Privacy Policy

This policy explains how Square One Studio, LLC ("Square One", "we") collects, uses, and shares personal data when you use the Square One Service.

What we collect

• Account info: name, email, company, role.
• Customer content: projects, quotes, drawings, and other business data you upload or create.
• Billing info: handled by Stripe; we never see your card number.
• Usage info: IP address, browser, pages visited, feature usage — anonymised in aggregate.

How we use it

• To provide and improve the Service.
• To bill you accurately.
• To respond to support requests.
• To send infrequent product updates (you can opt out anytime).

We do not sell your personal data. We do not train ML models on your customer content without explicit opt-in.

Who we share with

• Sub-processors we rely on: Fly.io (hosting), Cloudflare R2 (storage), Stripe (billing), Clerk (auth), Postmark (email), Sentry (errors). The current list lives at /legal/subprocessors.
• Legal: if compelled by law or to protect rights, safety, or property.
• Successor entity: if Square One is sold or merged, your data transfers with it under these same protections.

Where data lives

Primary infrastructure is hosted in Chicago, IL (Fly.io ord region). Files are stored in Cloudflare R2 (auto, US-distributed). Backups are encrypted at rest.

Retention

We retain customer content for the lifetime of your subscription. On termination we'll export everything to a CSV bundle on request and delete from our active systems within 30 days. Encrypted backups may persist for up to 90 days, after which they're purged.

Your rights

Depending on where you live (GDPR, CCPA), you may have the right to access, correct, delete, or port your personal data. Email privacy@sqonestudio.com and we'll handle it within 30 days.

Security

TLS everywhere. Encrypted at rest. Tenant-scoped data access enforced at the database layer — cross-tenant reads are structurally impossible. We're working toward SOC-2 Type 1; targeted Q4 2026.

Cookies

We use cookies only for authentication and remembering your dark-mode preference. No third-party tracking. No advertising pixels.

Contact

Privacy questions: privacy@sqonestudio.com.

This is plain-English boilerplate, not legal advice. We'll replace it with a real lawyer-reviewed version before paid GA.