Privacy Policy

What Changed in This Version

• A parent or guardian can now add their child's own email address so the child receives studio updates. Every message to a child also goes to the parent, and only the parent (or our support at the parent's request) can add or change it
• You can now choose, for each kind of notice, whether we also email or text it to you, and we now email you when your studio sends you a new message

Changes in version 2026-10-14

• Your QuickStudio account is now described separately from your studio's records. Your account is kept until you close it, or deleted after 2 years without use
• More ways to stop texts: in Settings, through your studio, or by emailing us. Only you can turn texts back on
• Texts carry only QuickStudio's wording and your studio's name
• Cookies and browser storage are described by purpose, and a new section explains how to keep your account safe
• We name IONOS as the host of our servers and backups, and we investigate problems using made-up data
• How we tell you about changes to this policy

Introduction

QuickStudio LLC ("QuickStudio," "we," "us," or "our") is a New Jersey limited liability company that provides studio management software for music, art, and coaching operators. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform at quickstudio.me and any related services.

By using QuickStudio, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

You can browse our public pages without providing any personal information. However, some information is necessary to use the platform itself — we cannot create or maintain an account for you without the basic account information described below.

QuickStudio is currently in beta. We are actively developing the platform, and our data practices, features, and this policy are subject to change as the product matures. We will update the policy version shown above whenever we make changes, per Section 12 below.

1. Information We Collect

Account Information

When a studio operator creates accounts for their team and clients, we collect:

• Full name, email address, and phone number
• Account role (manager, teacher, guardian, student, or payer)
• Login credentials (passwords are stored using one-way hashing and are never stored in plain text)

Student Information

Studio operators and guardians may provide information about students, including:

• Student name and date of birth, and school and grade if entered
• Enrollment status and instrument or discipline
• Lesson schedules, attendance records, and progress notes
• A student's own email address, if a parent or guardian adds one so the student receives studio updates, together with a record of which parent or guardian added it, what they chose to have sent, and when

Guardian and Payer Information

• Name, email address, and phone number
• Relationship to student (e.g., parent, legal guardian)

Billing and Payment Information

• Invoice details, payment amounts, and payment status
• Today, the only payment made through QuickStudio is a studio's subscription to QuickStudio. Families pay their studio directly, outside QuickStudio, and the studio may record that payment here
• Payment card processing is handled entirely by Stripe. We do not store, process, or have access to your full credit card number, CVV, or bank account details.

Communications

• SMS text messages sent through the platform
• Email notifications related to studio activity
• In-app messages exchanged between studio participants

Usage and Security Data

• Login timestamps and IP addresses (collected for security and fraud prevention)
• Browser type and device information (collected automatically via standard web server logs)
• The pages and API endpoints you access, the date and time of access, and the referring URL (collected automatically via standard web server logs and used for security monitoring and troubleshooting)

Waitlist Information

If you sign up for our waitlist before creating an account, we collect:

• Name, email address, and phone number
• Survey responses (e.g., biggest operational pain point, how you heard about us)

2. Cookies and Browser Storage

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics.

Like most websites, we store a small amount of information in your browser so the service works: to keep you signed in (on the app and on our help site, docs.quickstudio.me), and to remember your display preferences and a few interface choices. Sign-in information is removed when you sign out. None of it is used for tracking or advertising, or shared with anyone. You can remove it at any time by clearing your browser's site data for quickstudio.me, though doing so will sign you out and reset your preferences.

When bot protection is active on our public forms (such as signup), our bot-protection provider, Cloudflare, may set its own cookie as part of verifying that you are a human visitor (see Section 5 below).

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To operate the platform, manage schedules, track attendance, and facilitate communication between studio participants
• Notifications: To send lesson reminders, lesson changes and cancellations, new messages from your studio, new invoices, payment receipts and failed-payment notices, replies to your requests, and account and security notices, via SMS, email, or in-app messages. If a parent or guardian adds a student's own email address, we also email the student the updates the parent chose: QuickStudio's lesson reminders and lesson changes, messages from the studio, or both. Every message sent to a student also goes to the student's parents or guardians. We never email a student invoices, payment notices, or sign-in or account emails
• Billing: To generate invoices, track payment status, and process payments through our payment provider
• Security: To protect accounts, detect unauthorized access, and prevent fraud
• Product improvement: To understand how our platform is used and to improve features and performance
• Customer support: To respond to your questions, requests, and issues
• Legal compliance: To comply with applicable laws, regulations, and legal processes

4. SMS and Text Messaging

QuickStudio enables studio operators to send SMS text messages to their clients. For complete details about our SMS messaging practices, please see our SMS Consent Disclosure.

