Privacy Policy

GDPR and Italian privacy law

Studio VN processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Italian privacy laws.

You may request access, correction, deletion, restriction, portability, or object to the processing of your personal data. You may also file a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.

Personal data we may collect

Depending on how you interact with Studio VN, we may collect the following information:

• Name and contact details
• Email address
• Business or company information
• Project inquiry details
• Messages sent through forms or email
• Technical information such as browser, device, pages visited and basic website usage data

Studio VN Workspace — Additional data

Invited users of the Studio VN Workspace may provide or generate additional personal data, including:

• Account data: first name, last name, email address, authentication identifier, profile information, Google account information when Google sign-in is used
• Project data: client and project information, onboarding questionnaire responses, business information, project goals, target audience information, project preferences, project notes, project status
• Uploaded content: images, logos, documents, PDFs, videos, audio, written content, inspiration links, brand assets, legal documents, existing website materials, and other project-related files
• Collaboration data: deliverables, project snapshots, media requests, project activity, timestamps, invitation status, access status, project membership information
• Technical data: login and session data, IP address where technically processed, browser and device information where relevant, authentication logs, security logs, error logs

Why we process your data

We process personal data only when there is a valid reason to do so, including:

• Responding to inquiries
• Preparing proposals or project estimates
• Delivering agreed services
• Communicating during projects
• Providing access to the Studio VN Workspace
• Authenticating users and managing client projects
• Collecting project materials and delivering project files and deliverables
• Operating onboarding workflows
• Securing user accounts and detecting misuse
• Maintaining technical reliability
• Issuing invoices and keeping accounting records
• Meeting legal, tax and administrative obligations
• Fulfilling contractual obligations
• Maintaining website and Workspace security and functionality

Legal basis for processing

Depending on the situation, Studio VN may process personal data based on:

• Performance of a contract or steps taken at the request of the client prior to entering a contract
• Legitimate interests in operating the business, providing services, and maintaining security
• Compliance with legal obligations
• Consent where specifically required

Client materials and project access

Clients may voluntarily provide branding files, website credentials, hosting access, copy, images, technical documentation, business information, and other project materials.

These materials are treated confidentially and used only for the agreed project purpose.

Cookies and analytics

This website uses only essential browser storage for basic functionality, such as remembering your selected language and locally saved worksheet content.

No analytics, advertising or tracking cookies are used. Because no non-essential technologies are in use, no consent banner is required.

Studio VN does not currently use analytics tools. If analytics tools are introduced later, this policy will be updated accordingly.

Service providers and processors

Studio VN uses trusted service providers to operate the website and Workspace:

• Vercel: website hosting and deployment
• Supabase / Lovable Cloud: Workspace authentication, database, storage, and backend infrastructure
• Resend: transactional email delivery for Workspace invitations, access emails, password resets, and authentication-related messages
• Google: optional Google authentication for Workspace access
• These providers may process data on Studio VN's behalf to deliver the services. Other tools may be used for business operations, project communication, development, file exchange, invoicing, or technical delivery where necessary.

Transactional email communications

Studio VN may send transactional emails related to the Workspace, including invitation emails, access emails, password reset emails, and authentication-related messages. These are service communications necessary to operate the Workspace, not marketing emails.

Data retention

Studio VN keeps personal data only for as long as necessary for the purpose for which it was collected, or as required by law.

• Inquiry and correspondence data: kept for as long as reasonably needed for communication and project follow-up
• Client and Workspace data: kept for the duration of the client relationship and the project, and longer only where required for legal, contractual, accounting or dispute-resolution purposes
• Uploaded materials and Workspace content: kept as needed for project delivery
• Invoices and tax records: retained for the periods required under Italian accounting and tax law

Security measures

Studio VN uses reasonable technical and organisational safeguards to protect personal data, including restricted access, authenticated accounts, role-based access, project-based access controls, private file storage, and secure invitation mechanisms. However, no system can guarantee absolute security.

Client responsibility for uploaded data

Clients using the Workspace must only upload materials they are authorised to share. Clients should not upload passwords, API keys, sensitive login credentials, unlawful content, or third-party personal data they are not authorised to provide.

International transfers

Some service providers may process data outside the European Economic Area. Where this applies, Studio VN relies on the GDPR-compliant transfer mechanisms offered by those providers, such as Standard Contractual Clauses or equivalent protections; the specific safeguards in place depend on each provider's terms.

Your rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent where applicable
• Lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali)

Contact for privacy requests

For privacy-related questions or requests, contact Studio VN at contact@studiovn.design or by certified email at studiovn@pec.it.