Privacy Policy
This Privacy Policy explains how Art Studio Agency ERP handles information when authorized users sign in to and use the internal business platform.
Information we process
- Identity information supplied by the authentication provider, such as name, email address, and profile image.
- Application role, account status, and authentication session information used to control access.
- Business and operational information entered or generated by authorized users while using the ERP.
- Audit and activity records needed for security, accountability, operational history, and financial controls.
How we use information
Information is used to authenticate users, enforce role-based permissions, operate the ERP, maintain audit trails, support business processes, protect the service, investigate errors, and provide support. Authentication-provider identity is used as evidence of identity; ERP authorization and business roles remain controlled by the ERP.
Google account and API data
When Google Sign-In or other approved Google integrations are used, Art Studio Agency ERP accesses only the information and permissions necessary for the enabled feature.
When Google Calendar integration is enabled, Art Studio Agency ERP uses the Google Calendar API to create, update, and synchronize ERP operation events in the calendar configured for the ERP. Calendar-related data processed for this purpose may include operation date and time, hotel, department, performer name and email address, performance type, event details, and attendee invitation information.
The ERP may store the Google Calendar event identifier, synchronization status and errors, synchronization time, and performer invitation status needed to maintain the relationship between an ERP operation and its corresponding Google Calendar event. Google Calendar data is used only for operation scheduling, calendar synchronization, and performer invitation functionality.
Use of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.
Sharing
Art Studio Agency does not sell personal information. Information may be processed by service providers that are necessary to operate the platform, such as identity, hosting, database, monitoring, or integration providers, subject to their applicable terms and security controls.
Retention
Business, operational, financial, and audit records may be retained as required for legitimate business, security, accounting, contractual, or legal purposes. Authentication sessions may expire or be invalidated according to the ERP's security configuration.
Security
The platform uses HTTPS, authenticated sessions, role-based access controls, audit logging, and other technical and organizational safeguards appropriate to an internal ERP system. No security control can guarantee absolute protection, so access is limited to approved users.
Your choices and requests
Authorized users may contact Art Studio Agency to request assistance with account access, correction of account information, or questions about how their information is handled. Certain business or audit records may need to be retained where required for operational, accounting, security, or legal reasons.
Changes to this policy
This policy may be updated as the ERP, its integrations, or applicable requirements change. The effective date at the top of this page will be updated when material changes are published.
Contact
Art Studio Agency
Email: artstudioagency2025@gmail.com