Legal

Privacy Policy

Last updated: 6 July 2026

StudioPilot ("we", "us") provides an operations platform for salons, spas and studios at https://www.studiopilot.me. This policy explains what data we collect, why, and the choices you have. It applies to studio owners and their teams ("customers") and to the end-clients whose details customers store in StudioPilot.

1. Data we collect

  • Account data — your name, email, phone number and password (stored as a salted hash), or your Google account identity if you sign in with Google.
  • Business data — the information you enter to run your studio: stores, services, staff, bookings, sales, customer profiles, memberships and settings (including brand assets you upload).
  • WhatsApp messages — if you message our WhatsApp assistant, we store the conversation to provide replies and history.
  • Technical data — standard server logs (IP address, timestamps, requests) used for security and troubleshooting.

2. How we use it

To operate the product: authenticate you, run bookings/POS/reports, send transactional email (such as account activation), answer WhatsApp queries, and improve reliability. We do not sell personal data, and we do not use your business data to advertise to your clients.

3. AI processing

Our WhatsApp assistant uses Anthropic's Claude models to generate replies. Message text and the minimum business context needed to answer (for example revenue summaries you request) are processed by Anthropic as our subprocessor. Assistant access is scoped so each business can only ever see its own data.

4. Where data lives

Data is hosted on Amazon Web Services in the Asia Pacific (Mumbai) region — database, application servers and file storage (uploads such as logos and service images). Transactional email is sent via Amazon SES. WhatsApp messaging is delivered through Meta's WhatsApp Business Platform, subject to Meta's own terms.

5. Sharing

We share data only with the service providers needed to run StudioPilot (AWS, Meta, Anthropic, Google for sign-in) and when required by law. Each provider receives only what its function needs.

6. Retention & deletion

We keep your data while your account is active. If you close your account, contact us and we will delete your studio's data within 30 days, except records we must keep for legal or accounting reasons.

7. Your rights

You can access, correct or export the data you've entered at any time from the app. You may request a copy or deletion of your personal data by contacting us. If you are an end-client of a studio, contact that studio first — they control their client records; we act on their instructions.

8. Cookies

We use only the cookies and local storage needed to keep you signed in and remember preferences (like language and currency). We do not run third-party advertising trackers.

9. Contact

Questions or requests: email support@studiopilot.me or use the contact page. We may update this policy as the product evolves; material changes will be announced on this page with a new "last updated" date.

Discutez avec nous