Privacy notice

1. Platform and photography studio

For your account and platform operation, contact Studivon, the service at studivon.com. Contact support or send requests about your data to info@studivon.com, the service support address.

The photographer or studio collecting client data determines the photography service's purposes and acts as its data controller. Studivon provides tools to manage it. If you fill in a studio's form, also read the privacy notice shown there and contact the studio about your case.

2. Data processed and purposes

• Account and access: name, email, profile details, protected credentials, sessions and permissions, to create and protect access to your studio.
• Studio activity: client records, contact details, requests, appointments, quotes, contracts, signatures, recorded payments, notes and uploaded documents, to carry out the operations requested by users.
• Galleries and client archive: photos, videos, file sizes, expiry dates and linked client account, to display the gallery, allow downloads and manage any retention purchased by the client.
• Purchases: amounts, calculated taxes, payment identifiers, refunds and the photographer's share, to manage purchases, accounting and disputes. Online payments are handled by Stripe; Studivon does not store full card details.
• Communications: recipient addresses, message content and status needed to provide the service, such as access, appointments and shared documents.
• Security and support: operation records and technical information needed to prevent unauthorised access, diagnose errors and respond to support requests.

Account management and requested services are based on performance of the relationship with the user and pre-contractual steps; statutory requirements are based on the relevant obligations. Service protection relies on the legitimate interest in security, respecting data subjects' rights. External service connections are optional and require your authorisation.

Required data is needed to handle the requested operation. Other fields are optional. Reading a privacy notice does not constitute consent to advertising communications. Studivon does not use Calendar connections for advertising or automated decisions with legal effects on individuals.

3. Google sign-in and Google Calendar

Google sign-in uses your verified email and account identifier to recognise you. Studivon does not receive your Google password. Signing in with Google does not automatically connect your calendar: this is enabled separately from Settings → Connected calendars.

If you connect Calendar, Studivon receives the account email and ID, authorisation tokens and accessible calendars, including name, time zone and permissions. It reads events to display them and calculate busy times. The local copy includes IDs, title, location, start and end, all-day status, recurring-event references and Google links. Descriptions and participants are not stored in the local copy, though they may be temporarily processed in responses from Google.

Choose which calendars to display, which to use for availability and where to save appointments. On connection, detected calendars are initially visible and used for availability; a writable calendar is selected as the destination where available. You can change these preferences.

To sync an appointment, Studivon sends Google its title, location, dates, times, time zone, status and a CRM reference. It can create a Google Meet link for video meetings. Sync does not add guests or request participant notifications. Clients choosing a time see availability without titles or details of your Google events.

Google data is used for the described features. It is not sold, used for advertising or transferred to AI models. Its use and transfer are limited under the Google API Services User Data Policy, including the Limited Use requirements.

4. Who can access your data

CRM data belongs to its studio. Owners, administrators and collaborators access it according to their permissions; clients access content shared with them. Calendar connections are managed by studio owners and administrators.

Studivon uses Cloudflare for hosting and storage. Stripe handles online payments and photographer transfers; Google is involved when you choose Google login or Calendar. Email delivery services and other configured integrations receive the data required for their functions. Data may also be processed for support and legal obligations.

Providers may operate in several countries. You can ask the service contact about recipients, processing locations and safeguards applicable to transfers outside the European Economic Area. Studio contacts and calendars are not intended for publication.

5. Protection and retention

Studivon uses HTTPS connections, access controls and data separation between studios. Passwords are stored as hashes and Google connection tokens are protected by application encryption.

Data is retained to manage the service, cases and any administrative obligations or protection of rights. The period depends on the data category and purpose; closing a case or suspending a studio does not cause automatic deletion. To request deletion or information about retained data, contact the relevant studio or Studivon support.

New gallery photos and videos stay online until the studio's chosen date, up to 36 months from first publication. A 30-day download period follows, then files are deleted. If the client purchases an archive, files are retained for 24 months per purchase; without renewal, another 30-day download period precedes deletion. Payment records and data required for administrative obligations may be retained separately for the applicable periods.

Calendar connection data and event copies remain in the CRM until the connected account is removed, without a general automatic expiry. Hiding a calendar does not delete retained data.

6. Disconnecting Google

From Settings → Connected calendars → Remove account, Studivon removes the connection tokens, references to that account's calendars and copies of imported events from the CRM. It also sends Google a revocation request. You can check or revoke access directly in your Google Account connections.

Original events in Google Calendar remain available. CRM appointments and existing Google or Meet references are also kept. Revoking access only from Google does not automatically delete data already held in Studivon.

7. Your rights and data copies

You may request access, correction, deletion, restriction or portability of your data and object to processing where allowed by law. Where processing relies on consent, you may withdraw it without affecting prior processing. Requests are verified and assessed against applicable retention obligations.

You can download your contacts from your studio on the Clients and the quote archive on the Quotes. For further information or requests, write to info@studivon.com. If your request concerns a photography service, also specify the studio managing it.

You can lodge a complaint with the Italian data protection authority or the competent supervisory authority.

8. Cookies and updates

The service uses technical cookies for sign-in, sessions and security, as well as local interface preferences. External integrations also follow their providers' information. This page is updated when features or processing methods change; its version appears at the beginning.