Logo
Studio 247

Privacy Policy

This Privacy Policy describes how Company (“we”, “us”, “our”) collects, uses, stores, and discloses personal information when you access or use the Studio247 website, studio workspaces, streaming and media features, and related online services (collectively, the “Services”).

We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Services, you acknowledge that you have read this Privacy Policy.

1. Scope

This policy applies to personal information we handle in connection with the Services. It does not apply to third-party websites, streaming clients, or services that we do not control (including Discord when you interact with it outside our integration); those are governed by their own policies. Studio operators who run white-label domains may publish separate notices for their public pages; where both apply, this policy describes our processing as platform operator.

2. Personal information we collect

Depending on how you use the Services, we may collect the following categories of information:

Account and authentication

  • Email address, display name, and account credentials (passwords are stored using one-way hashing; we do not store plaintext passwords).
  • Security-related data such as email verification status, optional two-factor authentication settings where enabled, and API tokens if you use authenticated API access.
  • Session identifiers and similar data needed to keep you signed in securely.
  • Onboarding and account preferences (for example timezone).

Profile and preferences

  • Profile photo and other profile fields you choose to provide through Jetstream or related account settings.
  • Privacy and visibility settings that control how your information appears to others within a studio.

Studios, membership, and collaboration

  • Studio membership, roles, invitations, and which studio you have selected as active in the console.
  • Organisation membership and related metadata where the organisations feature is enabled for a studio.
  • Forum posts, knowledge-base contributions, comments, and similar content you submit in studio-scoped areas.
  • Playlist participation, access-control decisions, and review or workflow status where those features are enabled.

Media, streaming, and operations

  • Media you upload (audio, video, images, and associated metadata such as titles, tags, and technical properties extracted during processing).
  • Playlist, structure, schedule, and programming configuration you create, including timeslot and AutoDJ settings.
  • Streaming and Liquidsoap configuration, endpoint settings, and operational logs (for example playout events, listener metrics, or harbour activity) needed to run and secure broadcasts.
  • Transcoding job details, processing status, and generated variants linked to your uploads.
  • Download, subscription, or delivery events where the product records them for access control or analytics.

Talent applications and public forms

  • If you submit a talent application on a studio’s public apply page, we collect the information you provide (such as name, email, phone, role, message, portfolio or SoundCloud URLs, and related metadata) so the studio can review your application.
  • If you use our contact form, we collect the information you submit (such as your name, email, and message content) so we can respond.

Discord and third-party identity

  • If you link your account to Discord, we store the Discord user identifier and related link state produced by our bot’s verification flow. We do not receive your Discord password.
  • Studio profile fields may include public Discord or social links you choose to display.

Custom domains

  • Domain names you register for a studio and DNS verification records (for example TXT tokens) used to confirm that you control the domain.

Communications

  • Records of certain communications and system notifications we send in relation to your account or the Services.

Technical and usage data

  • Network and device information such as IP address, user agent, approximate location derived from IP where available, and timestamps.
  • Server and application logs used for security, debugging, abuse prevention, and service reliability.

3. How we use personal information

We use personal information for purposes that include:

  • Providing, operating, and improving the Services (including accounts, studios, media libraries, transcoding, streaming, and scheduling).
  • Authenticating users, securing accounts, preventing fraud and abuse, and enforcing our terms.
  • Processing talent applications and contact requests.
  • Communicating with you about the Services, support requests, and important notices.
  • Analysing usage and performance to understand how the Services are used and to develop new features.
  • Complying with legal obligations and responding to lawful requests from public authorities.

We do not sell your personal information.

4. Cookies and similar technologies

We use cookies and similar technologies that are essential for the operation of the site (for example session management, security tokens such as CSRF protection, and optional “remember me” style functionality where offered).

Analytics or similar measurement scripts may be enabled in some environments. Where used, they may set cookies and collect usage data as described in the provider’s documentation.

5. Third-party services

We use service providers that process data on our behalf or where you interact with their widgets, including:

  • Google reCAPTCHA — on pages where it is enabled (for example registration or contact forms), to reduce automated abuse. Google may collect technical data; see Google’s terms and privacy notices.
  • Google Analytics / measurement tags — when enabled (see section 4), subject to configuration in our environment.
  • Discord — when you link an account or interact with our bot for verification or notifications, subject to Discord’s policies.
  • Object storage and CDN providers — where studios use S3-compatible storage or delivery networks to host and serve media.
  • Hosting, email, cache, queue, and infrastructure — providers that host our application, databases, Redis, transcoding workers, streaming components, email delivery, and backups. Data is stored and processed on systems we control or contractually govern.

These providers have their own privacy policies. We encourage you to read them. We only share what is needed for the relevant function.

6. Disclosure of personal information

We may disclose personal information:

  • To service providers who assist us in operating the Services (subject to appropriate safeguards).
  • To other members of a studio, according to roles and visibility settings, when you participate in that studio (for example shared playlists, forum posts, or applications submitted to that studio).
  • Where required or authorised by law, or to protect our rights, safety, or the rights and safety of others.
  • In connection with a business transaction such as a merger, acquisition, or asset sale, subject to appropriate confidentiality arrangements.
  • With your consent or at your direction (for example where you choose to make profile or studio information public).

If you listen to or visit a studio’s public player or white-label site, limited technical data (such as IP address and user agent) may be processed to deliver the stream and maintain security.

7. Overseas disclosure

Some of our service providers (including those listed in section 5) may store or process data outside Australia. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure that the recipient handles the information in accordance with the APPs, such as by contractual terms or by selecting reputable providers. By using the Services, you consent to such disclosures where they occur.

8. Security

We implement reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, or alteration. No method of transmission over the internet or electronic storage is completely secure; we cannot guarantee absolute security.

9. Retention

We retain personal information for as long as needed to provide the Services, comply with law, resolve disputes, and enforce our agreements. Media and studio data may remain until deleted by you or a studio administrator, subject to backup retention. Some information may remain in backups for a limited period after deletion from active systems.

10. Access, correction, and complaints

Under the APPs, you may request access to or correction of personal information we hold about you.

To make a request, contact us via the contact page. We will respond within a reasonable time. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Children

The Services are not directed at children under 13, and we do not knowingly collect personal information from children under 13 without parental consent where required by law. If you believe we have collected such information, please contact us and we will take appropriate steps.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will be revised when we do. Material changes may be communicated through the Services or by email where appropriate. Continued use after changes constitutes acceptance of the updated policy, to the extent permitted by law.

13. Contact

For privacy questions or requests, contact us through the contact page