Information we collect
- Account data — email address, authentication identifiers and login credentials used to create and secure your account.
- App data — prompts, notes, details/tags, racks, collections, swatches and other content you save in The Gilded Studio. This data is stored securely on our servers so you can access it across devices and keep it backed up. It is not stored only on your local device.
- Purchase information — when you buy The Gilded Studio, payment is processed by our online reseller and Merchant of Record, Paddle.com Market Ltd ("Paddle"). We do not collect or store your payment card details ourselves. Paddle handles checkout, billing, tax, invoicing, fraud prevention and refunds, and its privacy notice governs how your payment data is processed.
- Contact information — if you email us for support, we collect your name, email address and the contents of your message, solely to respond to you.
- Usage and technical data — IP address, device and browser information, log and telemetry data, and storage usage. We use this to keep the App secure, reliable and performant.
- Marketing preferences — where you opt in to receive marketing communications.
- Website analytics (if applicable) — if you visit our website or sales page, we may use basic analytics tools to understand traffic. These tools may use cookies. You can control cookies through your browser settings.
How we use information
We use the information above only to: provide and maintain the App, store and sync your saved content, process and record your purchase, provide customer support, send purchase-related communications, keep the service secure, and improve the App and our marketing.
Legal basis for processing
We process personal data on the following legal bases:
- Performance of our contract with you — account creation, storing your content, purchase records and customer support.
- Legitimate interests — service security, fraud prevention, bug fixing, product improvement and supporting customers.
- Compliance with legal obligations — keeping accounting and tax records.
- Your consent — marketing communications, which you may withdraw at any time.
Who we share data with
We never sell your personal information. We share it only with:
- Paddle — our Merchant of Record for payment processing, subscription management, tax compliance, invoicing, fraud prevention and refunds. Paddle acts as a data controller in its own right for the payment data it processes.
- Service providers and subprocessors — hosting, database, storage, email delivery and analytics providers that process data on our instructions.
- Professional advisers — legal, accounting and tax advisers where necessary.
- Authorities — where we are required to disclose data by law or to protect our legal rights.
Some of these providers may process data outside your country. Where data leaves the UK or EEA, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.
What we don't do
We do not sell your personal information. We do not use your saved prompts or content for training generative AI models. We do not collect or store your payment card details.
How long we keep your data
- Account and content data — for as long as your account is active, then deleted or anonymised within 90 days of account closure or of your deletion request.
- Support correspondence — up to 24 months after the enquiry is resolved.
- Purchase and transaction records — up to 7 years, as required by accounting and tax law.
- Security and server logs — up to 12 months.
When data is no longer needed for these purposes, we delete or anonymise it.
Your rights
Depending on where you live, you may have the right to access, correct, delete, export (port), restrict or object to our processing of your personal data, and to withdraw any consent you have given. To exercise these rights, contact us at support@thegildedstudio.app; we will respond within one month. If you are in the UK or EEA, you also have the right to lodge a complaint with your local supervisory authority.
Security
We apply appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and row-level access rules that scope every record to its owner. No online service is, however, 100% secure.
Cookies and tracking
We use essential cookies to keep you signed in and maintain session security, and limited analytics cookies to understand how the service is used. We do not use third-party advertising cookies. You can manage or block cookies through your browser settings; blocking essential cookies will prevent you from signing in. Paddle may also set cookies during checkout as described in its privacy notice.
Children
The Gilded Studio is not intended for children under 13. We do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy from time to time. Continued use of the App after changes means you accept the updated policy. When we do, we will revise the "Last updated" date at the top of this page.