1. Who we are
MyVocalStudio (“we,” “us,” or “our”) is a studio management platform for music and voice teachers, based in Portland, OR, USA, and operated by Ayuda Ventures Inc. Contact us at support@myvocalstudio.com.
2. Information we collect
- Account information — name, and an email address or phone number, when you create an account.
- Studio data — lesson schedules, student records, and payment information you enter into the app.
- Payment information — processed by Stripe. We do not store full card numbers on our servers.
- Usage data — pages visited, features used, and error logs to improve the service.
- Device information — device type, OS version, and IP address for security and diagnostics.
3. How we use your information
- To provide and operate the MyVocalStudio service.
- To process payments and send transaction confirmations.
- To send product updates, security alerts, and support messages.
- To improve and develop new features based on usage patterns.
- To comply with legal obligations.
We do not sell your personal information to third parties.
4. Sub-processors and data sharing
We share data only with trusted service providers (“sub-processors”) required to operate the platform. Each is bound by its own privacy obligations. We do not sell your data.
| Provider | Purpose | Data retention / notes |
|---|---|---|
| Supabase | Database and authentication hosting | Retained until you delete your account |
| Stripe | Payment processing | Card data never touches our servers; Stripe’s PCI-DSS scope |
| Resend | Transactional email delivery | Email logs retained per Resend’s data policy |
| Vercel | Web hosting and infrastructure | Request logs retained per Vercel’s data policy |
| Telnyx | Text message delivery | Message logs retained per Telnyx’s data policy |
| Twilio | Sign-in codes sent by text | Verification logs retained per Twilio’s data policy |
| Sentry | Error monitoring | Error reports retained per Sentry’s data policy |
| Anthropic | AI features (e.g., lesson commands, receipt extraction) | Not used to train Anthropic’s models |
We will notify you of any material changes to this sub-processor list at least 14 days in advance.
5. Data retention and inactivity
We retain your data as long as your account is active. You may close your studio or account at any time from Settings. A studio with students or lessons in it is kept for 30 days so you can change your mind, then deleted; an empty studio is deleted right away. Two things are treated differently, and we would rather say so than round it off to “everything is deleted”:
- Some records are anonymized rather than deleted — support conversations and product feedback. We strip the personal details and keep the content, which no longer identifies anyone.
- Some records we are required to keep — telecom message logs held for regulatory and carrier-billing reasons, and financial records retained for tax and accounting. These are kept only for as long as the law requires.
Backups are overwritten on a rolling cycle, so a copy may persist briefly in backup after deletion.
We also review accounts that have gone unused. After around 18 months of inactivity we email the account owner, and we follow up before removing anything. We will not delete an inactive account without warning you first at the address on the account.
You may also submit a data access or deletion request at any time via our data request page.
6. Security
We use industry-standard encryption (TLS in transit, AES-256 at rest) and row-level security to protect your data. MyVocalStudio has no passwords: you sign in with a one-time code sent to your email or phone, with Google or Apple, or with a passkey. There is no password for us to store, and none for anyone to steal from us.
7. Children’s privacy (COPPA)
MyVocalStudio is designed for studio owners and instructors (adults). Student records may include minors. We comply with the Children’s Online Privacy Protection Act (COPPA):
- We do not knowingly collect personal information directly from children under 13.
- When a studio adds a student under 13, the platform requires a parent or guardian email on file before the record can be saved.
- Parents or guardians may request access to or deletion of their child’s data through our data request page, or by emailing support@myvocalstudio.com.
8. Your rights
Depending on your location (including GDPR in the EU/UK and CCPA in California), you have the right to:
- Access — request a copy of the data we hold about you.
- Correction — ask us to correct inaccurate data.
- Deletion — request erasure of your personal data.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
To exercise these rights, use our data request page or email support@myvocalstudio.com. We will respond within 30 days.
9. Text messaging (SMS)
If you opt in, MyVocalStudio may send you text messages (delivered via our messaging provider, Telnyx) related to your lessons and account.
- What we send — lesson reminders, payment links and receipts, and account or schedule notifications. We do not send marketing or promotional texts.
- Consent — you opt in by checking the SMS consent box and providing your mobile number in your student profile. Consent is not a condition of purchasing any goods or services, and you can decline or withdraw it at any time without affecting your account.
- Frequency & cost — message frequency varies based on your lessons and payments. Message and data rates may apply.
- Opt-out & help — reply STOP to any message to unsubscribe, or HELP for assistance. You may also turn off text messages anytime in your profile settings.
- Data handling — your mobile number is used only to deliver these messages and is never sold or shared for third-party marketing. Mobile opt-in data and consent are not shared with any third parties for their own marketing purposes.
10. Google Calendar and Zoom connections
Connecting Google Calendar or Zoom is optional, and nothing below happens unless a studio chooses to connect one.
- What we ask Google for — permission to see the list of your calendars (so you can choose which one to use), and to create, change and delete events on the calendar you choose. We do not ask for permission to read your email, contacts, or files.
- What we do with it — we write your lessons onto the calendar you selected, update them when a lesson moves, and remove them when a lesson is canceled. If you ask us to import your existing schedule, we read events from the calendar you choose so we can turn them into lessons. That is all we use it for.
- What we store — the access and refresh tokens that let us do the above, encrypted, and the ID of the calendar you selected. We do not keep a copy of your calendar.
- Who else sees it — nobody. Google Calendar data is not sold, not shared with third parties, not used for advertising, and not used to train any AI or machine-learning model. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
- Turning it off — disconnect the calendar in your studio settings, which deletes the stored tokens. You can also revoke our access at any time from your Google account permissions page.
- Zoom — if you connect Zoom, we store its tokens the same way, encrypted, and use them only to create meeting links for lessons you schedule as virtual.
11. Changes to this policy
We may update this policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect.
12. Contact
Questions? Contact us, or email support@myvocalstudio.com.