Privacy Policy

1. Data collected

When you register or use Studock, we collect the following data:

• Identity data: name, email address, profile photo (optional).
• Connection data: login date/time, IP address, browser type.
• User content: documents, folders, templates created or edited on the platform.
• Payment data: for Premium subscriptions, payment data is handled by our secure provider (Stripe). We do not store your banking details.

2. How we use your data

Your data is used to:

• Create and manage your user account.
• Provide platform features (document creation, collaboration, templates).
• Improve the quality and security of our services.
• Send you account-related notifications (security, shares).
• Meet our legal obligations.

We never sell your personal data to third parties.

3. Legal bases for processing

We process your data on the following legal bases (GDPR):

• Contract performance: to provide the service you signed up for.
• Consent: for marketing communications (you can withdraw consent at any time).
• Legitimate interest: to improve our services and ensure security.
• Legal obligation: to comply with applicable laws.

4. Data retention

• Account data is kept as long as your account is active.
• Upon account deletion, your personal data is deleted within 30 days.
• Billing data is retained for 10 years in accordance with legal accounting obligations.
• Connection logs are kept for 12 months.

5. Third-party services

Studock uses third-party services for its operation:

• Google OAuth: authentication via your Google account (transmitted data: email, name, profile photo). Governed by Google's Privacy Policy.
• Stripe: Premium payment processing. Governed by Stripe's Privacy Policy.

6. Your rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Right of access: obtain a copy of your personal data.
• Right of rectification: correct inaccurate data.
• Right of erasure: request deletion of your data.
• Right of portability: receive your data in a structured format.
• Right to object: object to certain processing.
• Right to restriction: request suspension of processing.

To exercise these rights, contact us at: privacy@studock.com

7. Security

Your data is hosted on secure servers. Passwords are hashed with bcrypt. Communications are encrypted via HTTPS. Organisational and technical measures are in place to prevent unauthorised access.