Privacy Policy

Last updated: 29 September 2026

This Privacy Policy explains how StudioOps (“we”, “us”), operated by the owner of studioops.in, collects, uses, and protects information when you use our studio-management service at studioops.in (the “Service”). By using the Service you agree to this policy.

1. Information we collect

We collect: (a) account information you provide, such as your name, studio name, and email; (b) the data you enter into the Service, such as client, project, event, finance, team, and storage records; and (c) basic technical information, such as log data and the device and browser you use to access the Service. If you sign in with Google, we receive your name and email address from Google to create your account.

2. How we use your information

We use your information to provide and operate the Service, create and secure your account and studio, respond to support requests, keep the Service reliable, and communicate important updates. We do not sell your information, and we do not use your studio’s content for advertising.

3. Who we share it with

We never sell your information and we never share it with other studios. We use a small number of providers to run the Service, each processing data only on our behalf: Supabase (database, authentication and file storage), Vercel (hosting), Razorpay (payments) and Google (optional sign-in, and optional sending of your emails through your own Gmail, described in section 4). Card and bank details are handled entirely by Razorpay and are never stored by StudioOps. We may also disclose information where the law requires it.

4. Gmail, if you connect it

A studio administrator can choose to connect the studio’s Gmail or Google Workspace account in Settings, so that messages to the studio’s clients about their booking (quotes, invoices, payment reminders, payment receipts, planning-call requests and anniversary wishes) are emailed from the studio’s own address. This is optional and can be disconnected at any time.

What we access. We ask Google for permission to send email on your behalf (the gmail.send permission), and for the email address of the account you connect so we can show you which account is sending. We do not ask for, and cannot, read, search, label or delete your emails, contacts or any other Gmail data.

How we use it. We use it only to send email to your own clients about their booking with you, in two ways. Sent by you: someone in your studio chooses a message, reviews it and presses Send. Sent automatically, only if you switch it on: an administrator can turn on automatic payment reminders (a chosen number of days before an instalment is due), planning-call emails (before a project’s first event) and anniversary wishes. These use your own templates, go only to the client email saved on that project, never go twice, and can be switched off at any time in Settings. Nothing else is ever sent. Each email appears in your Gmail Sent folder.

How we store it. We keep the connected email address and the access tokens Google issues. The tokens are encrypted before they are stored, are readable only by our server, and are never visible to any user of the Service, including your own team. For your message history, we record each email’s recipient, subject, date and type; we do not store the body of the emails you send.

Link clicks. Links in these messages to a quote or invoice let the studio see whether its client opened that link, and how many times. We do not use tracking images, and we do not record who the client is beyond the fact that the link was opened.

Sharing. We do not share, sell or transfer any data received from Google to anyone, do not use it for advertising, and do not use it to develop or train artificial intelligence or machine-learning models. No person reads it except where you ask us for help or the law requires it.

Disconnecting. When you disconnect Gmail in Settings, we revoke our access with Google and delete the stored token and address. You can also remove StudioOps’s access at any time from your Google Account (myaccount.google.com › Security › Third-party connections).

StudioOps’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Where your data is held

Your data is stored on Supabase’s managed infrastructure in their Asia Pacific (Tokyo) region. It is encrypted in transit and encrypted at rest, and backed up daily. Passwords are handled by Supabase’s authentication system and are never visible to us.

6. Data isolation, and our own studio

Each studio’s data is isolated by row-level security in the database itself, not by rules in the application. Every record belongs to one studio, and a signed-in account can only read or write records belonging to its own studio. A request for another studio’s data returns nothing.

StudioOps is built and run by a working wedding photography studio, and that studio uses StudioOps like any other customer. It is an ordinary account behind exactly the same isolation, with no additional access to anyone else’s data. We do not use any studio’s clients, leads, pricing or team information for our own photography business, and we do not use your content to train anything or to advertise.

7. What StudioOps staff can see

We keep an internal administration screen for running the business. It shows, for each studio: the studio name, the plan, billing and payment status, counts of how many projects, leads, events and team members exist, when someone last signed in, and the studio administrator’s own contact details so we can reach you. It does not show your clients, your leads, your quotes, your pricing, your team’s wages, or your revenue and expense figures.

Being straightforward about the rest: because we operate the Service, a small number of named people hold database credentials that can technically reach stored data. This is true of every software provider you use.

We restrict that access to what is necessary for supporting you, investigating a fault, protecting the security of the Service, and maintaining the platform. We never access your data to look at your business, and never for our own photography work.

When you ask us for help, your request is your permission, and we will tell you what we looked at. Some access cannot wait to be asked about — investigating a fault that affects many studios, responding to a security issue, running maintenance and upgrades, or complying with the law. In those cases we take the least data the situation needs, and if your studio’s information was specifically examined we will tell you afterwards.

8. Data retention, export and deletion

We keep your information for as long as your account is active. You can export your projects, events, leads and finance data to CSV or Excel from inside the Service at any time, without asking us. If you ask us to delete your studio, we will delete it within 30 days, except for records we must keep for tax or legal reasons, such as invoices for payments you made to us. Backups are overwritten on their normal cycle, within 7 days.

9. If something goes wrong

If we become aware of a security breach affecting your data, we will tell you without undue delay, and in any case within 72 hours of becoming aware of it, describing what happened, what was affected and what we are doing about it.

10. Your rights

You may access, correct, export, or request deletion of your personal information. As a studio administrator you can manage much of this directly in the Service, and you can contact us for anything else. We will respond to requests as required by applicable law, including India’s Digital Personal Data Protection Act, 2023.

Where you enter other people’s details into StudioOps, such as your clients and your team, you are responsible for that information and we process it on your instructions in order to provide the Service to you.

11. Cookies

We use essential cookies and similar technologies to keep you signed in and to make the Service work. We do not use them for third-party advertising.

12. Children

The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you. The “last updated” date above shows when it was last revised.

14. Contact

Questions about your privacy or this policy? Contact us at studioops.team@gmail.com, or on +91 93191 81738 (call or WhatsApp).