Privacy Policy

Effective Date: April 9, 2026

SUMMARY OF KEY POINTS

At a glance, here is what you need to know about how we handle your data:

What personal information do we collect? We collect your name, email address, account preferences, device information, usage analytics, and technical logs.

Do we process any sensitive personal information? We do not intentionally collect highly sensitive personal information (like health data or social security numbers). We do process payment information securely through our payment provider.

Do we collect information from third parties? Yes, we receive limited information from our payment processor and infrastructure partners to confirm transactions and ensure service security.

How do we use your information? We use your data to provide our authentication software, deliver backup and consulting services, process payments, secure our platform, and communicate with you.

Who do we share your personal information with? We share data only with essential service providers like AWS, Stripe, Paddle, PostHog and Cloudflare to keep our services running securely. We never sell your personal data.

What are your privacy rights? You have the right to access, correct, delete, and port your data, as well as the right to opt out of marketing communications.

How can you contact us? You can reach us anytime regarding your privacy at mason@masonitestudios.com.

---

1. Introduction

Welcome to Masonite Studios LLC. We provide SaaS software that acts as a secure authentication layer for web applications, offering our customers the option to self-host so they can maintain absolute sovereignty over their authentication data. Alongside our core software, we also provide backup services, technology support, and technical consulting for small businesses. Because our business is built on securing access and protecting data, we take your privacy incredibly seriously.

We wrote this Privacy Policy to explain exactly how we collect, use, and protect your personal information. We believe that legal documents should be easy to understand, so we have done our best to keep this clear and straightforward. This policy applies to all users of our cloud-based platform, our website, and our consulting services.

If you have any questions about this policy or how we handle your data, please reach out to us at mason@masonitestudios.com.

2. What We Collect & Why

To provide you with reliable authentication tools and technical support, we need to collect certain information. We organize this data based on how we receive it and why we need it.

Information You Give Us Directly

When you register for an account, request consulting services, or set up your authentication layer, you provide us with personal information. This includes your name, email address, and account preferences. We need this information to create your account, provide our services, and communicate with you.

Legal Basis: Processing this data is necessary to fulfill our contract with you and, in some cases, relies on your consent.

Information Collected Automatically

As you interact with our platform, we automatically collect certain technical data to ensure everything is running smoothly. This includes device information, usage analytics, technical logs, and data collected through cookies. We use this information to monitor platform health, troubleshoot bugs, and understand how our customers use our software.

Legal Basis: We collect this based on our legitimate interest in maintaining a secure, efficient, and improving platform.

Information from Third Parties

We occasionally receive information about you from our trusted third-party partners. For example, when you pay for a subscription or consulting services, our payment processor (Stripe or Paddle) provides us with billing confirmation and limited transaction details so we can grant you access to our services.

Legal Basis: This is necessary for the performance of our contract with you and our legitimate interest in managing our finances.

3. How We Use Your Information

We only use your personal information for specific, clearly defined purposes. Here is exactly how we put your data to work:

Core Service Delivery: We use your account information to operate our SaaS authentication platform, facilitate self-hosting configurations, and deliver our backup and consulting services. (Basis: Contract)

Service Improvement and Personalization: We analyze usage data and technical logs to understand how our software performs in the real world, allowing us to build better features and streamline the user experience. (Basis: Legitimate Interest)

Communication: We use your email address to send you important account updates, technical notices, and responses to your support requests. (Basis: Contract and Consent)

Security and Fraud Prevention: We monitor technical logs and device information to detect unusual activity, prevent unauthorized access, and protect our infrastructure. (Basis: Legitimate Interest)

Legal Compliance: We may process your information to comply with tax laws, financial regulations, or valid legal requests. (Basis: Legal Obligation)

Marketing: With your permission, we may send you promotional emails about new features or consulting services. You can opt out of these at any time. (Basis: Consent)

4. When We Share Your Information

We respect your privacy and limit how we share your data. We never sell your personal data to anyone. We only share your information in the following specific situations:

Essential Service Providers: We share information with a select group of trusted companies that help us run our business. This includes AWS (for cloud hosting and infrastructure), Stripe or Paddle (for secure payment processing), PostHog for analytics and Cloudflare (for security and content delivery).

Legal Requirements: If we are required to do so by law, court order, or valid legal process, we may disclose your information to law enforcement or regulatory authorities. We will always push back on overly broad requests.

Business Transitions: If Masonite Studios LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.

