Privacy
Who is responsible
Studio Bohus AB, company registration number 559453-2912, Utmarksvägen 6, 442 39 Kungälv, Sweden, runs studioportal. Questions about your data go to hello@studioportal.org.
For the studio's own account we are the controller. For the projects a studio shares with its clients, the studio is the controller and we process the data on the studio's behalf. A data processing agreement is available on request.
This website
studioportal.org sets no cookies and runs no tracking or advertising scripts. Our hosting provider keeps short technical logs to protect the service.
What we process
- Studio accounts, name and email address of the people who sign in, and billing details handled by Stripe.
- Client email addresses, used for one-time sign-in codes and the notifications the studio chooses to send.
- Files, artwork, credits and feedback that studios and their clients upload.
- Listening activity, which track was played, when, and the approximate city and country. Signed-in clients appear by email. Anyone else is counted as an anonymous listener whose identifier is reset every day and can't be traced back.
Why
We process this data to provide the service you signed up for, to keep it secure, and to meet our accounting obligations.
Who helps us
Cloudflare hosts the service and stores files in Europe, encrypted at rest. Resend sends our emails from the EU. Stripe handles payments. Each of them processes data only to deliver their part of the service.
How long we keep it
Projects stay while they are active. Archived projects are deleted after 180 days. When an account ends, its projects are deleted 30 days later. Billing records are kept for as long as Swedish accounting law requires.
Your rights
You can ask to see, correct, export or delete your personal data, or object to how we use it. If you are a client of a studio, the studio can usually help you fastest. You can also complain to the Swedish Authority for Privacy Protection (IMY).