Privacy Policy

Last updated: August 27, 2026

This Privacy Policy explains how Proto Studio, Inc. ("Proto Studio", "we", "us", or "our") collects, uses, shares, and protects information from our customers ("you" or "your") in connection with the cloud platform services we provide.

Data Collection and Use

We collect the following types of information from our customers:

Account Information: Includes name, address, timezone, IP address, email addresses, and phone numbers.
Billing Information: Includes tax ID numbers (where applicable), payment information, and billing address.
General Usage Information: We may collect data on how our services are accessed and used ("Usage Data"). This may include approximate location information derived from IP address for security, localization, and service operations.

This information is collected to provide our cloud platform services, administer billing, handle customer service inquiries, ensure platform security, improve service quality, and personalize services.

We Do Not Sell Your Personal Information

We do not sell your personal information to third parties. Our commitment to your privacy is paramount, and we believe in building a trustworthy relationship with our customers.

We also do not share your personal information for cross-context behavioral advertising as that term is used in certain U.S. state privacy laws.

Change of Ownership

In the event that ownership of Proto Studio changes (for example, acquisition by another company), your personal data may be transferred to the acquiring entity. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

Securing Your Account

We may use your contact information to help secure your account. This may include sending emails, text messages, and automated voice calls to the phone number or email address associated with your account.

Message frequency varies. Message, data, and voice rates may apply.

We do not sell or share mobile phone numbers or SMS opt-in information with third parties or affiliates for marketing or promotional purposes.

Children's Privacy

Proto Studio is a general-audience service and is not directed to children under 13 years of age. Children under 13 may not create an account, submit personal information, or otherwise use Proto Studio.

We do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent as required by the Children's Online Privacy Protection Act ("COPPA"). If we learn that we have collected personal information from a child under 13 without the required consent, we will take reasonable steps to delete that information and may close or restrict the associated account.

If you are a parent or guardian and believe that a child under 13 has provided personal information to Proto Studio, please contact us at https://proto.studio/contact/ so we can review and, where appropriate, delete the information.

Data Sharing and Disclosure

We share personal information only as needed to provide, secure, support, and operate Proto Studio, or as otherwise described in this Privacy Policy.

We engage with various subprocessors for operational purposes. A list of these subprocessors is available at https://proto.studio/legal/subprocessors/.
We will comply with valid legal requests as required by applicable law. Additionally, information may be shared:
- As part of a public profile, if the user opts to make some information public.
- When users interact with other users on our platform (e.g., invitations or social functionality), including sharing names and company information.

Security Measures

We implement reasonable security measures designed to protect customer data, including:

Encryption of data in transit and at rest to help protect personal data from unauthorized access or disclosure.
Access controls to ensure that only authorized personnel have access to personal data, based on the principle of least privilege and through secure authentication mechanisms.
Network security measures, including firewalls, intrusion detection, and prevention systems, to safeguard against unauthorized access to or attacks on network systems.
Security reviews and testing to assess the effectiveness of security measures and identify potential vulnerabilities. These reviews may include internal testing, automated scanning, external review, or independent third-party testing depending on the nature of the system and risk.
Data protection impact reviews where appropriate for higher-risk processing activities.
Employee training on data protection and security to ensure that all personnel are aware of their responsibilities in protecting personal data and are trained in security best practices.
Responsible Disclosure Policy allowing for the anonymous disclosure of security issues and encouraging responsible and ethical disclosure. Security issues can be reported to us via https://proto.studio/security/.

Data Retention and Deletion

We retain and delete customer data according to the purpose of the data, our service obligations, and applicable legal, security, and compliance requirements.

Customer data is retained for as long as necessary to provide our services, and no longer, except as required for security or compliance purposes.
Customers may request deletion of their data by visiting https://proto.studio/contact/.

Rights of Individuals

Customers have the right to:

Request access to personal data we control directly about them.
Correct any inaccuracies in their data via a self-service interface, except for historical data.
Request deletion or anonymization of their data. Note: This applies only to data we control directly, not to data processed on behalf of others. For data where we act as a processor, the customer must contact the controller directly.

U.S. State Privacy Rights

Depending on where you live and whether a particular privacy law applies to Proto Studio, you may have additional rights regarding your personal information. These rights may include the right to:

Know or confirm whether we process personal information about you.
Access or receive a copy of personal information we maintain about you.
Correct inaccurate personal information.
Delete personal information, subject to legal and operational exceptions.
Opt out of the sale of personal information, sharing of personal information for cross-context behavioral advertising, targeted advertising, or certain profiling.
Limit certain uses or disclosures of sensitive personal information where applicable.
Appeal a decision we make about a privacy request, where applicable law provides an appeal right.
Exercise your privacy rights without unlawful discrimination or retaliation.

You may submit privacy requests by visiting https://proto.studio/contact/. We may need to verify your identity before completing a request. If you submit a request on behalf of another person, we may require proof that you are authorized to act for that person.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. If our practices change, we will update this Privacy Policy and provide any notices or opt-out methods required by applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available at https://proto.studio/legal/privacy/ with the relevant timestamp of the latest update.

GDPR and International Data Transfers

Proto Studio is operated from the United States and is not currently launched or marketed as a generally available service in the European Economic Area, the United Kingdom, or Switzerland. Where applicable, we seek to apply privacy, security, and data processing practices that meet stricter legal requirements, including GDPR principles.

For personal data submitted to, stored in, or processed through customer-created projects, applications, APIs, databases, storage, or similar resources, Proto Studio generally acts as a processor or service provider on behalf of the customer. The customer is responsible for acting as the controller or business for that data, including determining the lawful basis for processing, providing required notices, obtaining required consents, responding to data subject requests, and ensuring that the customer's use of Proto Studio complies with applicable privacy and data protection laws.

For personal data we collect directly for our own business purposes, such as account administration, billing, customer support, security, service operations, and communications, Proto Studio acts as the controller or business. All data for which we are the controller is currently stored within the United States.

Some customer-configured services may allow customers to select other storage regions or processing locations. If you are located in the European Economic Area, the United Kingdom, or Switzerland, or if you need GDPR-specific terms for your organization, please contact us at https://proto.studio/contact/ before using Proto Studio for regulated personal data.

Cookie Policy

We use cookies and similar technologies on our website and platform to provide, secure, and operate our services.

We use cookies for the following purposes:

Essential Cookies: These cookies are essential to provide you with services available through our platform and to use some of its features, such as access to secure areas. Because these cookies are strictly necessary to deliver the services, you cannot refuse them without impacting how our services function.

We may update this Cookie Policy to reflect changes to our cookie practices. We encourage you to periodically review this page for the latest information on our cookie practices.