With Your Consent: If we need to share your information for any purpose not listed here, we will ask for your explicit consent first.

5. Your Privacy Rights

Depending on where you live—including under the GDPR in Europe, the CCPA/CPRA in California, and other US State Privacy Laws (like VCDPA, CPA, and CTDPA)—you have significant rights regarding your personal data. We extend these core rights to all our users, regardless of location:

Access Your Data: You can request a copy of the personal information we hold about you. We will provide this within 30 days.

Correct Inaccuracies: If your information is wrong or incomplete, you can update it directly in your account settings or ask us to fix it for you.

Delete Your Data: You can request that we erase your personal information. We will honor this request, subject to certain legal exceptions (like maintaining tax records).

Port Your Data: You have the right to receive your data in a structured, commonly used, and machine-readable format so you can transfer it to another service.

Opt-Out of Marketing: You can easily unsubscribe from our marketing emails by clicking the "unsubscribe" link at the bottom of any promotional message.

Withdraw Consent: Where we rely on your consent to process your data, you can withdraw it at any time. This will not affect the lawfulness of any processing we did before you withdrew consent.

Lodge Complaints: If you believe we have violated your privacy rights, you have the right to file a complaint with your local data protection authority.

To exercise any of these rights, please email us at mason@masonitestudios.com.

6. Data Security

Because we build authentication software, security is in our DNA. We maintain an enhanced security posture to protect your data against unauthorized access, alteration, or destruction.

Our security measures include SSL/TLS encryption for all data in transit, Data Encryption at Rest for stored information, strict Access Controls for our team, and mandatory Two-Factor Authentication (2FA). We regularly audit our systems to ensure compliance with industry standards like SOC 2.

However, we also want to be honest with you: no system connected to the internet is 100% secure. While we work tirelessly to protect your data, we cannot guarantee absolute security. You also play a crucial role in keeping your data safe. We strongly encourage you to use strong, unique passwords and secure your own devices.

In the unlikely event of a data breach that compromises your personal information, we commit to notifying you and the relevant authorities within the timeframes required by law, detailing what happened and the steps we are taking to fix it.

7. Data Retention

Our general rule is simple: we keep your personal data only for as long as you have an active account with us. Once you delete your account, we initiate the deletion of your personal data.

However, to comply with legal obligations and maintain system integrity, we apply specific retention periods to certain types of data:

Active Account Data: Retained until account deletion, plus a brief 30-day buffer to allow for accidental deletion recovery.

Financial Records: Retained for up to 7 years to comply with tax and accounting laws.

Technical Logs: Retained for 12 months to help us identify long-term security trends and troubleshoot persistent bugs.

Marketing Preferences: Retained until you opt out or withdraw your consent.

8. Cookies & Tracking

We use cookies and similar tracking technologies to make our platform work and to understand how you use it.

We use essential cookies to keep you logged in and secure your session—our software literally cannot function without these. We also use analytics cookies to see which features are most popular and where users might be getting stuck.

You have control over your cookie preferences. You can configure your browser to reject all non-essential cookies or alert you when a cookie is being set. Please note that if you disable essential cookies, you will not be able to log into the Masonite Studios platform.

9. Children's Privacy

Our software, backup services, and consulting offerings are designed for businesses and adult professionals. We do not knowingly collect personal information from children under the age of 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that we have inadvertently collected data from a child, we will delete it as quickly as possible.

10. International Transfers

Masonite Studios LLC operates a multi-region cloud infrastructure to ensure high availability and data residency options for our customers. This means your data may be transferred to, stored, or processed in countries other than where you live.

When we transfer data originating from the European Economic Area (EEA), the UK, or Switzerland to other countries, we ensure it is protected by appropriate legal safeguards. This includes relying on adequacy decisions or implementing Standard Contractual Clauses (SCCs) approved by relevant regulatory bodies, ensuring your privacy rights travel with your data.

11. Changes to This Policy

Technology moves fast, and our business will continue to evolve. As a result, we may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

If we make significant changes, we will notify you by sending an email to the address associated with your account or by displaying a prominent notice within our platform before the changes take effect. Your continued use of our services after the effective date means you understand and acknowledge the updated policy. You can always find the most current version of this policy on our website.

12. Contact Us

If you have any questions, concerns, or feedback about this Privacy Policy or how we handle your data, we are here to help.

You can reach our privacy team directly at:

Email: mason@masonitestudios.com

We take your inquiries seriously and expect to respond to all privacy-related emails within 3 to 5 business days.