MHamiltonVisuals LLC ("we," "us," or "our") operates StudioFlows. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.
By using StudioFlows, you consent to the collection and use of your information as described in this Privacy Policy.
1. Information We Collect
Information You Provide
Account Information: Email address, name, password (encrypted), and optional business information
Payment Information: Billing details processed securely through Stripe (we do not store your full card number)
Content: Photos, videos, captions, and other media you upload for scheduling
Client Data: Information about your clients/leads that you choose to store (names, emails, notes, research data)
Social Media Credentials: OAuth tokens for connected social media accounts (encrypted and stored securely)
Information Collected Automatically
Usage Data: Pages visited, features used, actions taken within the Service
IP Address: Collected for security, analytics, and delivery tracking purposes
Cookies: Session cookies for authentication and preferences
Information from Third Parties
Social Media Platforms: Profile information and posting capabilities when you connect your accounts
Payment Processor: Transaction status and billing information from Stripe
Email Lookup Services: Professional information when you use lead research features (via Hunter.io)
2. How We Use Your Information
We use collected information to:
Provide, maintain, and improve the Service
Process your transactions and manage your subscription
Schedule and publish your social media content
Track image usage across the web (Image Tracking feature)
Manage file deliveries and track download activity
Send you important updates about the Service
Respond to your requests and provide customer support
Detect and prevent fraud and abuse
Comply with legal obligations
3. Third-Party Services
We share data with the following third-party services to operate StudioFlows:
Service
Purpose
Data Shared
Supabase
Database and authentication
Account data, content metadata
Stripe
Payment processing
Billing information, transaction details
Late (getlate.dev)
Social media posting
Content, captions, scheduling data
Hunter.io
Email/lead lookup
Search queries (names, domains)
Discord/Slack
Notifications (optional)
Notification content you configure
Each third-party service has its own privacy policy governing their use of data.
4. Data Retention
Account Data: Retained while your account is active and for a reasonable period after deletion
Uploaded Content: Deleted when you remove it or close your account
Payment Records: Retained as required for tax and legal compliance (typically 7 years)
Usage Logs: Generally retained for 90 days for security and debugging
Delivery Tracking: IP addresses and download logs retained for 1 year
5. Data Security
We implement security measures to protect your information:
Encryption of data in transit (HTTPS) and at rest
Secure OAuth token storage for social media connections
Password hashing using industry-standard algorithms
Row-Level Security (RLS) policies in our database
Regular security audits and monitoring
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
6. Your Rights
Depending on your location, you may have the following rights:
All Users
Access: Request a copy of your personal data
Correction: Update inaccurate information
Deletion: Request deletion of your account and data
Data Export: Download your data in a portable format
EU/EEA Users (GDPR)
If you are located in the European Union or European Economic Area, you have additional rights under GDPR:
Legal Basis: We process your data based on consent, contract performance, and legitimate interests
Right to Object: Object to processing based on legitimate interests
Right to Restrict: Request restriction of processing in certain circumstances
Right to Portability: Receive your data in a structured, machine-readable format
Withdraw Consent: Withdraw consent at any time where processing is based on consent
Lodge Complaint: File a complaint with your local data protection authority
California Users (CCPA)
California residents have the right to:
Know what personal information is collected
Know whether personal information is sold or disclosed and to whom
Opt out of the sale of personal information (we do not sell your data)
Request deletion of personal information
Not be discriminated against for exercising these rights
To exercise any of these rights, contact us at support@studioflows.app.
7. Cookies
We use essential cookies for:
Authentication and session management
Security and fraud prevention
Remembering your preferences
We do not use third-party advertising or tracking cookies.
8. Children's Privacy
StudioFlows is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
10. Team Delegation
If you use the team delegation feature:
Account owners can see actions taken by team members on their behalf
Team members can only access data permitted by the owner
Delegation relationships and activity are logged for security
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of StudioFlows after changes take effect constitutes acceptance of the revised policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: