Innatur Studio Privacy Notice

Effective date: November 1, 2026.

This notice explains how Innatur LLC ("Innatur", "we") handles personal information in Innatur Studio and in the web cabinets we operate for our business clients. It does not replace the innaturllc.com website and app privacy policy.

1. Two roles

• Studio (we decide): we are responsible for the information of the people who use Studio on behalf of a business client — owners and their staff.
• Client cabinets (our client decides): in a cabinet we operate for a fitness business, that business decides what information about its own clients is collected and why. We process it only on its instructions to provide the service. Questions about that information go to the business first; we help it respond.

2. What we collect in Studio

• Account: your email address and the business and project names your invitation names. For sign-in we keep a keyed hash of your email address in Studio; the address itself is held by our sign-in provider to send one-time codes.
• Project records: your brief, support and change requests and our replies, delivery links and project status.
• Billing records: the offer, invoices, payment status, refunds and the Stripe customer and subscription references. Card details are entered on Stripe and never reach us.
• Security and operations: session records, sign-in attempts and server logs needed to run and protect the service.

We do not use advertising or analytics cookies in Studio. Studio sets one strictly necessary, short-lived session cookie after you sign in.

3. Why we use it

To provide and support the service, to sign you in securely, to bill and account for payments, to meet legal and tax obligations, and to protect the service against misuse. We do not sell personal information or use it for advertising.

4. Service providers

We use these providers to run Studio and client cabinets, under their data protection terms:

• Supabase — database and sign-in (United States)
• Render — application hosting (United States)
• Cloudflare — file and video storage, delivery and DNS
• Stripe — payments
• Resend — delivery of sign-in code emails
• Superwall — in-app purchase and subscription records for client apps

In client apps, the Apple App Store and Google Play process in-app purchases under their own terms and privacy policies.

Information may be processed in the United States and other countries where these providers operate. Where the law of your country requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.

5. How long we keep it

• Studio account and project records: for the life of the service and up to 30 days after it ends for export, then deleted unless the law requires us to keep them.
• Billing and invoice records: as long as tax and accounting law requires, generally seven years.
• Sign-in codes expire after 10 minutes; Studio sessions after 15 minutes.

6. Your choices and rights

You can ask us to access, correct, export or delete your Studio information, subject to legal record-keeping. Depending on where you live you may have further rights, including to object or to complain to a regulator. Write to support@innaturllc.com; we answer within 30 days.

7. Security

We use access controls, encrypted connections, separate databases and storage for each client cabinet, and one-time sign-in codes. No system is perfectly secure; we will notify affected clients of a breach as the law requires.

8. Children

Studio is a business service and is not directed to children.

9. Changes

We will post changes here and, for material changes, tell Studio users by email or in Studio before they apply.

10. Contact

Innatur LLC, 5830 E 2nd St, Ste 7000 #16187, Casper, Wyoming 82609, USA — support@innaturllc.com