Key points:

• SMS consent is collected only by an opt-in checkbox, when you create or activate your account or later in Settings, and is not required as a condition of service
• Message types include a new message, a lesson change or reminder, a reply to a request, an invoice, and a payment update, and a one-time invitation from your studio with an activation code
• Message frequency is typically 10 to 30 messages per month, never more than 5 in a single day, depending on studio activity
• Texts from QuickStudio's number contain only wording written by QuickStudio. Nothing your studio or another user writes is sent to you by text; the only thing your studio entered that may appear is its name. To read a message or see details, you follow the link into your account
• Message and data rates may apply based on your mobile carrier plan
• You can opt out at any time by replying STOP to any message, or by unticking the text-message box in Settings; other ways are listed under "Opt-out of communications" below
• For help, reply HELP to any message or email support@quickstudio.me

We do not use SMS messaging for marketing purposes. We do not sell, rent, or share your phone number or opt-in status with third parties for their marketing purposes. Consent to receive SMS messages is not shared with any third party other than our messaging service provider (Twilio), which processes messages on our behalf.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

5. How We Share Your Information

We do not sell your personal information. We do not rent or trade your data with third parties for their own marketing purposes.

We do not share your studio's data with anyone except the service providers listed below, and only what each needs to do its job. When we investigate a problem, we reproduce it in a test studio with made-up data rather than sharing your data.

We share information only in the following limited circumstances:

With Your Studio

Studio operators (managers and teachers) can view the data associated with their own studio's participants, with one exception: a student's own email address, added by a parent, is visible only to that parent and to QuickStudio support. The studio sees only that the student receives messages by email. Each studio's data is isolated and not visible to other studios on the platform.

Service Providers

We use a small number of trusted third-party services to operate the platform:

• Stripe — for payment processing. Stripe receives the payment information necessary to complete transactions. See Stripe's Privacy Policy.
• Twilio — for SMS text message delivery. Twilio receives phone numbers and message content necessary to deliver messages. See Twilio's Privacy Policy.
• IONOS — hosts our servers and backups, and delivers our email notifications. Your data is stored on IONOS servers, and IONOS receives email addresses and message content necessary to deliver notifications. See IONOS Privacy Policy.
• Cloudflare — for bot protection on public forms (such as signup), when this protection is active. Cloudflare processes your IP address and browser characteristics solely to distinguish human visitors from automated abuse. See Cloudflare's Privacy Policy.

These providers are contractually obligated to use your information only to provide services on our behalf and to protect it in accordance with applicable law. Note that these providers retain data under their own retention schedules, which may be longer than the periods described in Section 8 — for example, payment processors retain transaction records for extended periods to meet their own financial-compliance obligations.

Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of QuickStudio, our users, or the public.

6. Data Security

We take reasonable technical and organizational measures to protect your personal information, including:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS)
• Password security: Passwords are hashed using industry-standard one-way algorithms and are never stored in plain text
• Credential encryption: Third-party service credentials (e.g., API keys for SMS and email providers) are encrypted at rest
• Tenant isolation: Each studio's data is logically isolated at the database level. Studios cannot access each other's data.
• Access controls: Role-based permissions ensure users can only access data appropriate to their role within a studio
• Infrastructure security: Our servers are secured with firewalls, intrusion detection, and regular security updates

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.

Keeping Your Account Safe

Your part matters too. Anyone who can use your device or browser while you are signed in, or who copies your sign-in from it, can act as you in QuickStudio. Please:

• Use a password you don't use anywhere else, and never share it or a sign-in code
• Keep your device, browser and its extensions up to date, and install only extensions you trust
• Sign out when you use a shared or public computer
• If a device is lost or you think someone else has used your account, change your password or press “Logout All Devices” in Settings, which signs out every device, and tell us at support@quickstudio.me

7. Feedback Submissions

When you submit feedback through the in-app Submit Feedback dialog and choose QuickStudio team as the recipient, we collect the following to help us triage and respond:

• The category you select and the free-text message you write
• Your email address if you provide one (or the email on your account, if you're logged in)
• The page URL you were on when you submitted — query-string parameters matching common credential names (token, code, key, secret, password, session, auth) are automatically redacted before the URL leaves your browser
• Your browser's user-agent string and the referring page
• Your IP address and the approximate geographic region it resolves to (country, region/state, city)
• The specific build of QuickStudio you were using (commit identifier + build timestamp), so we can reproduce the issue against the right code

Geographic resolution uses the DB-IP Lite database locally on our servers — your IP address is not sent to any third party.

Feedback sent to your studio manager (the other option in the dialog) is delivered as a regular in-app message to your studio's manager and follows the same rules as any other message in the system. It does not include geographic data.

