What we hold, where, and for how long.

What we collect

• When you pay: Stripe collects your card, name, email and billing address. The studio receives your email, the offer, the amount and a Stripe reference. Never your card number.
• When you submit an intake: the answers you give and the files you upload. Send nothing you would not want a processor to read; never send credentials.
• When you visit the site: a first-party page count by day, path and referring site. No IP addresses, no user agents, no cookies, no third-party analytics. The totals are public at /stats.json.
• When you email us: the email.

Where it lives

• Orders, intake, job status: a Cloudflare D1 database (studio-db) owned by the studio.
• Deliverables and your files: a private Cloudflare R2 bucket (studio-deliverables), reachable only through tokenized, no-index links.
• Working copies: a job folder on the studio’s own machine, purged 30 days after release.

Who processes it

• Anthropic — the language models that do the work, under Anthropic’s commercial terms. No customer data is used to train models; the studio’s account training opt-out is on.
• Stripe — payments, receipts, invoices, refunds.
• Resend — transactional email from studio@curiouskelly.com. No marketing email is sent, ever.
• Cloudflare — hosting, database, file storage.

No data is sold. No data is shared with anyone not on that list. No advertising pixels exist on this site.

How long

• Intake answers and files: until 30 days after release, then purged from the job folder; the R2 copy stays available at your private link until you delete it or 12 months pass, whichever is first.
• Order records: 7 years, as bookkeeping requires; reduced to the Stripe reference, amount and date after your delete request.
• Analyst archives: for as long as you subscribe, plus 90 days.
• Page counts: 400 days.

Delete my data

Every email from the studio carries a delete-my-data link. Clicking it, or writing to studio@lotdpbc.com, deletes your intake, files and deliverables within 7 days and leaves only the bookkeeping record above. You will get one confirmation email.

Your rights

Whatever your jurisdiction grants you — access, correction, deletion, portability — write to studio@lotdpbc.com and it is honoured within 7 days. California residents: the studio does not sell or share personal information as the CCPA defines those terms.