Privacy Policy

Studio Visibility is a search-visibility tool for photographers, operated by Studio Lifesaver LLC, a limited liability company formed in Georgia, United States. In this policy, "we," "us," and "our" mean Studio Lifesaver LLC, and "you" means the person using the Service.

For the purposes of the EU and UK General Data Protection Regulation, Studio Lifesaver LLC is the controller of the personal information described in this policy. You can reach us any time at support@studiovisibility.com.

This policy covers studiovisibility.com, our dashboard, and any related pages or emails that link to it (together, the Service).

Information you give us

• Account information. Your name or business name, email address, and a password. Passwords are hashed by our authentication provider — we never see or store your password in readable form.
• Site and business details. The website address you want us to analyze, your business name, your service area or city, and the photography specialties you want to be found for. If you ask us to look up your Google Business Profile, we also process the public listing details we retrieve for it.
• Billing information. If you buy a paid plan, single scan, or extra credits, our payment processor collects your payment card details and billing address directly. We never receive or store your full card number. We store the processor's customer and subscription identifiers, your plan, your billing period, the last four digits and brand of your card as reported to us, and the country, state, and postal code used for sales-tax purposes.
• Support messages. Anything you send us by email, including attachments and the contents of your message.

Information you connect

• Google Search Console. Entirely optional and per site. If you connect it, we receive a read-only access token and performance data for the property you select — queries, impressions, clicks, average position, and page URLs. See Google user data and Limited Use for the specific commitments that apply to this data.

Information we generate or collect automatically

• Scan and audit results. The technical findings, scores, keyword and ranking data, competitor comparisons, AI-visibility results, and recommendations we produce for your site, along with the raw responses from the data sources behind them.
• Publicly available information. We fetch and analyze pages on your website and on the websites of businesses that appear in search results for your keywords, along with public search-result and business-listing data. This is the same information any visitor or search engine can see.
• Log and device data. IP address, browser type and version, device and operating system, referring page, pages viewed, and timestamps. This is generated automatically whenever software talks to a web server and is used for security, debugging, and abuse prevention.
• Aggregate traffic analytics. To understand which pages get visited, we record the page path, referring domain, coarse device type, and campaign tags (if present) for each pageview. To count unique visitors without a cookie, we hash your IP address and browser type together with a secret that changes every day — only the hash is stored, never the IP address, and the daily change means it can't link your visits across days. See the Cookie Notice for exactly how this works.
• Cookies. We use strictly necessary cookies only. See our Cookie Notice for the full list.

We do not knowingly collect special categories of personal data (such as health, biometric, or precise geolocation data), and we ask that you not send them to us.

We use the information described above to:

• create and maintain your account and keep you signed in;
• run the audits, rank checks, competitor comparisons, and AI-visibility scans you request, and produce recommendations from them;
• store your history so you can see how your visibility changes over time;
• process payments, manage subscriptions and scan credits, issue receipts, and meet our sales-tax and accounting obligations;
• send you service messages — email confirmations, password resets, receipts, scan completion notices, and important changes to the Service or these policies;
• provide support, investigate problems you report, and monitor the reliability of the Service;
• detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms of Service;
• improve the Service — for example, by reviewing which checks produce useful results and where scans fail. We use aggregated or de-identified information for this wherever it is sufficient;
• comply with law and enforce or defend legal claims.

We do not use your personal information, your site content, or your scan results to train our own machine-learning models, and we do not permit our AI providers to train their models on it. See AI providers and your data.

We send marketing email only if you ask for it, and every marketing email includes an unsubscribe link. Unsubscribing from marketing does not stop service messages about your account, because we need those to run the Service.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under Article 6 GDPR:

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms. You can object to that processing — see Your privacy rights.

Connecting Google Search Console is optional. If you connect it, Studio Visibility requests a single, read-only scope (webmasters.readonly) and uses it only to read search-performance data for the property you choose.

Studio Visibility's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we commit that:

• we use Google Search Console data only to show you your own performance data and to generate your recommendations inside the Service;
• we do not transfer that data to third parties except as necessary to provide the Service (our hosting and database provider stores it), for security, or to comply with applicable law;
• we do not use that data for advertising, and we do not sell it or share it for cross-context behavioral advertising;
• we do not allow humans to read that data except with your explicit consent for a support issue you have raised, where it is necessary for security or to comply with applicable law, or where the data has been aggregated and de-identified;
• we do not use Google user data to develop, improve, or train generalized or non-personalized AI or machine-learning models.

Your Google refresh token is encrypted at rest using AES-256-GCM with a key that is not stored in our database. You can disconnect a site's Search Console connection at any time from that site's page in the dashboard, which deletes the stored token, and you can independently revoke our access at myaccount.google.com/permissions.

We do not sell your personal information. We share it only in the situations below.

Service providers (sub-processors)

We use the vendors listed here to run the Service. Each is bound by contract to process personal information only on our instructions and to protect it. Our application and data are hosted on cloud infrastructure located in the United States.

