Privacy Policy

We respect your privacy.

We also believe privacy policies should be understandable by actual humans.

This policy explains what information we collect, how we use it, who we share it with, and the choices available to you.

If you have questions at any time, email us at carey@careyworks.com.

Studio is operated by CareyWorks, LLC ("careyworks," "we," "our," or "us").

By creating an account, submitting information, or using Studio, you consent to the practices described in this Privacy Policy.

1. What We Collect

We collect only the information necessary to operate Studio, provide our services, improve reliability, and communicate with customers.

Account Information

When you create an account, we may collect:

• Name
• Email address
• Password (stored in encrypted form)
• Authentication information from Google or Microsoft if you choose OAuth sign-in

We do not store passwords in plain text.

Payment Information

Payments are processed through Stripe.

We do not store complete credit card information.

We may retain:

• Transaction dates
• Transaction amounts
• Product purchased
• Billing history
• Last four digits of a payment card when provided through Stripe records

This information is retained for accounting, tax, fraud prevention, and customer support purposes.

Voice and Intake Data

Studio is designed around voice-first intake and content synthesis.

We may collect:

• Audio recordings
• Voice responses
• Transcripts
• Structured intake responses
• Notes generated during intake

These materials help create and support your Persona Brief.

Uploaded Content

You may choose to provide additional materials to improve the quality of your brief and platform outputs.

Examples include:

• Resumes
• LinkedIn profiles
• PDFs
• Personal biographies
• Website copy
• Articles
• Presentations
• Writing samples
• Documents
• Notes
• Strategic plans
• Other files you choose to upload

We process these materials solely to provide Studio services to you.

Persona Briefs and Generated Content

We collect and store:

• Persona Briefs
• Brief revisions
• Content drafts
• Voice anchors
• Positioning recommendations
• Content pillars
• Platform-generated outputs

This information is necessary for Studio functionality.

Usage Information

We collect limited usage data including:

• Login activity
• Feature usage
• Pages viewed
• Session activity
• Device and browser information
• Error logs
• Performance diagnostics

This helps us improve reliability, troubleshoot issues, and understand product usage.

Communications

If you contact us, we may collect:

• Emails
• Support requests
• Customer service communications
• Feedback submissions

2. What We Do Not Collect

We do not intentionally collect:

• Government identification numbers
• Banking credentials
• Medical records
• Protected health information
• Biometric identifiers beyond voice recordings you voluntarily provide
• Social media activity outside content you intentionally upload
• Contact lists
• Calendar information
• Private messages
• Third-party inbox data

We do not scrape your accounts.

We do not monitor your activity outside Studio.

3. Your Responsibility for Uploaded Content

By uploading recordings, documents, profiles, resumes, PDFs, presentations, or other materials to Studio, you represent that:

• You own the materials, or
• You have authority to provide them

You also represent that any third-party information included in those materials has been shared in compliance with applicable privacy, confidentiality, contractual, and legal obligations.

Please avoid uploading highly sensitive information unless necessary for your intended use of the platform.

Examples include:

• Medical records
• Social Security numbers
• Government identification documents
• Banking credentials
• Confidential legal materials
• Trade secrets you are not authorized to share

4. How We Use Information

We use collected information primarily to provide Studio services.

Examples include:

• Creating Persona Briefs
• Generating content
• Supporting subscriptions
• Authenticating users
• Processing payments
• Providing customer support
• Maintaining platform functionality
• Improving reliability
• Detecting abuse and fraud
• Complying with legal obligations

5. How We Communicate With You

We may send:

Transactional Communications

These include:

• Account notices
• Security notifications
• Billing notices
• Service updates
• Product functionality communications

These communications are considered necessary to provide Studio.

Optional Communications

If you opt in, we may send:

• Product updates
• Feature announcements
• Educational content
• Studio-related marketing communications

You may unsubscribe at any time.

6. What We Do Not Do With Your Data

We do not:

• Sell your information
• Sell your recordings
• Sell your transcripts
• Sell your uploaded content
• Sell your Persona Briefs
• Share your information with advertisers
• Build advertising profiles about you
• Use your data for behavioral advertising

Most importantly:

We do not use your recordings, transcripts, uploaded materials, briefs, generated content, or platform activity to train artificial intelligence models.

This includes:

• Our own systems
• Third-party AI providers
• Future machine-learning products

Your content remains associated with your account and is used solely to provide services to you.

We do not pool customer content into shared training datasets.

We do not use one customer's information to improve another customer's brief.

Your voice is yours.

Your brief is yours.

7. Who We Share Information With

We share information only with service providers necessary to operate Studio.

Current categories include:

AI Providers

Anthropic

Used for synthesis, analysis, and content generation.

Anthropic may receive transcripts, uploaded materials, and other inputs necessary to generate outputs.

Anthropic does not train its models on inputs or outputs from commercial API usage per its standard API terms.

