Privacy Policy

Last updated: September 15, 2025

StudioSizer (“we”, “us”, “our”) provides tools to resize images for print. This Policy describes how we collect, use, share, and protect Personal Data when you visit studiosizer.com, create an account, or use our apps and services (“Services”).

1) Data we collect

Account & Contact Data. Name, email, password hash (never your plaintext password), and support messages.
Billing Data. Payments are processed by Stripe. We receive minimal billing metadata and subscription status; full card data is handled by Stripe.
Usage & Device Data. IP address, device/OS/browser info, pages/events, timestamps, and referral information.
Content You Provide. Images and parameters you upload or enter when using the app. We process images only to generate requested outputs.
Cookies & Local Storage. Used for authentication, preferences, and analytics.

2) Sources of data

We collect data directly from you, automatically through the Services, and from vendors such as Stripe (payments), Resend (email), Upstash Redis (caching/queues), and Cloudflare Turnstile (bot protection).

3) How we use data

Provide, maintain, and improve the Services.
Authenticate users, prevent fraud/abuse, and secure the Services.
Process transactions, manage subscriptions, and send transactional emails.
Respond to inquiries and provide support.
Comply with legal obligations and enforce our Terms.
With your consent, send product updates and marketing (opt out anytime).

4) Sharing

We share Personal Data with vendors who help us operate the Services, subject to contracts and appropriate safeguards: Stripe (payments), Resend (email), Upstash (Redis), Cloudflare Turnstile (bot detection), hosting/infrastructure providers (e.g., Vercel), and analytics/monitoring tools (if enabled). We may also disclose data to comply with law, protect rights/safety, or as part of a merger/acquisition (with reasonable notice where required).

5) International transfers

We may transfer data to the United States and other countries with different data protection laws. Where required, we use appropriate safeguards (e.g., EU Standard Contractual Clauses).

6) Retention

We keep Personal Data as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. You can request deletion as described below.

7) Your rights

EEA/UK/Swiss residents: rights to access, correct, delete, restrict, object, and data portability; you may lodge a complaint with your supervisory authority.
California residents: rights under CCPA/CPRA (know, delete, correct, opt out of “selling” or “sharing”). We do not sell Personal Data.

8) Security

We use administrative, technical, and physical safeguards appropriate to the risk (HTTPS, encryption in transit, access controls). No method is 100% secure; please use strong, unique passwords.

9) Children

The Services are not directed to children under 13 (or as required by local law). We do not knowingly collect Personal Data from children.

10) Changes

We may update this Policy; the new date will appear above. If changes are material, we will provide additional notice.