Privacy Policy

Last updated 21 August 2026.

Studio is not yet open to the public. This policy describes how the service handles personal information and takes effect for anyone who uses Studio once it launches.

This policy explains what personal information Studio collects, why, who it is shared with, and what you can do about it. It is written to the Australian Privacy Principles in the Privacy Act 1988 (Cth). We comply with the APPs regardless of whether the small-business exemption would apply to us.

What we collect

If you book as a customer

Your email address, and your phone number and name if you provide them.
A cryptographic hash of your password. We never store the password itself.
Your bookings: which business, which service, which staff member, when, and what you paid.
Any note you attach to a booking, and any message you send a business through Studio.
Reviews you write.
Your approximate location, if you allow it, and only to sort search results by distance. We do not keep a location history.

If you run a business on Studio

Your business name and, where applicable, ABN.
Your locations, staff, services, prices and opening hours.
Your bookings, earnings and payouts.
Notes and tags you record about your own clients. These are yours; Studio stores them on your behalf and does not show them to the client.

Payment information

Studio never sees or stores your card number. Card details are collected directly by Stripe, our payment processor, and Studio receives only a token, the amount, the outcome and the last four digits. We could not disclose a card number if we were asked to, because we do not have one.

Why we collect it

To let you find and book appointments, to let businesses run their bookings and get paid, to prevent fraud and abuse, and to meet our legal obligations — including record-keeping for tax and, where it applies, reporting to the Australian Taxation Office under the Sharing Economy Reporting Regime.

We do not sell personal information. We do not use it for advertising by third parties.

Who it is shared with

The business you book with: Your name, contact details and booking details, so they know who is coming and when. This is the point of the service.
Stripe: Payment processing. Stripe is bound by its own privacy terms and by PCI DSS.
Our infrastructure providers: Hosting and database services that store the data on our behalf, under contract.
The Australian Taxation Office: Seller transaction information, where reporting is required by law.
Law enforcement: Only where we are legally compelled.

Where it is stored

Data is stored on servers operated by our infrastructure providers. Some providers may process data outside Australia. Where that happens we take reasonable steps to ensure the recipient handles it consistently with the APPs.

How long we keep it

Booking and payment records are kept for seven years, as Australian tax and reporting law requires. Message history is kept while your account is open. Payment-processor event records are kept for 90 days and then stripped of personal information, leaving only the record that a transaction occurred.

Deleting your account

You can delete your account from the app. When you do, your name, email, phone number and profile are permanently anonymised. Your reviews remain but are no longer attributed to you.

Financial records survive deletion. We are legally required to keep them, and they are retained in a form that no longer identifies you where that is possible. We would rather tell you this plainly than imply a deletion is more complete than it is.

Access and correction

You can view and correct your details in the app, and you can request a copy of the personal information we hold about you by emailing support@join-studios.com. We will respond within 30 days.

Security

Passwords are hashed with argon2id. Sessions use short-lived tokens that are rotated, and a token presented twice invalidates the whole session — so a stolen token is a self-limiting problem. Traffic is encrypted in transit.

If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Cookies

This website sets no cookies and runs no analytics or advertising trackers. The Studio apps store a session token on your device so you stay signed in.

Complaints

Email support@join-studios.com. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change this policy we will update the date at the top, and we will tell you in the app if the change is significant.