Privacy policy

Your account email, and the studio, client, and project information you enter — names, project content, notes, invoices, and files you attach. It lives in our database and storage at Supabase, hosted in the EU (Frankfurt).

Client portals work through secret-key links instead of client accounts. Anyone who has a room's link can see that room and act on it — that is the product working as intended. You can reset a room's link at any time, which invalidates the old one instantly. Portal visits store a "last viewed" timestamp on the project so the studio knows the room was seen.

We send transactional email only — invites, notifications about project activity, and reminders — through Resend. Studios control notifications per room, and can turn client email off entirely. We never send marketing email to your clients.

We use Vercel Analytics: aggregate, cookieless page counts with no cross-site tracking and no personal profiles. The only cookies we set are the ones the product needs — your sign-in session, your theme choice, and a marker that attributes portal actions to an invited person's name.

It stays yours. You can delete your account from Settings at any time, which removes your studio, every project room, and stops all client portals immediately. For an export or anything else, write to us.

Questions about this policy: studio@projectttt.com.