Privacy Policy

1.1 Public browsing. You can browse the public site without an account. Public pages use Vercel Web Analytics and Vercel Speed Insights, which report aggregated traffic and performance without analytics cookies. Cookies remember the language, theme and animation preferences you chose for one year. Sign-in and some forms use Cloudflare Turnstile to check that a person, not a bot, is submitting; Turnstile may process your IP address and browser data under Cloudflare's terms.

1.2 Inquiries. The trial-class, enrollment, contact, charter-school and custom-art forms store what you enter (name, email, phone, message, a child's age) in the Studio's protected inquiry inbox so an administrator can reply; we reply from contact@artstudiopalette.com. Resend emails the Studio a notification about the inquiry.

1.3 Accounts. Only adults hold accounts: a parent or legal guardian, or a student aged 18 or older by the America/Los_Angeles calendar date. An account holds the holder's name, email, phone, address, role and sign-in records. A student under 18 has no login; their records (name, date of birth, group, attendance, makeups, balances, portfolio, notes) sit in the family account of their parent or guardian. Authentication uses strictly necessary cookies; without "Stay signed in" the cookie lasts for the browser session, with it up to 30 days.

1.4 Health and safety information. For every student, including adults, the enrollment form asks for allergies, conditions that need attention, medication carried and where it is kept, emergency instructions, and an emergency contact's name, relationship and phone. For students under 18 it also asks for the people authorized to pick up the student (name, relationship and phone) and whether a student aged 12 or older may leave alone. These answers are kept in the student's record, on paper or in the account as you chose on the form. We use this information only for safety, emergencies and handover. It is visible to administrators and to the student's instructors, is never used for marketing or published, and is shared only with emergency responders or medical providers during an emergency, or where the law requires.

1.5 Enrollment, payments and school funding. We keep enrollment, order, invoice, payment-attempt, provider-reference, amount, currency and payment-status records. Card, Cash App Pay and ACH bank payments go directly to Square; to connect a bank account for ACH, Square's checkout may use Plaid, its bank-connection partner. We never see or store full card numbers, security codes or bank credentials. A payment is marked Paid after a verified provider notification, or when an administrator records a payment made outside the website with its date, amount and the month it covers. If a charter school funds classes, we share the student's name, enrolled classes and attendance with that school as its purchase order requires, and we keep the order details with the enrollment.

1.6 Agreements and consents. When you accept the Enrollment Agreement (with Schedule A) and this Privacy Policy in your account, we record who accepted and in what role, the version and language of each document, the time, each checkbox, including the optional consents, and the IP address and browser used; the record cannot be changed afterwards. The accepted text stays in your account, where you can open and download it as a file you can print or save as PDF, and we give you a copy on request. When you accept the workshop cancellation and refund policy at checkout, we record the order, the policy version, the language and the time. SMS opt-ins and opt-outs are recorded with the number, the time and the version.

1.7 Photos, video and artwork. Instructors may photograph a student's artwork and the student at work for the private portfolio in the family account; the portfolio is never published. Public use of a student's recognizable image, voice, name or artwork on the website, social media or promotional material happens only under a separate, optional Media Consent. We keep each consent answer (given, declined or withdrawn; first name or full name; date; who recorded it). You can withdraw it on the Documents page of your account or by email; we then remove content we control within 30 days, as the Enrollment Agreement provides (print already distributed and third-party reposts excluded). To prepare and schedule social-media posts the Studio may use a social-media scheduling service and an AI writing assistant of its choice; only media covered by a Media Consent and the caption text are uploaded to them, never health, contact or payment information. We do not publish group photos in which a student without consent is recognizable.

