Privacy Policy

Information we process

Mothuso Malunga, trading as Qamba Labs is responsible for the personal information described in this policy. Contact us at support@qambalabs.com or 2301 Vanderbilt Place, Nashville, TN 37235, United States. We process your account email and authentication identifiers, project metadata, prompts, reference materials, generated assets, job records, collaboration settings and credit or billing records when you use the related cloud features. For purchases we also keep your billing country, the terms and acknowledgements you accepted at checkout, and any withdrawal statement you submit.

Local desktop project files are stored on your device. Cloud submission sends the inputs required by the service you deliberately select. A cloud upload or shared project is separate from a purely local project; do not submit confidential material unless the selected service and its policies meet your needs.

Why we use it

We use this information to authenticate you, store and deliver your work, run selected generation and planning services, enforce project access and spending permissions, handle payments and support, and investigate failures, abuse and security incidents.

The application uses essential browser or device storage for sign-in and preferences. Operational error reports can include job and device context; they are intended for diagnosing failures. We do not need your full card number to operate Studio.

Where European data protection law applies, we process information needed to deliver the requested service under our contract with you, retain legally required payment records to meet legal obligations, and protect the service and investigate abuse for our legitimate interests in security and reliability. Where we ask for consent, you may withdraw it without affecting earlier lawful processing. We assess these grounds for the particular processing; accepting these terms is not blanket consent to unrelated uses. Providing account and necessary job information is required for the corresponding feature to work.

Services that process data

Supabase provides cloud authentication, metadata and jobs; Vercel hosts the web application and API; Backblaze B2 and the configured media CDN store and deliver cloud media. The model provider selected for a job receives the prompts and reference inputs needed for that job. Providers can process information outside your country.

Stripe hosts checkout and customer billing management and processes payment details. Studio keeps purchase identifiers, payment status and credit reconciliation records, rather than full payment card numbers. Resend delivers our transactional emails, such as purchase confirmations, withdrawal acknowledgements and renewal notices.

Provider retention, training and model-output terms depend on the selected service and its own policies. Studio does not promise a universal provider retention or no-training rule. Model choices and use of your own key do not remove the need to review those terms.

Media links and sharing

Cloud media is currently delivered through public or unlisted URLs. Anyone who obtains such a URL may be able to retrieve the file. An unlisted link is not confidential or equivalent to access-controlled private storage. Avoid uploading sensitive content to that delivery path.

Project sharing gives the invited collaborator the access you authorize. Spending permission is separate. Copies downloaded by you, collaborators or recipients are outside Studio’s direct control.

Retention and requests

We retain account and project information to provide the service and retain payment, credit and security records where needed for reconciliation, dispute handling or legal obligations. Records of the purchase terms you accepted are kept for at least three years after the purchase or the end of the subscription. Backup and cache copies can take time to clear after removal.

Contact support@qambalabs.com to request access, correction or deletion of your information, or to raise a privacy concern. We verify account control before acting and explain any records that must be retained. Deleting a local file does not by itself delete a cloud copy, and deleting a cloud copy does not recall files already downloaded.

Depending on the law that applies to you, you may also request a portable copy, restriction of processing, or object to processing based on legitimate interests. You may complain to your local data protection authority. We handle requests through support and respond within applicable legal deadlines. Studio is intended for adults; please contact us if you believe a child has supplied personal information.

Policy changes

This page identifies its version and effective date. Material changes will be communicated through the application or the account contact channel as appropriate. Contact Qamba Labs at support@qambalabs.com with questions about this policy.