StudioCoreSign in

Privacy Policy

Last updated: April 2026

1. Who We Are

StudioCore is a project management platform for architecture and design studios, operated by StudioCore SA (Pty) Ltd. We are committed to protecting your personal data and being transparent about how we use it. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data.

For any privacy-related queries, contact us at hello@studiocore.co.za.

2. Data We Collect

We collect the following categories of personal data:

  • Account data: Name, email address, phone number, profile photo, and password hash when you create an account.
  • Firm data: Studio name, address, logo, tax information, and bank details provided by firm owners for billing purposes.
  • Project data: Project names, descriptions, client names, addresses, files, photos, schedules, moodboards, and any content you upload.
  • Usage data: Pages visited, features used, browser type, device information, and IP address — collected automatically to improve the platform.
  • Communication data: Comments, notifications, feedback submissions, and support enquiries.
  • Payment data: Billing information processed through our payment providers (Stripe, PayFast). We do not store full credit card numbers.

3. How We Use Your Data

We use your data to:

  • Provide and operate the StudioCore platform
  • Process subscriptions and payments
  • Send transactional emails (account verification, password resets, notifications)
  • Improve the platform based on usage patterns
  • Provide customer support
  • Prevent fraud and ensure platform security

We do not sell your personal data to third parties. We do not use your data for advertising.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or other GDPR-applicable jurisdictions, we process your data on the following bases:

  • Contractual necessity: Processing required to provide the service you signed up for.
  • Legitimate interest: Improving the platform, preventing fraud, ensuring security, and communicating service updates.
  • Consent: Where you have explicitly opted in, such as marketing communications. You may withdraw consent at any time.
  • Legal obligation: Where required by applicable law (e.g. tax records, fraud prevention).

5. Data Protection (South Africa — POPIA)

For South African users, we comply with the Protection of Personal Information Act (POPIA). StudioCore acts as a responsible party for data collected directly from users, and as an operator for client data managed by firms through the platform. You have the right to access, correct, and delete your personal information under POPIA.

6. Your Rights

Depending on your jurisdiction, you have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data (subject to legal obligations).
  • Restriction: Request we limit how we process your data.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interest.
  • Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email hello@studiocore.co.za. We will respond within 30 days.

7. Data Storage & Transfers

Your data is stored on servers provided by Supabase (EU West region) and Vercel (global edge network). Data may be transferred internationally. For EEA/UK users, we ensure appropriate safeguards are in place for international data transfers in accordance with GDPR Chapter V requirements.

8. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, your data enters a 14-day grace period (for reinstatement), after which it is permanently deleted within 30 days. Billing records may be retained longer where required by tax law.

9. Cookies & Analytics

We use essential cookies required to operate the platform (authentication, session management). We may use analytics tools to understand usage patterns. We do not use tracking cookies for advertising. You can manage cookie preferences through your browser settings.

10. Third-Party Services

We use the following third-party services to operate the platform:

  • Supabase: Database and file storage (EU West)
  • Vercel: Hosting and deployment
  • Stripe / PayFast: Payment processing
  • Nodemailer / Resend: Email delivery

Each service operates under its own privacy policy and data processing agreements.

11. Children

StudioCore is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform. Continued use after updates constitutes acceptance.

13. Contact

For privacy enquiries or to exercise your data rights:

hello@studiocore.co.za

StudioCore SA (Pty) Ltd