Privacy Policy
This Privacy Policy explains how KONAH MEDIA GROUP LLC ("KONAH", "we") collects, uses and shares personal data when you use KONAH Studio. We keep it simple: we collect what we need to run the Service, we don't sell personal data, and we don't use your photos or videos to train AI.
1. Our two roles
Controller. For account holders (studio owners and team members) and visitors to our marketing site, KONAH is the controller of your personal data.
Processor. When a studio uploads its clients' information or content, or a client uses a gallery, portal or studio website, the studio is the controller and KONAH processes that data on the studio's behalf under our Data Processing Addendum. If you're a studio's client, contact that studio first about your data; we'll help them respond.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email, password (stored only as a salted hash), studio name, role | You |
| Studio profile | Business name, logo, bio, location, phone, Instagram handle, brand color | You |
| Content | Photos, videos, files, gallery titles and descriptions, messages, notes | You, your team, your clients |
| Client records | Names, emails, phone numbers and notes that studios add, website inquiries | Studios and their clients |
| Billing data | Plan, subscription status, Stripe customer ID. Card details are collected and stored by Stripe, never by us | You, Stripe |
| AI inputs and outputs | The text you type into KONAH AI and the text it returns | You |
| Technical data | IP address, browser type, device information, pages requested, error logs | Automatically |
3. How we use it and our legal bases
- To provide the Service — accounts, storage, galleries, portals, emails you send, studio websites (contract).
- To bill you through Stripe and keep required records (contract; legal obligation).
- To keep the Service secure — preventing fraud, abuse, spam and illegal content, enforcing our policies (legitimate interests; legal obligation).
- To support you and send service messages like password resets, invites and billing notices (contract; legitimate interests).
- To improve the Service using aggregated, de-identified usage information (legitimate interests).
- Marketing emails about KONAH products only where permitted, with an unsubscribe link in every message (consent or legitimate interests).
We do not sell or "share" personal data for cross-context behavioral advertising, and we do not use your images, videos or client data to train AI models.
4. Who we share it with
We share personal data only with service providers that help us run KONAH Studio (listed on our Subprocessors page), under contracts that limit their use of it; with the people you choose to share galleries, portals and messages with; when required by law or to protect rights and safety; and with a successor in a merger, acquisition or asset sale, with notice to you.
5. International transfers
We're based in the United States and our providers operate globally. When we transfer personal data from the EU, EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or the EU-U.S. Data Privacy Framework where a provider is certified.
6. How long we keep it
- Account and studio data: while your account is active.
- Content: until you or your studio delete it. After a studio is deleted, content is removed from active storage promptly and from backups within 90 days.
- After a cancelled paid plan, your studio moves to the Free plan; we will not delete content for exceeding Free limits without at least 60 days' notice.
- Billing records: as long as tax and accounting law requires (generally up to 7 years).
- Security logs: up to 12 months.
7. Security
We use encryption in transit (HTTPS), encrypted storage at our providers, salted password hashing, access controls by role, and private, hard-to-guess links for galleries and portals. No system is perfectly secure; if we learn of a breach affecting your personal data, we'll notify you and regulators as the law requires.
8. Your rights
Depending on where you live (for example under the GDPR, UK GDPR, the California Consumer Privacy Act, or the Virginia Consumer Data Protection Act), you may have the right to access, correct, delete or port your personal data, to object to or restrict certain processing, to withdraw consent, and to appeal our decision on a request. You can update most information and export your studio data in the app. For other requests, email privacy@konahmedia.com. We'll respond within the time the law requires (usually 30–45 days) and won't discriminate against you for exercising your rights. EU/UK residents may also complain to their local data protection authority. We honor Global Privacy Control signals as a request to opt out of sale or sharing, although we don't sell or share personal data.
9. Cookies
We use only essential cookies — to keep you signed in and remember which studio you're working in. We don't use advertising or cross-site tracking cookies. See our Cookie Policy.
10. Children
KONAH Studio is for adults running a business and is not directed to children under 13 (or under 16 in the EU/UK). We don't knowingly collect their personal data from them; if we learn we have, we'll delete it. Studios that photograph minors are responsible for obtaining parental consent for that work.
11. Changes and contact
We'll post changes here and notify you of material changes by email or in the app. Questions? privacy@konahmedia.com · KONAH MEDIA GROUP LLC, 12781 Darby Brook Ct Ste 102, Woodbridge, VA 22192, USA.