For the free beta

Privacy Policy

Effective 3 November 2026

This policy explains how Studiflow Pty Ltd (ACN 702 797 822), registered in Victoria, Australia, handles information when you visit our website, create an account, connect Gmail, or use the beta application. In this policy, “Studiflow”, “we”, “us” and “our” refer to Studiflow Pty Ltd. It is written for the current invitation-only beta.

Information we collect

  • Account and workspace details: email address, profile and workspace name, authentication records, and setup choices.
  • Relationship information: people, contact methods, opportunities, next steps, notes, activities, conversation metadata and message snippets that you or an authorised operator add or that Gmail synchronisation identifies.
  • Gmail connection information: Google account email and OAuth tokens. The current connection requests gmail.readonly and basic email identity access. Studiflow does not request Gmail send, modify, delete or compose permissions.
  • AI inputs and outputs: relevant relationship context, selected Gmail conversation content, notes, next steps and approved writing preferences may be sent to an AI provider to produce relationship assessments, suggested next actions or draft text. Results and related drafting activity may be stored in Studiflow.
  • Writing preferences: examples and tone guidance you choose to provide so drafts can better reflect your preferred style.
  • Technical information: security, diagnostic and usage information needed to operate and protect the service. Logs are designed not to contain full message bodies or secrets.

How we use information

  • Provide authentication, workspace, relationship and follow-up features.
  • Synchronise relevant Gmail metadata, snippets and conversation history after you authorise the connection.
  • Generate relationship assessments, recommendations and human-reviewable drafts when you ask Studiflow to do so.
  • Maintain security, troubleshoot faults, respond to support requests and administer the beta.
  • Meet legal, accounting, fraud-prevention and compliance obligations.

Gmail and Google data

Gmail is optional. Before connection, Studiflow explains the requested access and why it is needed. Gmail data is used to provide the relationship-history and AI-assisted workflow you request, not for advertising or sale. Studiflow does not autonomously send Gmail messages; any draft must be reviewed and sent by you in Gmail.

Disconnecting Gmail stops the Studiflow connection and invalidates the stored connection credentials. It does not by itself erase historical Studiflow records already created from the connection. You can request deletion of those records through the process below. Studiflow can act on information it holds or controls; information held only by Google or in your Gmail account remains subject to the relevant account holder's controls and policies.

Our use and transfer of information received from Google APIs will follow the Google API Services User Data Policy, including the Limited Use requirements. Google’s own privacy and retention practices also apply to data held by Google.

AI processing

Studiflow uses AI to analyse relevant relationship context and suggest actions or wording. AI outputs can be incomplete or wrong and are not professional, legal, financial or business advice. Review every recommendation and draft before relying on it.

Relevant content may be sent to OpenAI through a server-side API integration. The applicable provider settings and terms govern provider-side retention. We do not promise that provider-side processing is instantaneous or that content is never retained. OpenAI describes its API data controls here; Studiflow will update this policy if our provider or settings materially change.

Service providers

We use providers such as Google for Gmail, OpenAI for configured AI processing, Supabase for database and authentication infrastructure, hosting and monitoring providers, and Stripe where billing or historical billing records are involved. Providers receive only information needed for their service and may process it outside Australia.

Retention, deletion and backups

We keep information while needed to operate the beta, support you, maintain security, resolve disputes and meet legal or accounting obligations. You can request access, correction or deletion, or make a privacy complaint, by emailing support@studiflow.com.au. We acknowledge requests promptly and target a substantive response within 30 days. We verify the requester, close or disconnect the relevant workspace where appropriate, remove operational customer content through our offboarding process, and confirm what was done.

Some billing, suppression, security and compliance records may be retained for their legitimate purpose. Records confirming beta acknowledgement are removed when the workspace is offboarded and are not retained as a permanent customer record. Backups, caches and third-party systems may take longer to expire and are not promised to be deleted immediately. We will not claim that disconnecting Gmail or deleting an account instantly removes every historical copy from every system.

Security and incidents

We use encryption, access controls, tenant isolation and server-side authorization appropriate to the beta. No online service is risk-free. Report suspected security incidents promptly to support@studiflow.com.au; do not include message contents or credentials unless requested through a secure channel.

Your choices and contact

You may decline Gmail, disconnect it later, ask for correction or deletion, make a privacy complaint, and stop participating in the beta. For privacy questions, Gmail connection problems, data correction, offboarding or deletion requests, or complaints, email support@studiflow.com.au. We aim to respond substantively within 30 days. If you are dissatisfied with our response, or we have not responded within 30 days, you may contact the Office of the Australian Information Commissioner.