You may request deletion of a specific feedback submission at any time by emailing support@quickstudio.me.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services to you and your studio. Specifically:

• Account data (your name, sign-in details, consent choices and settings): retained until you close your account. Your account does not depend on any one studio: if you leave a studio, or your studio leaves QuickStudio, you keep your account, and you can still use it with any other studio. An account that has had no sign-in, and no active place at any studio, for 2 years is deleted, after we email you a warning
• Studio records (lessons, attendance, invoices, messages and student records): kept for the studio that owns them, as described in our Terms of Service. Closing your own account, or its deletion for inactivity, does not delete a studio's records about you
• A student's own email address added by a parent: kept until the parent removes it or the student leaves the studio. When the student turns 18, we tell their parents, and the student chooses whether to keep receiving these emails. Until they choose, nothing changes, and they can stop them at any time. The record of who added it and what they chose is kept with the studio's records
• Our billing records: records of a studio's payments for its QuickStudio subscription are retained for a minimum of 7 years to comply with tax and financial reporting obligations
• Communication logs: SMS and email notification records are retained for up to 2 years for service continuity and dispute resolution
• Security logs: Login timestamps and IP addresses, including sign-ins to our help site, are retained for up to 1 year for security monitoring
• Help-site sign-in records: The record that keeps you signed in to docs.quickstudio.me is deleted 30 days after it ends, and an unused sign-in request is deleted a day after it expires
• Waitlist data: Retained until your account is created or you request deletion
• Feedback submissions: Retained for up to 24 months so we can track recurring issues and verify fixes. Deleted on request via support@quickstudio.me.

When data is no longer needed, we delete or anonymize it in accordance with our internal data management practices.

9. Children's Privacy

QuickStudio is a business tool designed for studio operators and adult guardians. We do not knowingly collect personal information directly from children under the age of 13.

Student information, which may include data about minors, is provided to the platform by studio operators and guardians acting in their capacity as the child's parent or legal guardian. Studio operators are responsible for obtaining appropriate consent from guardians before entering student information into the platform.

A child profile (kid mode), which a parent sets up so a child can use the app on the parent's account, adds nothing about the child beyond a PIN the parent chooses. Whatever a parent or studio enters about a child is protected the same way as all other data in this policy, is used only to provide the service, and is never used for advertising or shared beyond the providers in Section 5.

A parent or guardian may add their child's own email address so the child receives studio updates. Only the parent or guardian, or our support at their request (confirmed by an email to the parent's address on file), can add, change or remove it. Studio staff cannot. We confirm the address with a code the parent enters, so the child does not need to visit QuickStudio. Every message we send a child also goes to the child's parents or guardians. Emails to a child contain no links and ask for nothing, and replies to them are not read or kept.

If you are a parent or guardian and believe that your child's information has been entered into QuickStudio without your consent, please contact us at support@quickstudio.me and we will promptly delete the information.

Our intent regarding COPPA: as QuickStudio's platform and its features involving children's information mature, we intend to bring our practices into compliance with the Children's Online Privacy Protection Act (COPPA), including for any feature that lets a child interact with the platform directly under a parent or guardian's account. We are not currently claiming COPPA compliance or certification — this is a stated intent and an ongoing obligation we are working toward, not a completed one, and we will update this policy as our compliance posture develops.

10. Your Rights

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you
• Correction: You may request that we correct inaccurate or incomplete personal information
• Deletion: You may request that we delete your personal information, subject to our legal retention obligations
• Data portability: You may request a machine-readable export of your personal information
• Opt-out of communications: You can stop all text messages by replying STOP to any text, or by unticking the text-message box in Settings. In Settings you can choose, for each kind of notice, whether we also send it by email or by text, and you can turn lesson reminders and notices about new messages off entirely; you'll still see them in QuickStudio. Other notices are part of the service and always come by email: lesson changes and cancellations, replies to your requests, invoices, payment receipts, and sign-in or security notices. You can choose to get all but sign-in and security notices by text as well. You can also ask your studio to turn texts or these notices off for you, or email us at support@quickstudio.me to stop all texts. Only you can turn texts back on
• A child's email: a parent or guardian can see, change or remove their child's email address at any time on the family page, and any parent or guardian of the child can turn the child's emails off
• When a student leaves the studio: their parent or guardian can download the student's lesson and attendance history, practice log, and events and recitals for as long as they can still sign in to the studio, and usually for 90 days after the studio ends their access. The page shows the last date. A studio may end a parent's access at once, with no download period, where continued access would be unsafe

To exercise any of these rights, please contact us at support@quickstudio.me. We will respond to your request within 30 days.

If you are a resident of a state with specific privacy legislation (such as the California Consumer Privacy Act or similar laws), you may have additional rights. Please contact us and we will work with you to address your request in accordance with applicable law.

11. Third-Party Links

Our platform may contain links to third-party websites or services (such as Stripe for payments). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with your personal, financial, or other information.

12. Changes to This Policy

We update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Each revision is identified by the policy version shown at the top of this page, with its effective date. When we make material changes, we will update the version and effective date and post a short summary of what changed at the top of this page. Where practicable, we post changes at least 30 days before they take effect. We may also show you a notice in the app when you next sign in.

If you do not agree to an updated policy, you must stop using QuickStudio; you may contact us at support@quickstudio.me to close your account.

We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: