Privacy Policy

Riera-Studio may process account email, company or workspace data, inventory records, clients, jobs and events, invoices, payments, documents metadata, support messages and activity logs.

The exact data depends on how each company configures and uses its workspace.

Data is processed to provide account access, support company operations, maintain security, respond to support requests and improve the service.

Activity and technical records may be used to investigate errors, misuse or security issues.

The app is designed to use Supabase/Postgres for application data and a Vercel-hosted web app for delivery.

Environment-specific providers may process technical data required to run, secure and deliver the service.

Authorised company members can access company-owned data based on their role. Platform administrators may access data for support, security or administrative purposes where needed.

Company-owned data is intended to be separated by company or workspace so users from one company must not access another company’s data.

Users may contact support to request correction, deletion where applicable, export where applicable or help with account and workspace access.

Requests may need to be verified before changes are made to protect company data.

Riera-Studio uses authentication, row-level-security-ready database design, server-side permission checks and environment variables for secrets.

Secrets such as service role keys and database URLs should only be configured in secure server-side environments.