Privacy Policy

StudioOS (“we”, “us”, “our”, or “StudioOS”) is committed to protecting the privacy of all individuals whose data we process. This Privacy Policy explains how we collect, use, store, and share personal information in connection with our platform and services.

1. Who This Policy Applies To

This policy applies to two categories of individuals:

a) Our Clients (“Platform Users”): Webcam studio operators and agencies who subscribe to our platform at getstudioos.com.

b) Monitored Individuals (“Data Subjects”): Users of publicly accessible webcam platforms whose publicly available usernames and activity data are processed through our platform.

2. How This Privacy Policy Applies

Regarding our use of your personal data, we are regulated as a “controller” under the following laws:

The General Data Protection Regulation (EU) 2016/679 (“GDPR”), which applies across the European Union and European Economic Area;
The UK Data Protection Act 2018 and the UK General Data Protection Regulation (“UK GDPR”);
The Privacy and Electronic Communications Regulations (“PECR”) that apply in the United Kingdom; and
The California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), which applies to California residents.

3. What Data We Collect

3.1 Data We Collect from Platform Users

When you register for and use our platform, we collect:

Account Information: Name, email address, company/studio name, billing address, login credentials, role within the studio;
Studio Data: Model names, cam platform usernames, shift schedules, room assignments, earnings data;
Payment Information: Processed securely via Stripe — we do not store card details. We retain payment tokens, card type, last four digits, and billing country for billing and fraud prevention;
Communications: Messages sent via built-in team chat, support queries;
Usage Data: Login history, feature usage, pages visited;
Technical Data: IP address, browser type, device information, operating system;
Cookie Data and Analytics: Via Google Analytics (see our Cookie Policy).

3.2 Data We Process About Monitored Individuals

Through our monitoring services, we process the following categories of data about users of publicly accessible webcam platforms:

Publicly displayed usernames on webcam platforms (e.g., MyFreeCams, Stripchat, CamSoda, LiveJasmin, Chaturbate, BongaCams);
Publicly visible room presence — whether a username appeared in a publicly accessible chat room;
Publicly visible activity indicators — such as tip amounts, chat participation, and VIP/subscriber status, all of which are publicly displayed on the respective platforms;
Timestamps of when the above data was observed;
Cross-platform presence — aggregation of publicly available usernames observed across multiple platforms.

We do not collect: real names, email addresses, IP addresses, physical addresses, photographs, payment details, or any other personally identifying information about monitored individuals. All data is limited to publicly displayed usernames and publicly visible platform activity.

4. How We Collect Data

4.1 Platform User Data

Collected directly from you when you register, subscribe, and use our platform.

4.2 Monitored Individual Data

Collected from publicly accessible sources only. All webcam platforms we monitor display user lists, chat messages, tip notifications, and viewer participation openly and publicly to anyone who visits the platform. Our service aggregates and organises this publicly available information to assist webcam studios with operational intelligence.

We also use third-party data aggregation services (such as Statbate API) which similarly collect only publicly available data from these platforms.

5. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases:

5.1 Platform User Data

Contract performance (Article 6(1)(b)): Processing necessary to provide our SaaS platform and services as agreed in our Terms of Service.
Legitimate interest (Article 6(1)(f)): For analytics, security, fraud prevention, and service improvement.
Consent (Article 6(1)(a)): Where we obtain your explicit consent for marketing communications.
Legal obligation (Article 6(1)(c)): In particular cases required by law, such as tax compliance.

5.2 Monitored Individual Data

Legitimate interest (Article 6(1)(f)): We have conducted a Legitimate Interest Assessment (LIA) and determined that our processing of publicly available platform data serves a legitimate business purpose (providing operational intelligence tools to webcam studios) that does not override the rights of the data subjects, given that:
- All data processed is already publicly available to any visitor of the respective platforms;
- We process only pseudonymous usernames, not real identities;
- Our processing does not reveal information beyond what is already publicly visible;
- We implement strict acceptable use policies prohibiting harassment, stalking, or attempts to identify real persons;
- Data subjects can request erasure of their data at any time.

A copy of our Legitimate Interest Assessment is available upon request.

6. How We Use Data

6.1 Platform User Data

To provide, maintain, and improve our platform;
To process subscriptions and payments;
To communicate with you about your account and our services;
To ensure platform security and prevent fraud;
To comply with legal obligations;
To analyse the performance and facilitate the functionality of StudioOS;
To improve your experience by providing personalised services and recommendations.