We will keep this list current. If we add a sub-processor that materially changes how your information is handled, we will update this page and, where required, notify you.

Other situations

• Legal and safety. When we believe disclosure is required by law, regulation, legal process, or a government request, or is necessary to protect the rights, property, or safety of Studio Lifesaver LLC, our customers, or the public. Where we are legally permitted, we will notify you first.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will give you notice before your information becomes subject to a materially different privacy policy.
• With your direction. When you ask us to share information, or share a report yourself.

Part of what Studio Visibility does is ask AI assistants the kinds of questions your potential clients ask — for example, whether they recommend a wedding photographer in your city — and record whether your business is mentioned. To do that, we send prompts to third-party AI providers through their commercial APIs.

Those prompts and the content we analyze can include:

• your business name, website address, service area, and specialties;
• text and metadata from the public pages of your website;
• public information about competing businesses in your area.

We use these providers under their business and API terms, which — unlike their consumer chat products — do not permit the provider to use API inputs or outputs to train their models by default. We do not opt into any training program on your behalf.

We do not send your password, your payment details, or your Google Search Console credentials to any AI provider.

One caution: AI models can produce confident and inaccurate statements. Treat AI-visibility results and recommendations as informed guidance to verify, not fact. See our Terms of Service for what we do and do not promise about results.

We keep personal information only as long as we need it for the purposes described in this policy.

Backups are kept on a rolling schedule and are overwritten in the ordinary course; information deleted from the live Service may persist in backups for a short period before being overwritten.

We take reasonable and appropriate measures to protect your information, including:

• encryption in transit (HTTPS/TLS) and encryption at rest for our database;
• additional application-level AES-256-GCM encryption for Google Search Console refresh tokens;
• row-level access rules in our database so that one account cannot read another's data;
• hashed passwords, restricted administrative access, and secrets kept out of client code.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep your password confidential and use a unique one. If you believe your account has been compromised, or if you find a security issue in the Service, email us at support@studiovisibility.com right away.

If a breach of your personal information occurs, we will notify you and any relevant regulator as required by applicable law.

We are based in the United States and our infrastructure is located there. If you use the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data-protection laws differ from those in your country.

Where we transfer personal information out of the EEA, the UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum or the UK International Data Transfer Agreement, as applicable) together with appropriate technical and organizational safeguards. You can request a copy of the relevant transfer mechanism by emailing us.

Everyone

You can view and edit your account and site details in the dashboard at any time, disconnect a Google Search Console connection at any time, and ask us to delete your account by emailing support@studiovisibility.com.

EEA, UK, and Switzerland

Subject to the conditions in the GDPR, you have the right to: access your personal data; correct inaccurate data; delete data; restrict or object to processing (including processing based on legitimate interests); receive your data in a portable format; and withdraw consent at any time without affecting processing already carried out. You also have the right to lodge a complaint with your local supervisory authority — for UK residents, the Information Commissioner's Office.

California, and other US states with privacy laws

If you are a resident of California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you have the right to know what personal information we collect and how we use and disclose it, to request a copy of it, to correct it, and to request deletion, subject to legal exceptions.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We do not use personal information for targeted advertising or for profiling that produces legal or similarly significant effects, so there is nothing to opt out of on those grounds. We honor Global Privacy Control signals as an opt-out request where applicable law requires it. We will not discriminate against you for exercising any privacy right.

In the 12 months before the date of this policy, we collected the categories of personal information described in Information we collect (identifiers, commercial information, internet activity, and — only if you connect it — search performance data about your own website), for the purposes in How we use information, and disclosed them for business purposes to the categories of recipients in How we share information.

How to make a request

Email support@studiovisibility.com from the address on your account, or tell us which account your request concerns. We will verify your identity before acting — usually by confirming control of the account email — and respond within the time your law allows (45 days under US state laws, extendable by another 45 where permitted; one month under the GDPR, extendable by two months for complex requests). An authorized agent may submit a request on your behalf with written proof of authorization.

Competitor comparisons necessarily involve information about businesses other than yours. We only process information that is publicly available — published websites, public search results, and public business listings — and we use it solely to give you context about your own visibility. We do not build profiles of individuals from it, and we do not sell it.

If you operate a business that appears in our competitor data and you have a question or request about it, email us at support@studiovisibility.com.

The Service is a business tool intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email us and we will delete it.

The Service links to third-party websites — your own site, competitor sites, Google properties, and our payment processor. We do not control those sites and are not responsible for their privacy practices. Read their policies before giving them information.

We may update this policy as the Service changes or as the law requires. When we do, we will revise the "Last updated" date at the top of this page. If the changes are material, we will give you additional notice — by email or by a notice in the Service — before they take effect. Continuing to use the Service after an update means you accept the revised policy.

Questions, requests, or complaints about privacy go to support@studiovisibility.com.

Studio Lifesaver LLC (d/b/a Studio Visibility)
Georgia, United States

We take privacy complaints seriously. If you contact us and are not satisfied with our response, you may escalate to your data-protection authority or state attorney general.