privacy policy

01 / Who we are

Studio 80 ("Studio 80", "we", "us", or "our") is an AI-native creative studio based in Tallinn, Estonia. This Privacy Policy applies to the website studio80.online and to the creative production services we offer.

For the purposes of the EU General Data Protection Regulation ("GDPR"), Studio 80 is the data controller of the personal information described below.

02 / What we collect

Information you give us

• Contact details — your name, email address, company, role, and anything else you include when you reach out to us at hi@studio80.online.
• Project briefs — product information, brand assets, reference materials, target audience details, and creative direction you share with us so that we can produce work for you.
• Billing details — name, billing address, VAT ID, and other information required to invoice you. Card numbers are processed by our payment provider; we never see or store them.

Information collected automatically

• Log data — IP address, browser type, device type, referring URL, pages visited, and timestamps, captured by our web server in standard access logs.
• Aggregated analytics — high-level traffic metrics (page views, geography at country level, device class). We do not use cross-site tracking and do not run third-party advertising pixels on this site.

Information from third parties

If you reach out via a social platform (e.g. Instagram, LinkedIn), we receive whatever information that platform exposes to us under its own privacy terms. We do not buy contact lists.

03 / How we use it

We use the information above to:

• Respond to your enquiries and proposals.
• Plan, produce, and deliver creative work commissioned by you.
• Send transactional emails about active projects and invoices.
• Operate, secure, and improve studio80.online.
• Comply with our legal, tax, and accounting obligations.

We do not sell your personal data, and we do not use it to train third-party generative AI models without your explicit written consent.

04 / Legal basis (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Contract — to deliver the services you've engaged us for.
• Legitimate interests — to operate and secure our website, respond to enquiries, and improve our services in a proportionate way.
• Legal obligation — to meet our tax, accounting, and regulatory duties.
• Consent — where we ask for it explicitly (for example, for case-study use of work we made for you).

05 / Sharing & processors

We keep our vendor list lean. We share personal data only with processors that help us run the studio:

• Hosting & infrastructure — the providers that host studio80.online and our internal tools.
• Email & communication — providers that deliver email and host project conversations.
• Payment & invoicing — processors that handle card payments and accounting.
• AI generation tools — image and video models we use as part of our production pipeline. We only send the inputs needed to produce your work, and we do not send personal data beyond what the brief requires.
• Professional advisors — lawyers, accountants, and similar advisors when strictly necessary.

We may also disclose information if required by law, to protect our rights, or in connection with a corporate transaction (for example, a merger). If that happens, we'll make sure the recipient is bound by terms at least as protective as this policy.

06 / Cookies & analytics

studio80.online uses only essential cookies needed to serve the site. We do not run third-party advertising trackers or social pixels on this page, and we do not use cookies that follow you across other websites.

Standard web fonts are loaded from Google Fonts, which means your browser makes a request to Google's servers. Google may receive your IP address as part of that request. You can review their practices at policies.google.com/privacy.

07 / Data retention

• Enquiries — kept for up to 24 months from your last message, then deleted if no project starts.
• Active projects — kept for the duration of the engagement.
• Project archives — final deliverables and key project files kept for up to 7 years for portfolio, dispute, and tax purposes, unless you ask us to delete them earlier.
• Invoices & accounting — retained for the period required by Estonian tax law (currently 7 years).
• Server logs — typically retained for 30–90 days.

08 / Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct it if it's wrong.
• Ask us to delete it ("right to be forgotten").
• Restrict or object to how we use it.
• Receive it in a portable format.
• Withdraw consent at any time, where we relied on it.
• Lodge a complaint with your local data protection authority — in Estonia, that is the Andmekaitse Inspektsioon (aki.ee/en).

To exercise any of these rights, email us at hi@studio80.online. We will respond within 30 days.

09 / Security

We protect personal data with industry-standard measures: HTTPS everywhere, access controls on internal tooling, encrypted storage where supported by our providers, and a strict need-to-know policy inside the studio. No system is perfectly secure, but if we ever discover a breach that affects your data, we will notify you and the relevant authority as required by law.

10 / International transfers

Studio 80 operates from the European Union, but some of our processors (notably AI tooling and certain SaaS providers) are based in the United States or other regions. When personal data leaves the EU/EEA, we rely on lawful transfer mechanisms — typically the European Commission's Standard Contractual Clauses or an adequacy decision — and we choose providers with credible security and privacy commitments.

11 / Children

Our services are aimed at businesses and adult creative professionals. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

12 / Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we'll update the "last updated" date at the top of the page and, where appropriate, notify you by email. Continued use of studio80.online after a change means you accept the updated policy.

13 / Contact us

Questions, requests, or concerns? We read every message.