6.2 Monitored Individual Data

To provide operational intelligence to our clients (webcam studios and agencies);
To generate alerts when publicly visible usernames are observed in monitored rooms;
To aggregate publicly available activity data for business analysis purposes.

We do not use monitored individual data for: direct marketing, profiling for automated decision-making, selling to third parties, or any purpose unrelated to our platform services.

7. Data Sharing

We share personal data with the following categories of recipients:

Stripe — Payment information for payment processing (US/EU);
Base44 (operated by Wix.com Ltd) — Platform data, client accounts for application hosting (United States);
Google Analytics — Anonymised usage data for website analytics (United States);
Telegram — Alert notifications for delivery of monitoring alerts to clients (Global);
Statbate API — Publicly available platform data for data aggregation from public sources (EU);
DigitalOcean — Monitoring data in transit for server infrastructure (Netherlands, EU);
With authorities after they make a request for your information, if there are legal grounds;
With other entities as part of a sale, merger, or change in control of StudioOS.

We do not sell personal data to any third party.

8. International Data Transfers

Some of our service providers are located outside the United Kingdom. Where data is transferred internationally, we ensure appropriate safeguards are in place:

United States: Transfers to US-based providers (Base44, Stripe, Google) are conducted under the UK-US Data Bridge and/or Standard Contractual Clauses (SCCs) as appropriate under UK GDPR.
European Economic Area (Netherlands): Covered by the UK adequacy decision for EEA countries.
Adequacy decisions issued by the European Commission or UK Government;
EU–US Data Privacy Framework (for transfers to certified US providers).

9. Data Retention

9.1 Platform User Data

Active accounts: Retained for the duration of your subscription plus 12 months after cancellation, to allow for account reactivation and access to historical data.
Payment records: Retained for 7 years as required by UK tax and accounting legislation.

9.2 Monitored Individual Data

Alert data and activity records: Retained for a maximum of 24 months from the date of collection, after which they are automatically deleted.
Deduplication records: Retained for 5 minutes (used solely to prevent duplicate notifications).

9.3 Deletion

Upon expiry of the retention periods set out above, data is permanently deleted from our systems. Backup copies may persist for up to 30 additional days before full deletion.

10. Your Rights

10.1 Rights of Platform Users

Under UK GDPR, you have the right to:

Access the personal data we hold about you;
Rectify inaccurate personal data;
Erase your personal data (“right to be forgotten”);
Restrict or object to processing of your data;
Data portability — receive your data in a structured, machine-readable format;
Withdraw consent at any time (where consent is the legal basis);
Lodge a complaint with the Information Commissioner's Office (ICO).

10.2 Rights of Monitored Individuals

If you believe your publicly available username or activity data is being processed through our platform, you have the right to:

Request access to any data we hold that relates to your username;
Request erasure of your data from our systems;
Object to the processing of your data.

To exercise any of these rights, contact us at support@getstudioos.com. We will respond within 30 days. We may ask you to verify your identity by confirming ownership of the relevant platform username.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

Encryption of data in transit (TLS/SSL);
Access controls with authentication on all systems;
Regular security reviews of our infrastructure;
Secure server infrastructure hosted by reputable providers (DigitalOcean, Base44/AWS);
Minimal data collection — we only process data necessary for our services.

12. Children

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. The platforms we monitor are restricted to adults (18+) by their own terms of service. If we learn that we have collected personal information from a child under 18, we will delete that information as quickly as possible.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified to Platform Users via email or in-platform notification at least 14 days before taking effect. The “Last Updated” date at the top will always reflect the most recent revision. Your continued use of StudioOS after changes are published constitutes acceptance of the updated Privacy Policy.

14. Contact Us

For any questions, concerns, or data requests:

Data Protection Contact: support@getstudioos.com
General Support: support@getstudioos.com
Address: StudioOS, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Supervisory Authority

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk
Helpline: 0303 123 1113

If you are based in the EU, you may lodge a complaint with the relevant data protection authority in your member state.

1. Who This Policy Applies To

This policy applies to two categories of individuals:

a) Our Clients (“Platform Users”): Webcam studio operators and agencies who subscribe to our platform at getstudioos.com.

b) Monitored Individuals (“Data Subjects”): Users of publicly accessible webcam platforms whose publicly available usernames and activity data are processed through our platform.

