Privacy Policy
Last updated: April 6, 2026
1. Who We Are
Studio (by Anil Kumar Kanneboina) ("Studio", "we", "us", or "our") operates a unified business operating system that enables businesses to communicate with their customers via WhatsApp, Instagram, SMS, and Email. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform.
2. Information We Collect
2.1 Business Account Data
When you register as a business user we collect: name, email address, phone number, business name, and WhatsApp Business Account (WABA) credentials you connect.
2.2 Customer / Contact Data
Your customers' names, phone numbers, email addresses, and message history that flows through our platform. This data is stored on your behalf and you remain the data controller.
2.3 Message Data
Inbound and outbound messages processed via the WhatsApp Cloud API, Instagram Graph API, SMS, and Email. Messages are stored to provide conversation history, analytics, and automation.
2.4 Usage Data
Log files, IP addresses, browser type, pages visited, and timestamps for security and product improvement.
3. How We Use Your Information
- To deliver the platform services (sending/receiving messages on your behalf)
- To provide customer support and respond to inquiries
- To send transactional and service-related communications
- To improve platform features and security
- To comply with legal obligations
- To detect and prevent fraud or abuse
4. WhatsApp & Meta Data Usage
Studio is integrated with the Meta (WhatsApp Business) Platform. By using our WhatsApp features, you agree to Meta's WhatsApp Business Policy and Terms of Service. We do not sell WhatsApp message data to third parties. Message content is used solely to deliver the services you have requested.
Opt-out: Your customers can send the word STOP at any time to stop receiving messages. We will immediately honor all opt-out requests as required by Meta and applicable law.
5. Data Sharing
We do not sell your personal data. We share data only with:
- Meta Platforms — to deliver WhatsApp and Instagram messages
- Supabase / PostgreSQL — database hosting for your business data
- Firebase (Google) — authentication only, no message data
- Vercel — serverless hosting
- Law enforcement — when required by valid legal process
6. Data Retention
Message data is retained for 12 months by default. Business account data is retained while your account is active and for 90 days after deletion. You may request deletion of your data at any time by contacting us at privacy@studio-six-brown.vercel.app.
7. Security
We use industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, HMAC-SHA256 webhook signature verification, and role-based access controls. However, no method of transmission over the internet is 100% secure.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion ("right to be forgotten")
- Object to or restrict processing
- Data portability
To exercise these rights, contact us at privacy@studio-six-brown.vercel.app.
9. Cookies
We use essential cookies for authentication sessions only. We do not use tracking or advertising cookies.
10. Children's Privacy
Our platform is not directed to children under 13. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or in-app notification.
12. Contact Us
If you have questions about this Privacy Policy, contact us at: privacy@studio-six-brown.vercel.app