Privacy Policy

ItsMyStudio Accounts stores data needed for authentication, account security, and user-requested exports.

Stored data

User ID, name, email, verification status, avatar, legal-acceptance timestamps, marketing preference, linked login methods, OAuth tokens, active sessions, two-factor configuration, and security events. Active sessions may include an IP address and user agent; security-event metadata stores hashed versions.

Sensitive data

Password hashes, provider credentials, OAuth tokens, two-factor secrets, and backup-code material are never returned by account or export APIs.

Requests

Authenticated users can export their data or permanently delete their account from account settings.