Privacy Policy

This Privacy Policy explains how Proto Studio, Inc. ("Proto Studio", "we", "us", or "our") collects, uses, shares, and protects information from our customers ("you" or "your") in connection with the cloud platform services we provide.

Company Information

For any privacy-related inquiries, please contact us at our dedicated contact page: https://proto.studio/contact/. This page also includes our mailing address for direct correspondence.

Data Collection and Use

We collect the following types of information from our customers:

• Account Information: Includes name, address, timezone, IP address, email addresses, and phone numbers.
• Billing Information: Includes tax ID numbers (where applicable), payment information, and billing address.
• General Usage Information: We may collect data on how our services are accessed and used ("Usage Data"). This includes collecting geolocation data for the purpose of enhancing security and personalizing the service.

This information is collected to provide our cloud platform services, administer billing, handle customer service inquiries, ensure platform security, improve service quality, and personalize services.

We Do Not Sell Your Personal Information

We do not sell your personal information to third parties under any circumstances. Our commitment to your privacy is paramount, and we believe in building a trustworthy relationship with our customers.

Change of Ownership

In the event that ownership of Proto Studio changes (for example, acquisition by another company), your personal data may be transferred to the acquiring entity. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

Data Sharing and Disclosure

• We engage with various subprocessors for operational purposes. A list of these subprocessors is available on our website.
• We will comply with all legal requests as required by applicable law. Additionally, information may be shared:
  • As part of a public profile, if the user opts to make some information public.
  • When users interact with other users on our platform (e.g., invitations or social functionality), including sharing names and company information.

Security Measures

We implement strict security measures to protect customer data, including:

• Encryption of data in transit and at rest to ensure that personal data is protected from unauthorized access or disclosure.
• Access controls to ensure that only authorized personnel have access to personal data, based on the principle of least privilege and through secure authentication mechanisms.
• Network security measures, including firewalls, intrusion detection, and prevention systems, to safeguard against unauthorized access to or attacks on network systems.
• Regular security audits and penetration testing conducted by independent third parties to assess the effectiveness of security measures and identify potential vulnerabilities.
• Data protection impact assessments for high-risk processing activities to systematically evaluate the impact of processing activities on the protection of personal data.
• Employee training on data protection and security to ensure that all personnel are aware of their responsibilities in protecting personal data and are trained in security best practices.
• Responsible Disclosure Policy allowing for the anonymous disclosure of security issues and encouraging responsible and ethical disclosure. Security issues can be reported to us via https://proto.studio/security/.

Data Retention and Deletion

• Customer data is retained for as long as necessary to provide our services, and no longer, except as required for security or compliance purposes.
• Customers may request deletion of their data by visiting https://proto.studio/contact/.

Rights of Individuals

Customers have the right to:

• Request access to all data we have about them.
• Correct any inaccuracies in their data via a self-service interface, except for historical data.
• Request deletion or anonymization of their data. Note: This applies only to data we control directly, not to data processed on behalf of others. For data where we act as a processor, the customer must contact the controller directly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available at https://proto.studio/legal/privacy/ with the relevant timestamp of the latest update.

GDPR and International Data Transfers

All data for which we are the controller is stored within the United States. Our commitment to GDPR compliance is reflected in our practices and the measures outlined above.

Cookie Policy

We use cookies and similar technologies on our website to enhance your user experience, understand site usage, and offer tailored services. By using our site, you consent to the use of cookies in accordance with this policy.

We use cookies for the following purposes:

• Essential Cookies: These cookies are essential to provide you with services available through our platform and to use some of its features, such as access to secure areas. Because these cookies are strictly necessary to deliver the services, you cannot refuse them without impacting how our services function.

We may update this Cookie Policy to reflect changes to our cookie practices. We encourage you to periodically review this page for the latest information on our cookie practices.