Privacy Policy

K Studio OS, operated by KroxFlow FZ-LLC ("we", "us"), respects your privacy. This Privacy Policy explains what data we collect, why we collect it, who we share it with, and the choices you have. It applies to kstudioos.com and every related app, API, and portal we operate.

We collect the following categories of personal data:

• Account data — name, email, phone, role (client / studio / freelancer / print lab / driver), studio affiliation.
• Profile data — portfolio assets, verification documents, ratings.
• Request & booking data — event details, venue, date, budget range, brief, claims, accepted matches.
• Operational data — assignment statuses, print order statuses, delivery statuses, OTP-confirmation records.
• Location data — driver geolocation pings during active deliveries (latitude, longitude, accuracy, heading, speed). Only collected while a driver opts in via the driver portal.
• Communication data — WhatsApp messages sent via the platform (delivery receipts, read receipts), in-app activity logs.
• Technical data — IP address, device, browser, and usage analytics. Required for security and basic operation.

We use the data to:

• Operate the Service — accounts, matching, dispatch, tracking;
• Show the right requests to the right roles;
• Verify identity and trade licences where required;
• Send transactional emails (signup, recovery, invite, OTP);
• Send WhatsApp notifications via our Composio integration;
• Improve and secure the Service;
• Comply with UAE law and respond to legal requests.

We share data with:

• Other users you transact with — when a studio or freelancer accepts your request, they see the brief and contact details you submitted; when a client accepts a claim, the claimer sees the client name and event location.
• Sub-processorswho power the Service: Supabase (database + auth), Vercel (hosting), Loops (transactional email), Composio (WhatsApp messaging), Cloudflare (DNS & CDN), MapLibre & OpenStreetMap (tiles). Each is bound by their own privacy commitments.
• Authorities when required by UAE law or to protect the rights, property, or safety of K Studio OS, users, or the public.

We do not sell personal data. We do not share it for third-party advertising.

We use only essential cookies needed for authentication and security. We do not use third-party advertising or tracking cookies. Disabling essential cookies will break sign-in.

We retain account data while your account is active and for a reasonable period afterwards to satisfy legal and operational obligations. Driver location pings are retained for up to 7 days for active-delivery review, then purged. OTP-confirmation records are retained for 2 years as proof of delivery, unless a longer period is required by law.

You may request to access, correct, export, or delete your personal data. Where the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies, you also have rights to restrict processing and object to specific uses.

Submit requests to privacy@kstudioos.com. We respond within 30 days.

We protect data with row-level security in the database, encrypted transport (TLS), least-privilege server access, and HMAC-signed webhooks. No system is perfectly secure; report suspected issues to security@kstudioos.com.

The Service is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account.

We may update this Policy from time to time. Material changes will be notified via the email on your account or via an in-app notice.

KroxFlow FZ-LLC · Dubai, UAE · privacy@kstudioos.com