Privacy Policy

At StudioPlan, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

The controller responsible for data processing in connection with this platform is Muff Consulting & Webdesign GmbH, Engelberg 27D, 6242 Wauwil, Switzerland, e-mail: hello@studioplan.ch. Where a studio processes your data for its own purposes, the respective studio is responsible. We are not legally required to appoint a data protection officer; for any data protection matter you can reach us at the address above.

We collect information that you provide directly to us, such as when you create an account, make a booking, or contact us. This may include your name, email address, phone number, and payment information.

We use the information we collect to provide, maintain, and improve our services, process transactions, send you notifications, and respond to your inquiries.

We process personal data on the basis of the Swiss Data Protection Act (FADP) and, where applicable, the GDPR. Processing takes place in particular to perform the contract (providing the service and handling bookings), to comply with legal obligations (e.g. retention of invoicing records), on the basis of your consent (e.g. for notifications) and on the basis of legitimate interests (e.g. security, operation and improvement of the platform). You can withdraw any consent given at any time with effect for the future.

We retain personal data only for as long as is necessary for the stated purposes or as long as statutory retention obligations exist. Business and booking records as well as invoicing documents are retained in accordance with statutory periods (in Switzerland generally ten years). Thereafter the data is deleted or anonymised. Account and profile data is removed after the end of the contract or the deletion of your account, in compliance with statutory periods.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

To provide our service we use carefully selected third-party providers (sub-processors) that process data on our behalf: • Supabase – database, authentication and data storage • Stripe – payment processing • Expo – push notifications in the mobile app • Upstash – technical protection (rate limiting) • Vercel – hosting and operation of the web application • Resend – sending of e-mails (e.g. confirmations and notifications) • Bexio – e-mail delivery and business communication These providers may also process data outside Switzerland or the EEA (e.g. in the USA); in such cases we ensure appropriate protection through suitable safeguards — in particular the standard contractual clauses recognised by the FDPIC or on the basis of an adequacy decision (e.g. the Swiss–U.S. Data Privacy Framework). An up-to-date list of the sub-processors we use is available on request.

Within the limits of applicable law, you have the right to access, rectification, erasure and restriction of processing, the right to data portability as well as the right to object to processing and to withdraw any consent given. To exercise these rights, a message to hello@studioplan.ch is sufficient. Where your data concerns processing by a studio, please contact the respective studio directly.

If you believe that the processing of your personal data violates applicable law, you may lodge a complaint with the competent supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC). If you reside in the EU, you may contact the data protection authority of your country.