1.8 Messages. Account and service notices (enrollment, payments, schedule changes, security notices) go to your email on file through Resend and appear in your account. Text messages are sent through Telnyx; Twilio only verifies receipts of older messages. Two SMS programs are optional and need your separate opt-in: SMS class reminders about 24 hours and 2 hours before each class, and event and promotional messages. Reminders for a student under 18 go to the guardian who opted in. We text a number only after its holder opts in; an urgent notice about a cancelled class or an emergency may also be sent to the phone you listed for that purpose in your Enrollment Information. Reply STOP to stop all texts to a number and HELP for help; STOP is honoured independently of any other consent. We record each opt-in and opt-out with the number, time and version. When the app offers notifications, you will control them in the app.

1.9 The app. The app uses the same accounts and records as the website. The app keeps your sign-in token and which messages you have read in the phone's secure storage; private artwork previews are cleared when you sign out; passwords are never saved. The app has no advertising or behavioral-tracking SDKs. If technical reporting is enabled, you may choose to send the app version, platform and a fixed error code after a screen error; the report contains no error text, names, artwork or credentials and is kept only as a daily aggregate count for seven days. Registration, payments and some portal pages may open the phone's browser and use the website's necessary cookies.

1.10 Abuse prevention and security logs. Inquiry and registration forms are limited to a few submissions an hour using scrambled records of the IP address and email that are deleted after 2 days; sign-in and password-reset attempts are limited by cooldowns, and repeated failed sign-ins require a Turnstile check. Raw IP addresses are not kept for this purpose. Security emails keep your address encrypted and delete it within a day; a record that a notice was sent is kept 30 days.

1.11 Comments on gallery works. Public gallery photos and videos may accept comments. To comment you sign in with a studio account, with Google, or with a one-time code sent to your email; sign-in through Facebook will be offered once we enable it. A social sign-in gives us only what the provider shares for sign-in: your name, email address, profile picture and the provider's account identifier; we never post to your social accounts or read your contacts or posts, and the provider's own privacy policy covers its side of the sign-in. A commenter sign-in can only comment: it opens no family account and no student records, even if its email matches an account holder's. Commenters confirm they are 18 or older. A comment is shown with the name from your sign-in and appears at once. We keep each comment with its author, time and status. An administrator may delete any comment at any time and may reply as the Studio. You can delete your own comments or your whole commenter profile with the button in the comments panel, or ask us by email; a deleted profile takes its comments with it.

To provide classes and the account; to keep students safe and reach you in an emergency; to bill, record payments and issue refunds; to keep accurate financial, contractual and safety records; to send the notices and messages described above; to improve the website using aggregated statistics; and to meet legal obligations, including tax records and the duty of staff to report reasonably suspected child abuse or neglect. We do not sell personal information, do not share it for cross-context behavioral advertising, and make no automated decisions that have legal effects on you.

External links such as Google Maps, Facebook and Instagram operate under their own privacy practices.

Where no automatic deletion exists, we review records for deletion at least once a year. Records needed for an open dispute, a legal obligation or an insurance claim may be kept longer. Private media and consent evidence remain protected and are not published.

The website and app are not directed to children, and children do not use them. The Studio does not knowingly collect information online from a child under 13; a child's information is given to us by a parent or legal guardian and stays in that adult's family account. Parents and guardians can review, correct or delete their child's information, or stop optional uses, through the child-data request section of the account or by contacting us; we verify identity and authority first. Service, financial and safety records may need a separate retention review before deletion. From the student's 18th birthday, the student holds their own account, agreement and consents; the guardian who pays keeps the family's payment history.

Information is encrypted in transit, stored with role-restricted access, and private media and consent documents are kept in protected Cloudflare R2 storage apart from public media. If a breach of unencrypted personal information occurs, we notify affected people as California Civil Code 1798.82 requires. No system is perfectly secure; please keep your password private and tell us at once about unauthorized access.

The date at the top shows the current version. A change that reduces your rights or adds a new use of information is announced by email to current families and in your account at least 30 days before it takes effect; other changes are posted here.

Privacy questions, correction requests, child-data requests and public-media review requests: contact@artstudiopalette.com, +1 (916) 707-7037, or Studio Palette Arts & Crafts, 4811 Chippendale Dr, Suite 307, Sacramento, CA 95841.