Privacy Policy

The Campaign Studios is operated by The Campaign Studios Technology Limited, a private limited company registered in England and Wales under company number 17532058, with its registered office at 40 Selhurst Place, London, SE25 5PY.

The Campaign Studios Technology Limited is the controller of your personal data.

Contact: info@thecampaignstudios.com

• ◆Account: your name, email address and password (stored as a secure hash, never readable by us). If you sign in with Google or Apple, we receive your email address from them, and your name if they share it, instead of a password.
• ◆Enquiries: if you write to us through the Contact page, send a request, or ask to be told when the studio opens, what you give us there: your email address and, where the form asks for them, your name, company or school, role, website and what you wrote. You do not need an account for any of these.
• ◆Your brands and work: brand names and materials, the products, garments and photographs you upload, and the campaigns and photographs made in your account.
• ◆Photographs of people: if you upload a photograph showing a person, or apply as a model, we hold that image.
• ◆Contributors: your profile, portfolio, links and the work you submit.
• ◆Messages: the conversations you have with other members in the studio, what was written and when.
• ◆Payments: handled by Stripe. We receive a record of what was paid and never see your full card number.
• ◆Usage: which pages you use and what you make, to run and improve the studio, and technical data such as device type and error reports.

To provide the studio and make your campaigns; to keep your account secure; to take payment; to answer you; to improve the studio; and to meet legal duties.

We do not sell your data. We do not use what you upload to train AI models.

A photograph you upload of a person is used only to make your own campaigns. You must have that person's permission. Models who join the studio agree to their likeness being used in campaigns made in the studio, and can withdraw.

A message you send is shown to the member you send it to. We read a conversation when somebody in it reports it, and where the law requires it. There is no other way for us to open your messages: the studio has no screen that browses them.

A message carries your name, the brand you wrote as if you have one, what you wrote and when. Your email address is never attached to a message.

A conversation lives while both of you have accounts. If either of you closes an account, the conversation goes with it, for both sides.

If you are a contributor, you can block a member who writes to you, from the conversation. They are not told, and they cannot write to you again.

Reporting a conversation: you can report one from inside it. We see what you said was wrong and we read that conversation. The other person is not told that you reported it. Reporting does not block them, and you can do both.

You can connect an AI assistant, such as Claude, to your studio. Nothing is connected until you sign in on our page and press Allow, and on that page you choose whether it may also save campaign drafts. Any studio account can connect one.

A connected assistant can read your account email, first name and your role in the studio; your campaigns and what each one is made of, including your notes, the beauty looks you saved, your fittings and whether they are approved, the credits each campaign has used, and the short written reason the quality check gave for any photograph it held back; the names, types and colours of your own wardrobe pieces and which sides of them were photographed; and the studio's libraries, with their preview pictures of the Cast, Worlds, styling, hair, makeup and shots, some of them made by contributors. If you work in someone else's studio as a teammate, it reads that studio, as you can.

If you allowed drafts, it can save campaign drafts in your studio for you to finish. Changing a draft can mean an approved fitting no longer applies to it. It cannot see your own photographs, uploads or files, read your messages, make photographs, spend credits, or approve, start or delete anything.

What the assistant does with what it reads is up to the company that runs it, under its own terms and privacy policy. We keep a record of the connection itself: which app, when it was connected and last used, and each draft it saved or was refused. We store only a fingerprint of the keys it uses, never the keys themselves.

You can disconnect at any time from Account in the studio, under Connected apps. It stops straight away. Drafts it saved stay in your campaigns until you delete them. Deleting your account ends every connection.

If you turn on notifications in Account, under Notifications, your browser gives us an address to send them to on that device, which we keep with your account. We use it only to tell you that a campaign or a test shot is ready, that someone wrote to you, or that there is news on a brief or an application. A notification never shows what a message says or what was decided. Your browser's maker delivers them (for example Apple, Google or Mozilla). You can switch each kind off, or turn notifications off on a device, at any time; deleting your account removes these addresses.

Contract (providing the studio you signed up for); legitimate interests (security, improvement, preventing misuse); consent (analytics cookies, marketing emails); legal obligation (tax and accounting records).

• ◆Supabase: database, file storage and sign-in.
• ◆Vercel: hosting.
• ◆fal.ai, and the companies whose models fal runs, including Google: making and editing photographs and video.
• ◆Anthropic: reading a brief and checking a photograph.
• ◆Dynamic Mockups: product mockups in the Brand Studio.
• ◆Stripe: payments. When paying contributors is switched on, Stripe Connect holds the accounts contributors are paid into.
• ◆Resend: email.
• ◆Upstash: short-lived counts of how often an account or an internet address asks for something, to limit misuse. Its servers are in Frankfurt.
• ◆Sentry: error reports.
• ◆PostHog: product analytics, only after you accept analytics cookies. PostHog is in the United States. It is told which pages and features you use, with an identifier for your account, and never your email address or name.
• ◆Google: sign-in, if you choose Sign in with Google; and website analytics (Google Analytics), only after you accept analytics cookies.
• ◆Apple: sign-in, if you choose Sign in with Apple. Apple may give us a private relay email address in place of your own.

Each acts on our instructions.

Some of these providers process data outside the UK. PostHog, for example, is in the United States. Where they do, we rely on the UK's adequacy decisions or on standard contractual clauses.

Your account and work: for as long as your account is open. When you delete your account, your campaigns, brands and files are deleted straight away. Messages: for as long as both members have accounts, and they are deleted when either account is. Enquiries: until you ask us to delete them; if you have an account under the same email address, deleting the account deletes them too. Payment records: six years, as tax law requires.

You can ask to see your data, correct it, delete it, restrict or object to how we use it, and receive a copy of it. Write to info@thecampaignstudios.com to ask for any of these, including a copy of your data. You can also delete your account yourself from Account in the studio. We answer within 30 days. If you think we have got something wrong with your personal data, you can complain to us at thecampaignstudios.com/privacy-complaint: we acknowledge every complaint within 30 days, look into it, and tell you the outcome. You can also complain to the Information Commissioner's Office (ico.org.uk). If you live in the United States, you have the rights your state's law gives you, and we do not sell or share your data for advertising.

The studio is for people aged 18 and over.

We will tell you of important changes to this policy before they apply.