◂ Virtual Studios Pro

Privacy Policy

DRAFT – have a lawyer review before publishing.

Last updated: [LAST_UPDATED_DATE]

Virtual Studios Pro ("we", "us"), [BUSINESS_ADDRESS], operates Virtual Studios Pro (the web app, desktop app, phone keypad and Stream Deck plugin). We are the data controller. Contact: [PRIVACY_EMAIL]. EU/UK representative (if required): [EU_REPRESENTATIVE_IF_REQUIRED].

Children

Virtual Studios Pro is not intended for children under 13 and we do not knowingly collect personal data from them. We ask for a date of birth before sign-in and block anyone under 13; we do not store the date of birth. If you believe a child under 13 has given us data, contact [PRIVACY_EMAIL] and we will delete it.

What we collect

  • Account data: your Google account email, name and profile ID when you sign in with Google; or, for access-key accounts, an internal account ID and a one-way hash of the key (never the key itself).
  • Approval and role data: whether an administrator approved your account and whether you are an administrator.
  • Security logs: sign-in events, failed access-key attempts, administrator actions, and the IP address and time of these events, used to prevent abuse.
  • Device linking: short link codes and control messages exchanged between your PC, phone, tablet and Stream Deck.
  • Google Sheet links: sheet addresses you add to Titles, which our server fetches on your behalf.
  • AI setup assistant (optional): when you press it, one still frame from your camera is sent to our AI provider to suggest studio settings. It is not used to train models by us.

What stays on your device

Camera, NDI, screen and Zoom video, recordings, replays, drawings, player names, player photos, logos and other pictures you add are processed on your own computer and saved in its local storage. They are not uploaded to our servers. Photos are re-drawn before use, which removes EXIF and location metadata.

Exception: when the host taps “Record for remote analysts” in Mobile Streaming, short program clips are uploaded so analysts holding the session code can replay them. These clips are deleted automatically after 7 days. Guests agree to being streamed and recorded on a consent screen before their camera turns on; AI face and speech analysis is a separate, optional choice.

Why we use it (legal bases)

  • To provide the service you asked for (contract).
  • To keep accounts secure and prevent abuse (legitimate interests).
  • To meet legal obligations.

Cookies and similar storage

We use only strictly necessary storage: your sign-in session and your saved settings. We do not use advertising, analytics, heatmap or session-replay tools. If we add optional analytics in future, they will stay off until you accept them in Cookie settings.

Service providers

We use a cloud hosting and database provider, an authentication provider (Google sign-in), an AI model provider (setup assistant only), and a public content network (jsDelivr) that serves the pose-tracking and name-reading program files when you use those features. These providers may process data outside your country, including in the United States, under appropriate safeguards such as Standard Contractual Clauses. Our online reseller Paddle.com is the Merchant of Record for purchases: it receives the data needed to sell plans and credits, manage subscriptions, take payment, handle tax and send invoices. We also share data with professional advisers and with authorities where the law requires. Virtual Studios Pro is the data controller for personal data processed through Virtual Studios Pro. We do not sell or share personal data for advertising.

How long we keep it

Account data is kept while your account exists. Security logs are kept for [LOG_RETENTION_PERIOD]. When an account is deleted we remove its account data, except logs we must keep for security or legal reasons.

Your rights

Depending on where you live (including the EU/UK GDPR, California CCPA/CPRA, South Africa POPIA, Nigeria NDPA, Kenya DPA and similar laws) you may ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Email [PRIVACY_EMAIL]. You can also delete your account yourself with the Delete account button in the app (it asks you to type your email address), and clear everything this app saved on this device from Cookie settings. You may also complain to your local data protection authority.

Security

Data is encrypted in transit; on the desktop app, sign-in tokens are kept in the operating system's encrypted storage. Offline access ends after 12 days without going online.

Changes

We will post updates here and change the date above.