2. How This Privacy Policy Applies

Regarding our use of your personal data, we are regulated as a “controller” under the following laws:

The General Data Protection Regulation (EU) 2016/679 (“GDPR”), which applies across the European Union and European Economic Area;
The UK Data Protection Act 2018 and the UK General Data Protection Regulation (“UK GDPR”);
The Privacy and Electronic Communications Regulations (“PECR”) that apply in the United Kingdom; and
The California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), which applies to California residents.

3. What Data We Collect

3.1 Data We Collect from Platform Users

When you register for and use our platform, we collect:

Account Information: Name, email address, company/studio name, billing address, login credentials, role within the studio;
Studio Data: Model names, cam platform usernames, shift schedules, room assignments, earnings data;
Payment Information: Processed securely via Stripe — we do not store card details. We retain payment tokens, card type, last four digits, and billing country for billing and fraud prevention;
Communications: Messages sent via built-in team chat, support queries;
Usage Data: Login history, feature usage, pages visited;
Technical Data: IP address, browser type, device information, operating system;
Cookie Data and Analytics: Via Google Analytics (see our Cookie Policy).

3.2 Data We Process About Monitored Individuals

Through our monitoring services, we process the following categories of data about users of publicly accessible webcam platforms:

Publicly displayed usernames on webcam platforms (e.g., MyFreeCams, Stripchat, CamSoda, LiveJasmin, Chaturbate, BongaCams);
Publicly visible room presence — whether a username appeared in a publicly accessible chat room;
Publicly visible activity indicators — such as tip amounts, chat participation, and VIP/subscriber status, all of which are publicly displayed on the respective platforms;
Timestamps of when the above data was observed;
Cross-platform presence — aggregation of publicly available usernames observed across multiple platforms.

4. How We Collect Data

4.1 Platform User Data

Collected directly from you when you register, subscribe, and use our platform.

4.2 Monitored Individual Data

We also use third-party data aggregation services (such as Statbate API) which similarly collect only publicly available data from these platforms.

5. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases:

5.1 Platform User Data

Contract performance (Article 6(1)(b)): Processing necessary to provide our SaaS platform and services as agreed in our Terms of Service.
Legitimate interest (Article 6(1)(f)): For analytics, security, fraud prevention, and service improvement.
Consent (Article 6(1)(a)): Where we obtain your explicit consent for marketing communications.
Legal obligation (Article 6(1)(c)): In particular cases required by law, such as tax compliance.

5.2 Monitored Individual Data

Legitimate interest (Article 6(1)(f)): We have conducted a Legitimate Interest Assessment (LIA) and determined that our processing of publicly available platform data serves a legitimate business purpose (providing operational intelligence tools to webcam studios) that does not override the rights of the data subjects, given that:
- All data processed is already publicly available to any visitor of the respective platforms;
- We process only pseudonymous usernames, not real identities;
- Our processing does not reveal information beyond what is already publicly visible;
- We implement strict acceptable use policies prohibiting harassment, stalking, or attempts to identify real persons;
- Data subjects can request erasure of their data at any time.

A copy of our Legitimate Interest Assessment is available upon request.

6. How We Use Data

6.1 Platform User Data

To provide, maintain, and improve our platform;
To process subscriptions and payments;
To communicate with you about your account and our services;
To ensure platform security and prevent fraud;
To comply with legal obligations;
To analyse the performance and facilitate the functionality of StudioOS;
To improve your experience by providing personalised services and recommendations.

6.2 Monitored Individual Data

To provide operational intelligence to our clients (webcam studios and agencies);
To generate alerts when publicly visible usernames are observed in monitored rooms;
To aggregate publicly available activity data for business analysis purposes.

We do not use monitored individual data for: direct marketing, profiling for automated decision-making, selling to third parties, or any purpose unrelated to our platform services.

7. Data Sharing

We share personal data with the following categories of recipients:

Stripe — Payment information for payment processing (US/EU);
Base44 (operated by Wix.com Ltd) — Platform data, client accounts for application hosting (United States);
Google Analytics — Anonymised usage data for website analytics (United States);
Telegram — Alert notifications for delivery of monitoring alerts to clients (Global);
Statbate API — Publicly available platform data for data aggregation from public sources (EU);
DigitalOcean — Monitoring data in transit for server infrastructure (Netherlands, EU);
With authorities after they make a request for your information, if there are legal grounds;
With other entities as part of a sale, merger, or change in control of StudioOS.

