Privacy Policy — Studio Asset Preflight

The controller of personal data processed through Studio Asset Preflight is:

No Data Protection Officer has been appointed at this time. If appointment becomes legally required, the relevant contact information will be published here.

We collect only information necessary for the operation of the website, the Early Access programme, optional analytics and related security functions.

Early Access — required information

• Email address
• Role
• Consent timestamp
• Consent version
• Email confirmation status
• Technical confirmation-token data used for double opt-in verification

Early Access — optional information

• Studio / Team
• Primary DCC / Engine
• Biggest asset QA problem

Technical and security information

We may process IP addresses, request timestamps, request metadata and technical server logs where necessary to operate and protect the website.

IP addresses may also be processed by our shared rate-limiting infrastructure to protect the Early Access form against spam, automated abuse and excessive requests.

Optional analytics information

If you choose to allow analytics, Google Analytics may process information about how you use the website, including page views, navigation activity, approximate technical information about your browser or device, referral information and other analytics data generated through use of the website.

Google Analytics is not loaded unless you first choose to allow optional analytics.

Early Access programme

We use Early Access information to manage the signup list, verify email addresses, provide relevant product-development communications and contact selected users about testing opportunities.

Website and service security

Limited technical information may be used to protect the website and Early Access service against spam, automated abuse, malicious traffic, unauthorized access and other security threats.

Optional website analytics

If you consent to analytics, we use Google Analytics to understand how visitors use Studio Asset Preflight, which pages are visited and how the website is navigated. We use this information to improve the website, content and Early Access experience.

Communication

If you contact us directly, we may process the information contained in your message and any contact information necessary to respond.

Early Access communications are based on your consent. You may withdraw that consent at any time.

Optional Google Analytics is also based on your consent. Analytics does not load unless you choose to allow it.

Where we process limited technical or security information to prevent abuse, protect the website or maintain the security and integrity of our services, the processing may be based on our legitimate interests, subject to applicable law and your rights.

Where processing is necessary to comply with a legal obligation, the relevant legal obligation may provide the applicable legal basis.

Early Access uses an email-confirmation process.

After submitting the signup form, you may receive a confirmation email containing a unique confirmation link. The raw confirmation token is sent in the link, while the application stores a cryptographic representation required to validate the confirmation request.

Confirmation links are time-limited. Repeated signup attempts using an already confirmed address do not create additional Early Access registrations.

Participation in Early Access is optional. Early Access consent is not intended to be pre-selected.

You may withdraw Early Access consent at any time by contacting privacy@studioassetpreflight.com.

Analytics consent is managed separately. You can allow or reject optional analytics when the analytics preferences notice is displayed.

You can change your analytics choice later by using the Privacy choices control available on the website.

Withdrawal or refusal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Early Access information is retained for as long as reasonably necessary to operate the Early Access programme and provide the related communications, or until you withdraw your consent, unless a longer period is required by applicable law.

We periodically review whether Early Access records remain necessary for the purposes described in this policy.

Technical and security information is kept only for as long as reasonably necessary for security, abuse prevention, troubleshooting and service operation, subject to the retention settings and obligations applicable to our service providers.

Analytics data is retained according to the configuration of our Google Analytics property and applicable Google Analytics retention settings.

We use specialist service providers to operate Studio Asset Preflight, Early Access and optional analytics.

• Vercel — website hosting, deployment and server-side execution.
• Supabase — storage and management of Early Access signup records.
• Resend — transactional email delivery, including Early Access confirmation messages.
• Upstash — shared rate limiting and abuse protection for the Early Access API.
• Google Workspace — business email and administrative communication.
• Google Analytics — optional website analytics, activated only after the visitor gives consent.

These providers may process limited personal or technical information only to the extent necessary to provide their respective services.

Some of the service providers used by Studio Asset Preflight operate internationally and may process information outside Poland or outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we rely on safeguards available under applicable data-protection law, such as adequacy decisions, Standard Contractual Clauses or other valid transfer mechanisms where required.

Subject to the conditions established by applicable data-protection law, you may have the right to:

• access your personal data
• obtain correction of inaccurate data
• request deletion of your personal data
• request restriction of processing
• object to certain processing based on legitimate interests
• receive personal data in a portable format where applicable
• withdraw consent at any time
• lodge a complaint with the competent supervisory authority

To exercise your rights, contact:

privacy@studioassetpreflight.com

In Poland, the competent supervisory authority for personal-data protection is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Studio Asset Preflight does not use Early Access signup information or website analytics to make automated decisions that produce legal or similarly significant effects for individuals.

Studio Asset Preflight uses optional Google Analytics 4 to understand how visitors use the website.

Google Analytics is implemented using a consent-first approach. The Google Analytics tag is not loaded before you choose to allow analytics.

If you select Reject analytics, Google Analytics remains disabled.

If you select Accept analytics, the Google Analytics tag is loaded and analytics measurement begins.

Your analytics preference is stored locally in your browser so that the website can remember your choice. This preference does not itself create an Early Access account or identify you in our Early Access database.

You can change your decision at any time using the Privacy choices control displayed on the website.

We do not currently use advertising cookies or use Google Analytics for advertising personalization through this website.

We use reasonable technical and organizational measures intended to protect information processed through the website.

These measures include limited access to production credentials, server-side validation, email confirmation, rate-limiting controls, consent-controlled analytics and use of established infrastructure providers.

No internet-based system can guarantee absolute security.

We may update this Privacy Policy as Studio Asset Preflight develops, our infrastructure changes, analytics configuration changes or legal requirements evolve.

Effective date: 25 September 2026 · Version: privacy-v2

Material changes to consent-based processing will be reviewed together with the relevant consent wording and implementation.

Privacy enquiries and data-protection requests:

privacy@studioassetpreflight.com

General enquiries:

hello@studioassetpreflight.com