Security & Privacy
How Studio Management Pro protects your data and manages access to your studio's information.
Data Security
Studio Management Pro is built on Firebase (Google Cloud), one of the world's most trusted infrastructure providers. All data is:
- Encrypted in transit using TLS 1.3
- Encrypted at rest by Google Cloud
- Stored in secure, redundant data centres
- Protected by Firebase Security Rules that restrict access based on user identity
Authentication
User authentication is handled by Firebase Authentication, which supports:
- Email and password login
- Google Sign-In (OAuth 2.0)
- Secure password hashing (no plaintext passwords are ever stored)
Role-Based Access Control
Access to data is strictly enforced by user role:
- Super Admin — Platform-wide access (Studio Management Pro team only)
- Admin — Full access to their own studio's data only
- Staff — Limited access to scheduling and student management
- Student — Access to their own bookings, payments, and profile only
Payment Security
All payments are processed by WiPay, a PCI-compliant payment gateway. Studio Management Pro never stores, transmits, or has access to your raw card details.
Data Retention
Audit logs and platform events are retained for 90 days. Older records are automatically purged. Student and studio data is retained as long as your studio subscription is active.
Privacy
We do not sell or share your personal data with third parties. Student data belongs to your studio and is governed by our Privacy Policy.