OpenAI

Used for voice transcription via the Whisper API.

OpenAI may receive audio recordings and related inputs required for transcription services.

OpenAI does not use commercial API data to train its models by default per its standard API terms.

Application Hosting

Lovable

Hosts the Studio web application. Lovable processes only the information necessary to deliver the platform.

Database and Authentication

Supabase

Provides database, authentication, and storage infrastructure for Studio. Supabase processes account information, application data, and stored content necessary to operate the platform.

Domain and Network Infrastructure

Cloudflare

Provides DNS and related network services for careyworks domains, including the email subdomain. Cloudflare processes only the technical information necessary to route traffic.

Email Infrastructure

Microsoft 365

Provides business email services for careyworks. Email correspondence to and from carey@careyworks.com is processed through Microsoft 365.

Transactional Email Provider

Studio uses a transactional email service to deliver account-related communications, including welcome messages, billing notices, brief readiness notifications, and lifecycle communications. The transactional email provider processes email addresses and message content necessary to deliver these communications.

Payment and Billing Providers

Stripe

Processes consumer-tier payment transactions and related billing information for Studio Brief, Studio Brief + Session, and Studio Subscription purchases. Payment information is governed by Stripe's privacy and security practices.

FreshBooks

Used for invoicing in business-to-business arrangements, including retainer-tier engagements and any agency licensing relationships. FreshBooks processes billing information for those arrangements only.

Security and Error Monitoring Providers

We may use providers that receive limited technical information for:

• Error reporting
• Security monitoring
• Platform diagnostics
• Abuse prevention

8. Legal Disclosures

We may disclose information if we reasonably believe disclosure is necessary to:

• Comply with legal obligations
• Respond to court orders
• Respond to lawful government requests
• Protect rights and safety
• Prevent fraud
• Enforce our agreements

9. Business Transfers

If CareyWorks, LLC is involved in a merger, acquisition, restructuring, asset sale, or similar transaction, customer information may transfer as part of that transaction.

Any successor entity will be required to honor protections substantially similar to those described in this policy.

10. Data Retention

We retain information only as long as reasonably necessary to operate Studio and satisfy legal obligations.

Active Accounts

Information is generally retained while your account remains active.

Cancelled Accounts

Account information may be retained for up to 12 months following cancellation to:

• Support reactivation requests
• Resolve disputes
• Maintain records
• Comply with legal obligations

After that period, information may be deleted or anonymized.

Financial Records

Transaction records may be retained for longer periods as required by tax, accounting, or legal obligations.

Voice Recordings and Uploaded Materials

Voice recordings, transcripts, and uploaded source materials are generally retained as long as necessary to support your brief and account functionality.

You may request deletion earlier as described below.

Voice Recordings Specifically

Audio recordings are processed for transcription and brief synthesis.

Upon request, you may delete your voice recordings while retaining your synthesized brief, transcripts, and platform access.

To request voice recording deletion, email carey@careyworks.com.

Deletion is permanent.

Recordings cannot be restored after deletion.

Analytics Data

Aggregated and anonymized analytics information may be retained longer for platform improvement and operational reporting.

11. Your Rights

You may request to:

• Access your information
• Export your information
• Correct inaccurate information
• Delete your information
• Withdraw optional marketing consent

To make a request, email:

carey@careyworks.com

We will respond within a reasonable timeframe.

12. California and International Users

California residents may have rights under applicable California privacy laws, including rights related to access and deletion.

If you are located in the European Union, United Kingdom, or other jurisdictions with privacy-specific legal protections, you may have additional rights under applicable law.

We will make reasonable efforts to honor applicable legal requirements where required.

13. Security

We take security seriously.

Measures may include:

• Encrypted transmission of data
• Access controls
• Authentication safeguards
• Secure hosting infrastructure
• Security monitoring
• Vendor security reviews where appropriate

No system can guarantee complete security.

However, we take commercially reasonable measures to protect information entrusted to us.

Sub-processors used by Studio (including those named in Section 7) maintain their own security and compliance programs appropriate to the data they process. Information about their security practices is available through their respective trust and security pages. Stripe maintains PCI-DSS compliance for payment processing. Anthropic, OpenAI, and Supabase publish their security documentation on their respective websites.

14. Cookies and Similar Technologies

Studio uses cookies and similar technologies for:

• Authentication
• Session management
• Security
• Basic analytics

We do not use third-party advertising cookies.

If cookies are disabled, portions of Studio may not function properly.

15. Children's Privacy

Studio is intended for adults.

Users must be at least 18 years old.

We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child, we will take reasonable steps to delete it.

16. Changes to This Policy

We may update this Privacy Policy from time to time.

Material changes will be communicated through the platform, email, or both.

The "Last Updated" date at the top of this document reflects the most recent revision.

17. Contact

Questions, requests, or concerns?

Email: carey@careyworks.com

CareyWorks, LLC
Texas, USA