Updated 12 October 2026

Privacy notice

Sales Squad Oy, Finland, is the controller responsible for the personal information handled by Taika Studio. For privacy questions or requests, contact mikael@ssquad.info.

What we collect and why

When you sign in with Google or Apple, the identity provider and Supabase Auth provide an account identifier, email address and basic profile information. We use this information to create your account, authenticate you and protect access to your projects. We request only basic identity scopes, not access to your email messages, contacts, calendar or documents.

We store the project names, website copy, brand assets, references, preferences and profile details you choose to save. These records let you reopen and develop your website plans. Hosting services may record technical information, including IP addresses, request times and errors, for security and service operation.

Legal bases

Account authentication and project storage are necessary to provide the workspace you request (performance of a contract). We process security and operational records for our legitimate interest in protecting accounts and keeping the service reliable. Applicable accounting and other legal duties provide the basis for records we must retain. Any optional marketing uses a separate consent, which you may withdraw without affecting your workspace.

Sign-in information is required for a private saved workspace. You choose which project content and assets to provide. Without sign-in, you can browse templates and try an isolated sample in the editor. Sample changes reset on reload. Sign-in is required to save a private account project. Studio does not make automated decisions about you with legal or similarly significant effects.

Where your information is processed

Supabase provides authentication. OpenAI Sites and its Cloudflare infrastructure host the application and store project records and uploaded assets. Google or Apple processes its own sign-in flow. Stripe processes checkout and billing; Studio stores related customer, order and subscription identifiers and payment status. Card details are entered on Stripe, not stored by Studio.

Providers may process information outside your country, including outside the European Economic Area, under their applicable data protection arrangements. You can contact us for details of the providers, processing locations and applicable international-transfer safeguards for your data. Optional marketing requires its own choice; registering for Studio does not subscribe you to marketing.

Project access and sharing

Saved projects are associated with your authenticated account. If you create or distribute a project invitation or review link, people with that link may access the information allowed by it. Share links only with intended recipients. We use Google identity information for account access and workspace operation, not to build advertising profiles or train AI models.

Cookies and browser storage

Studio uses session cookies and browser storage for sign-in security, workspace operation and your interface preferences. Google, Apple and Stripe handle storage used by their own authentication and payment pages.

Retention and your choices

Account and project records are retained while your workspace is open, unless you request deletion. On closure, we remove records no longer needed for the service; information subject to a legal retention duty or needed to resolve a documented security incident or claim is handled separately. Retention of technical logs is limited by their operational or security purpose and the hosting provider’s retention settings. Backup copies are removed through the provider’s backup rotation rather than by immediate individual deletion. Contact us for details applicable to your records. You can request access, correction, export, deletion, or restriction of processing by emailing us. Where applicable, you may object to processing based on legitimate interests and request data portability. We may need to verify your identity and will explain any lawful limit on a request.

You can sign out from your workspace and revoke the Google or Apple connection in your identity provider's account settings. Revoking sign-in does not itself delete saved projects. You may raise a data protection concern with the Finnish Data Protection Ombudsman or your local supervisory authority.