Data Processing Addendum
Last updated October 17, 2026 · Part of Terms version 2026-10-17-draft
This addendum is part of the Terms of Service between Flad Logic (“StudioClarity”) and your studio. It sets out how we handle the personal information your studio keeps in StudioClarity. You accept it when you accept the Terms.
1. Who is responsible for what
- Your studio is the controller of the personal information about its families, students and staff (“studio data”). You decide what's collected and why.
- StudioClarity is the processor (or “service provider”) of studio data. We handle it only on your behalf.
- You confirm you have a lawful basis, and any consent you need (including from parents for children), to put studio data into StudioClarity.
2. What we process
- People: parents and guardians, students (many of them children), staff and instructors.
- Information: names, contact details, birthdates, levels or ranks, medical notes you choose to add, enrollments, attendance, invoices and payments, policy acceptances, files and emails sent.
- Purpose: providing StudioClarity to your studio, including support, security and backups, for as long as your account is open.
3. Our commitments
- We only use studio data to provide the service, following your instructions through the app and these terms. We never sell it or use it for advertising.
- Everyone at StudioClarity who can access studio data is bound to keep it confidential, and only accesses it when needed (for example, to answer your support request).
- We keep appropriate security in place, including encryption in transit, encrypted off-site backups, separation between studios, hashed passwords and an activity log of sign-ins and money changes.
- We help you answer requests from your families to see, correct, export or delete their information.
- We tell you without undue delay, and within 72 hours of confirming it, if a security breach affects your studio data, and we help you respond.
4. Subprocessors
You agree that we may use the subprocessors listed on our Subprocessors page. Each is bound by a written agreement that protects studio data at least as well as this addendum. We'll give studio owners at least 30 days' notice before adding or replacing one. If you object for a good reason and we can't resolve it, you may cancel without penalty.
5. Where data is stored
Studio data is stored and processed in the United States. If that changes, we'll tell you first and keep appropriate safeguards in place.
6. At the end
When your account closes, you have 30 days to export your studio data. Then we delete it, except records we must keep by law. Backups are deleted on a rolling schedule within 90 days.
7. Checking our work
On request, once a year, we'll answer reasonable written questions about how we protect studio data, and share summaries of our security practices.
8. Contact
Questions about this addendum, or to report a concern: [email protected].