studiox ("we") operates the website studiox.tw, the client platform StudioX Console (console.studiox.tw) and the StudioX iOS app (together, the "Services"). This policy explains what data we collect, how we use and share it, and the choices you have.
1. Data we collect
- Account data: your name, email address and, if you sign in with Apple, the account identifier Apple provides. We never receive your Apple password.
- Content: the website data you view, create or change in StudioX Console or the app (such as orders, products, content and customer conversations), and your conversations with our AI assistant Xena.
- Voice: when you talk to Xena, Apple's speech recognition turns your voice into text on your behalf; we only receive the text and never store recordings.
- Device data: the push notification token, app version and OS version.
- Logs: for security and troubleshooting, our servers log request times, IP addresses and errors.
- Website visitors: messages sent through the contact form or the Xena chat on studiox.tw; we use analytics to understand overall site usage.
Face ID unlocking happens entirely on your device; we never receive biometric data.
2. How we use data
- To provide, maintain and improve the Services, such as managing your websites, replying to customers and sending notifications.
- To authenticate you, keep accounts secure and prevent abuse.
- To let Xena answer your questions and carry out what you ask (important changes always require your confirmation).
- To respond to your requests and provide support.
We do not sell your personal data, use it for advertising, or track you across other apps and websites.
3. Sharing
We share data only as needed to run the Services, with service providers bound to protect it:
- Cloud hosting and databases (e.g. Railway) and file storage (Cloudflare R2).
- Email delivery (Resend) and Apple Push Notification service.
- AI model providers (e.g. OpenAI, Anthropic, Google) to process conversations with Xena, the replies and customer analyses Xena drafts for you and, if you choose the cloud voice, to turn what Xena says into speech (OpenAI or Google), via their business APIs, under terms that exclude using this content to train their models. In the StudioX app we explain this and ask for your permission before you first use these features; you can turn it off at any time in the app's Settings → "AI & privacy". Features handled on your iPhone by Apple Intelligence do not send data to these providers.
- Services your website connects to (e.g. LINE Official Account, payments, logistics), only when you or the site owner enable them.
We may disclose data when required by law.
4. Data we process for our clients
Customer data on a client's website (orders, members, support conversations) belongs to that website's operator, and we process it on their behalf. Customers who want to access or delete their data should contact that website, or write to us and we will pass the request on.
5. Retention
Account data is kept while your account exists. Xena support conversations are deleted automatically after each website's retention period. Server logs are usually kept for up to 30 days. After you close your account we delete or anonymize your personal data within a reasonable time, unless the law requires us to keep it.
6. Your rights
You can delete your StudioX account at any time in the StudioX app: open Settings (the gear on the home screen) and tap "刪除帳號" (Delete account). This removes your website access, your Sign in with Apple link, your app sign-ins and push devices. You can also ask to access, copy, correct or delete your personal data, or ask us to delete your account for you, by emailing [email protected]. We reply within 30 days. You can turn off notifications, microphone and speech recognition for the app at any time in iOS Settings.
7. Security
All data is encrypted in transit (HTTPS), API keys and sensitive settings are encrypted at rest, and admin actions are logged. No system is perfectly secure, but we keep taking reasonable measures to protect your data.
8. Children
The Services are for businesses and website operators and are not directed to children under 13. We do not knowingly collect children's personal data.
9. Changes
We may update this policy and will change the date above when we do. We will give notice of significant changes within the Services.
10. Contact
Questions about privacy? Email [email protected].