We do not sell personal data to any third party.

8. International Data Transfers

Some of our service providers are located outside the United Kingdom. Where data is transferred internationally, we ensure appropriate safeguards are in place:

United States: Transfers to US-based providers (Base44, Stripe, Google) are conducted under the UK-US Data Bridge and/or Standard Contractual Clauses (SCCs) as appropriate under UK GDPR.
European Economic Area (Netherlands): Covered by the UK adequacy decision for EEA countries.
Adequacy decisions issued by the European Commission or UK Government;
EU–US Data Privacy Framework (for transfers to certified US providers).

9. Data Retention

9.1 Platform User Data

Active accounts: Retained for the duration of your subscription plus 12 months after cancellation, to allow for account reactivation and access to historical data.
Payment records: Retained for 7 years as required by UK tax and accounting legislation.

9.2 Monitored Individual Data

Alert data and activity records: Retained for a maximum of 24 months from the date of collection, after which they are automatically deleted.
Deduplication records: Retained for 5 minutes (used solely to prevent duplicate notifications).

9.3 Deletion

Upon expiry of the retention periods set out above, data is permanently deleted from our systems. Backup copies may persist for up to 30 additional days before full deletion.

10. Your Rights

10.1 Rights of Platform Users

Under UK GDPR, you have the right to:

Access the personal data we hold about you;
Rectify inaccurate personal data;
Erase your personal data (“right to be forgotten”);
Restrict or object to processing of your data;
Data portability — receive your data in a structured, machine-readable format;
Withdraw consent at any time (where consent is the legal basis);
Lodge a complaint with the Information Commissioner's Office (ICO).

10.2 Rights of Monitored Individuals

If you believe your publicly available username or activity data is being processed through our platform, you have the right to:

Request access to any data we hold that relates to your username;
Request erasure of your data from our systems;
Object to the processing of your data.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

Encryption of data in transit (TLS/SSL);
Access controls with authentication on all systems;
Regular security reviews of our infrastructure;
Secure server infrastructure hosted by reputable providers (DigitalOcean, Base44/AWS);
Minimal data collection — we only process data necessary for our services.

12. Children

13. Changes to This Privacy Policy

14. Contact Us

For any questions, concerns, or data requests:

Data Protection Contact: support@getstudioos.com
General Support: support@getstudioos.com
Address: StudioOS, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Supervisory Authority

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk
Helpline: 0303 123 1113

If you are based in the EU, you may lodge a complaint with the relevant data protection authority in your member state.

Company Information

1. Who This Policy Applies To

2. How This Privacy Policy Applies

3. What Data We Collect

3.1 Data We Collect from Platform Users

3.2 Data We Process About Monitored Individuals

4. How We Collect Data

4.1 Platform User Data

4.2 Monitored Individual Data

5. Legal Basis for Processing

5.1 Platform User Data

5.2 Monitored Individual Data

6. How We Use Data

6.1 Platform User Data

6.2 Monitored Individual Data

7. Data Sharing

8. International Data Transfers

9. Data Retention

9.1 Platform User Data

9.2 Monitored Individual Data

9.3 Deletion

10. Your Rights

10.1 Rights of Platform Users

10.2 Rights of Monitored Individuals

11. Data Security

12. Children

13. Changes to This Privacy Policy

14. Contact Us

Supervisory Authority

Privacy Policy

Company Information

1. Who This Policy Applies To

2. How This Privacy Policy Applies

3. What Data We Collect

3.1 Data We Collect from Platform Users

3.2 Data We Process About Monitored Individuals

4. How We Collect Data

4.1 Platform User Data

4.2 Monitored Individual Data

5. Legal Basis for Processing

5.1 Platform User Data

5.2 Monitored Individual Data

6. How We Use Data

6.1 Platform User Data

6.2 Monitored Individual Data

7. Data Sharing

8. International Data Transfers

9. Data Retention

9.1 Platform User Data

9.2 Monitored Individual Data

9.3 Deletion

10. Your Rights

10.1 Rights of Platform Users

10.2 Rights of Monitored Individuals

11. Data Security

12. Children

13. Changes to This Privacy Policy

14. Contact Us

Supervisory Authority