Privacy policy

01Who we are

V Studio is a Melbourne studio that runs the online side of Australian businesses: domains, websites, email, ads, review cards, dashboards and ordering apps. In this policy, “we” and “us” means V Studio.

We handle personal information in line with the Australian Privacy Principles. Questions go to hello@vstudio.com.au.

02Visiting this website

You can read this website without telling us who you are. Our public pages, like this one, set no cookies and run no analytics or advertising scripts.

When your browser asks for a page, our host, Cloudflare, receives technical details such as your IP address and browser type. It uses them to deliver the page and protect the site from attacks, and shows us overall traffic totals that don't identify anyone. We don't keep these details ourselves.

Our fonts come from Google Fonts, so Google also receives your IP address and browser details when a page loads.

03What we collect and why

When you contact us

If you email, text or call us, we get your contact details and whatever you tell us. We use them to reply and to do the work you ask for. Email sent to hello@vstudio.com.au is delivered to our Gmail inbox.

When we've made a private preview for your business

Sometimes we build a free sample website or pitch page for a business before we meet. Each one sits at a private link.

• Page opens. When the page is opened, we record which page, when, and whether it was on a phone or a computer. We don't record your IP address, name or location, and we use no cookies. Search engines and link previews are ignored.
• Feedback pins. If you double-tap the page to leave a comment, we keep the comment, where you placed it, the time and the name you give. We get an email with it. Anyone with the link can see the pins.
• Questions. Some previews ask about your business, such as your current website and social pages, what you'd like, your ad budget and your busiest times. Some ask for your name, role, email and mobile, and let you attach a file. We use your answers to prepare our proposal.

When you're a client

To run your online side, we keep:

• Your business and contact details, what we've set up for you, what you pay us, and notes about the work.
• Logins we create or look after for you, such as your domain, email and ad accounts. Passwords are encrypted before they're stored.
• What you give us in your setup form, including your answers, photos and videos. The form saves as you type.
• Messages, photos, videos, voice notes and files you send our Telegram assistant, your Telegram name, and the requests we log from them.
• Your dashboard login, and the specials and photos you add there. Passwords are stored as a one-way hash, never as plain text.

When we set up accounts in your name with other providers, such as a mailbox, a Google Business Profile or ad accounts, that provider also holds your details under its own privacy policy.

Our Telegram assistant and AI

When you message our Telegram assistant, an AI model reads your message to sum up what you've asked for and to write a short reply. We use Claude, made by Anthropic, with Cloudflare's own AI service as a back-up. We also use Claude to help word our questions and our replies when a job is done.

The assistant only knows your business name, what we've set up for you, your open requests and your recent messages. It can't change anything itself. A person at V Studio reads every request.

04Customers of businesses we work for

Some of our tools collect details from a business's own customers:

• Sign-up forms on a business's website: name, email and mobile, so the business can send you news and specials.
• Rewards cards: name, mobile, email if you add it, points, spend, visits and recent transactions.
• Visit counts on a business's website: a daily total, and a random ID saved on your device so the business can see how many people are on the site right now. It isn't linked to your name.
• Ordering apps we build for a business, used by its trade customers.

When we do this, we act for that business. The business decides how your details are used, and its own privacy policy applies. We use them only to run that service. We never use one business's customers for another business, or for ourselves.

You can ask to be taken off a business's list at any time. Contact the business, or email us and we'll sort it out with them.

05Where it's stored

What you give us through this website and our tools is stored with Cloudflare: text in Cloudflare Workers KV and files in Cloudflare R2. Email sits in our Gmail inbox, and Telegram messages are held by Telegram.

Cloudflare runs data centres around the world, so your information may be stored or processed outside Australia, including in the United States.

06Who we share it with

We never sell personal information. We share it only with the services that help us run V Studio, and only what they need.

Cloudflare

Hosts this site, stores our data and forwards email sent to us. Also runs the back-up AI for our Telegram assistant.

Resend

Sends our alert emails, and the emails a business sends its customers through our tools.

Telegram

Our client chat runs on it. We also send ourselves alerts there when a form is filled in or someone signs up, and these can include what was entered.

Anthropic

Its Claude AI reads messages to our Telegram assistant and helps word our replies.

Google

Delivers the fonts on our pages and hosts our email inbox.

jsDelivr

Delivers the code that draws and scans the QR codes on rewards cards.

Most of these providers are based in the United States and store data in many countries, so your information may be handled outside Australia. We'll also share information if the law requires it.

07How long we keep it

Page opens

A running count, plus details of the last 40 opens of each preview.

Feedback pins

Until the change is marked done.

Telegram chat

The assistant keeps your recent messages for up to 60 days after your last one.

Dashboard sign-in

You stay signed in for up to 30 days.

Daily visit counts

100 days.

Everything else

While we work with you, or with the business that collected it. When it's no longer needed, or you ask, we delete it, unless the law says we must keep it.

08Saved on your device

Some pages remember small things in your browser's local storage. These aren't cookies, and they aren't used to follow you around the web. They include the name you put on feedback pins, form drafts, your rewards card, a shop's staff PIN, your dashboard sign-in, the random visit ID above, and whether you've hidden a tip or asked for your device not to be counted.

Clearing your browser's data for our site removes them.

09Keeping it safe

We take reasonable steps to protect what we hold. Our pages are only served over HTTPS. Our admin areas need a password. Logins we look after for clients are encrypted, and dashboard passwords are stored as one-way hashes. Private previews sit at hard-to-guess links that search engines are told not to list.

No system is perfectly secure. If a data breach is likely to cause you serious harm, we'll tell you, and the Office of the Australian Information Commissioner where the law requires it.

10Seeing, fixing or deleting it

You can ask to see the personal information we hold about you, have it corrected, or have it deleted. Email hello@vstudio.com.au and say what you'd like. We'll reply within 30 days, and it costs nothing.

If we hold it for a business we work for, we'll check with that business first, as it's their customer list. We'll help you either way.

11Complaints

If you're unhappy with how we've handled your information, email hello@vstudio.com.au. We'll look into it and reply within 30 days. If you're still not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

12Changes to this policy

When what we collect changes, we'll update this page. The date at the top shows the last change. Our website terms cover the rest of how the site works.