Privacy Requests

1. What you can ask for

• Access / know: confirmation of whether we process your personal data and a copy of it, with the categories, sources, purposes and recipients.
• Correction: fixing inaccurate or incomplete personal data.
• Deletion: erasing your personal data, subject to the exceptions in section 5.
• Portability: a copy of the data you provided in a portable, machine-readable format.
• Objection and restriction: objecting to processing based on legitimate interests, or asking us to restrict it while a dispute is resolved.
• Withdrawal of consent: for marketing email, at any time, using the unsubscribe link or your account settings.
• Opt-out of sale, sharing, targeted advertising and profiling: we do not sell personal data, do not share it for cross-context behavioural advertising and do not make automated decisions with legal or similarly significant effects, so there is nothing to opt out of; we honour this right if that ever changes.
• Appeal: if we decline a request, you may ask us to reconsider (section 4).

2. How to submit a request

You do not need an account. Use either channel:

• Email privacy@studioprompts.com with the subject “Privacy request”, telling us which right you want to exercise and the email address you used with us.
• Use the contact form at www.studioprompts.com/contact and choose the subject “Privacy request”.

Members can also delete their account from Account → Settings; that starts the deletion described in section 5 without a separate request.

An authorised agent may submit a request for you. We will ask the agent for proof of authority (for example a signed permission) and may ask you to confirm the request directly.

3. How we verify you

To protect your data we match the request to the email address on the account or on the records concerned, and may send a one-time confirmation link to that address. For requests about billing or payout records we may ask for one or two additional facts only you would know (for example the date and amount of an order). We never ask for your password or full card number.

If we cannot verify a request we will tell you, and we will not disclose, change or delete data on it.

4. When you will hear from us

We confirm receipt within 10 days and respond within 45 days of receiving a verifiable request. Where a request is complex or there are several from the same person, we may take up to 45 further days and will tell you why before the first period ends. Responses are free unless requests are manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline, and we will explain our reasons.

If we decline all or part of a request you may appeal by replying to our response within 60 days. A different member of our team reviews the appeal and answers within 45 days. If you remain unsatisfied you can contact the data-protection or consumer-protection authority where you live; residents of U.S. states with comprehensive privacy laws may contact their state Attorney General.

We do not discriminate against anyone for exercising privacy rights: your price, service level and access to the library do not change because you made a request.

5. What we keep even after a deletion request

Deletion removes your profile, saved items, unlock history, preferences, support conversations and program profiles, and anonymises analytics tied to you. We keep, in restricted storage, only what the law or a legitimate business need requires:

• Orders, invoices, payments, refunds and payout records, for the retention period that tax and accounting law requires.
• Records needed to establish, exercise or defend legal claims, to detect fraud and abuse, or to honour a previous request (for example an unsubscribe suppression entry so we do not email you again).
• Published creator work already licensed to members, in line with the Creator Program Terms; your name can be removed from it on request.

Backups are rotated on a fixed schedule; deleted data disappears from backups as they expire.