Who we are
Northline Studio (“the studio”, “we”) is an independent product studio. This policy describes how the public website at northlinestudio.dev, the customer account area, the partner portal, and related studio pages handle information.
We sell software you operate. We are not a hosted payment processor, custodian, bank, or legal practice. Product deployments you run are your systems — this policy covers the studio’s own website, accounts, and correspondence, not databases you host after a license.
What we collect
Inquiries and email: name, work email, company, project description, budget range, and timeline if you use the inquiry form, plus anything you write to the studio address.
Accounts and orders: when you check out, we create an account for your email address and record your orders, receipts, and the licenses issued to you. We store a hashed password — never the password itself. Support tickets and the messages in them are stored with your account.
Free downloads: your email address, which freebie you asked for, the version of the freebie licence you accepted, and whether you opted in to our mailing list.
Partner program: if you apply to sell a product through the studio, we collect the application (contact details, company, product description, website, pricing ideas) and the messages exchanged during review. Approved partners also give us payout details (method and account details) and tax details (legal name, country, tax ID), and we record acceptance of the partner agreement.
Payments: checkout currently runs in a sandbox mode. No card is charged and we do not store card numbers, expiry dates, or CVC codes. When live payments are enabled we will name the payment provider here; card data will be handled by that provider, not stored by the studio.
We do not sell a mailing list from this site.
How we use it
To provide what you asked for: reply to inquiries, create and maintain your account, issue licenses and receipts, deliver downloads, answer support tickets, review partner applications, calculate and pay partner revenue shares, and handle refunds.
To send service email: receipts, account set-up links, password links, ticket and application replies, partner sale and payout notices. We only send marketing email if you opted in, and you can unsubscribe at any time by replying to any email.
To keep the service safe: rate-limiting abusive requests, recording an audit trail of administrative actions (such as refunds, payouts, and account suspensions), and investigating misuse.
We do not use what you send to train public models, append it to a growth list, or share it with advertisers. If you write about a named engagement, we treat that as confidential unless you have already published it or ask us to.
Why we may process it
Where UK or EU law applies, we rely on: performing a contract with you (accounts, orders, licenses, partner payouts); legitimate interests (running and securing a small studio website, answering inquiries, keeping records); legal obligations (tax and accounting records); and your consent (optional mailing-list subscriptions).
Cookies and local storage
When you sign in we set a secure, HTTP-only session cookie so you stay signed in for up to seven days. It is strictly necessary for the account area and the partner portal.
Your browser also stores small preferences locally: light or dark theme, the glow-cursor setting, whether you have dismissed a product-page offer (so it does not reappear for 24 hours), and table view choices in the console. These are not sent to the studio as a profile.
We do not run advertising pixels, retargeting tags, or a third-party analytics suite on this site.
Where it is processed
Our providers may process data outside your country, including in the United States. Where required, we rely on the safeguards those providers offer, such as standard contractual clauses.
Security
Passwords are hashed. Partner payout and tax details are visible only to you and to studio administrators who pay partners. Access to the admin console is limited to invited administrators. No system is perfectly secure; if a breach affects your information we will tell you as the law requires.
Retention
Inquiry and email records are kept only as long as needed to reply and to keep a short studio archive of conversations. Account, order, license, and receipt records are kept for as long as your account exists and afterwards as long as tax, accounting, or dispute obligations require. Partner payout and tax records are kept for the period those obligations require.
You can ask us to delete correspondence that is not required for an active license, engagement, or legal obligation.
Your choices and rights
Write to hello@northlinestudio.dev to access, correct, export, or delete personal information we hold about you, to object to a use, or to withdraw consent to marketing email.
If you are in a jurisdiction with additional rights (including the EEA, UK, or California), we will honour a valid request to the extent the law applies to a small studio website of this kind. You may also complain to your local data-protection authority.
Where records are tied to financial history, we may anonymise rather than erase them, as the law permits.
Children
The site is written for operators and businesses. It is not directed at children, and we do not knowingly collect information from anyone under 16.
Changes
If this policy changes in a material way, we will update the date on this page and, where we hold your email for an account, tell you. Continued use of the site after that date is the notice.