDPR, CCPA, or otherwise).
Cookies & analytics
The website uses Cloudflare Web Analytics, which is cookieless and doesn't track individual visitors. We also use the Meta Pixel to measure the performance of our ads. You can opt out of Meta's tracking via your ad preferences or with browser-level cookie controls.
Children
studio isn't directed at anyone under 13. We don't knowingly collect data from children. If you believe a child has submitted information, email us and we'll delete it.
Changes
If we change how we handle your data, we'll update this page and the effective date above. For anything significant, we'll email you.
Contact
Email privacy@use.studio.