Privacy Policy

Privacy Policy

This Privacy Policy explains how openz.studio ("we," "our," or "us") collects, uses, and protects your personal information when you use our platform, whether as an instructor or a student. By using the Service, you acknowledge that you have read and agree to this Policy.

1. Who We Are

openz.studio is a platform that allows instructors to offer live and on demand yoga and pilates classes, and allows students to book and participate in those classes.

• Data Controller: User accounts, platform operations, and analytics
• Data Processor: Instructor created content or communications

We comply with GDPR, UAVG (Dutch Data Protection Act), and CCPA where applicable.

2. Information We Collect

We collect information in three ways: information you provide, information collected automatically, and information from third party services.

2.1 Information You Provide

• Account Information: Name, email, password, timezone, profile info
• Instructor Information: Bio, specializations, identity verification documents, studio branding
• Payment Information: Billing address, purchase history (full card numbers are never stored by Openz; Stripe handles all payment data.)
• Communication: Messages with instructors or students, customer support inquiries
• Class Content: Uploaded videos, materials, class descriptions

2.2 Information Collected Automatically

• Usage Data: Pages viewed, click behavior, actions taken, time spent
• Device Data: IP address, browser type, operating system
• Cookies: Essential cookies for authentication; optional cookies for analytics with consent
• Live Class Data: Attendance, interaction logs, recording URLs (if enabled)

2.3 Information from Third Parties

• Stripe: Payment status, transaction IDs, payout information
• Daily: Video session metadata, recording links
• Google: If you sign in with Google, we receive name, email, and profile image

3. How We Use Your Information

We use personal data to operate the platform, process bookings and payments, deliver instructor payouts, enable live classes and recordings, improve performance, send notifications and transactional emails, prevent fraud or misuse, and comply with legal requirements. We do not sell your personal information.

4. Legal Basis for Processing (GDPR)

• Contract Performance: Providing classes, processing payments, delivering payouts
• Legitimate Interest: Improving usability, preventing fraud, platform security
• Consent: Newsletter subscriptions, optional cookies
• Legal Obligation: Financial recordkeeping, tax compliance, regulatory reporting

5. Sharing of Information

We share the minimum necessary information with trusted service providers and other parties as outlined below. We never sell user data.

• Stripe: Payment and payout processing
• Daily: Video calls and recordings
• Supabase: Database and authentication
• Vercel: Hosting and CDN
• Email Providers: Transactional and notification emails
• With Instructors: Students’ names and emails for booked classes
• With Students: Instructor profiles, bios, class details
• If Required by Law: Court orders, governmental requests
• In a Business Transfer: Merger, acquisition, or restructuring

6. International Data Transfers

Our infrastructure primarily operates in the EU. Some providers (Stripe, Vercel, Daily) may process data in the United States under the EU-US Data Privacy Framework, Standard Contractual Clauses (SCCs), and GDPR compliant data processing agreements.

7. Data Retention

• Active accounts: Data retained for ongoing use
• Closed accounts: Most data deleted within 90 days
• Financial records: Retained for 7 years (Dutch law)
• Recordings: Stored according to the instructor membership plan
• Marketing data: Deleted upon unsubscribe

8. Your Rights

Under GDPR and CCPA, you may access, correct, delete, export, limit processing, withdraw consent, opt out of marketing, object to profiling or analytics, and file a complaint with the Dutch Data Protection Authority. To exercise these rights, contact info@openz.studio. We respond within 30 days.

9. Cookies

Openz uses essential cookies (authentication, security, core functionality), analytics cookies (optional, with consent), and preference cookies (language, settings). Disabling essential cookies may limit functionality.

10. Children’s Privacy

Openz is not intended for users under 16 years old (13 in the US). We do not knowingly collect data from minors. If you believe we have collected such data, contact us and we will delete it.

11. Security

We use HTTPS/TLS, Row Level Security, strong password hashing, access controls, audit logs, and backups. No system is 100% secure, but we take reasonable measures to protect your information.

12. Marketplace Payment Model and Privacy

When a student makes a purchase:

• Stripe Connect supported countries: Instructor payouts go directly from Stripe to the instructor.
• Non Connect countries including Turkey: Funds are collected temporarily by Openz on behalf of the instructor; Openz deducts its platform commission and then transfers the instructor share via Wise or bank transfer.

Instructor earnings are the property of the instructor. Openz only processes data necessary to execute the payout and does not treat this money as its own revenue. We store only minimal payout related information such as payout amount, payout status, and transaction reference.

13. Third Party Links

Links to external websites (social media, instructor sites) are not controlled by Openz. We are not responsible for their privacy practices.

14. Changes to This Privacy Policy

We may update this Policy. Material updates will be communicated by email and platform notification. Continued use after changes means acceptance.

15. Contact Information

If you are not satisfied with our response, you may contact the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl