Privacy Policy

1. Introduction

CASA studio ("we," "our") is committed to protecting the confidentiality and security of your personal information. This policy describes how we collect, use, retain, and protect your data in connection with our video production services.

2. Data Collected

In connection with our services, we collect the following information:

Full name and contact details (email address, phone number)
Payment information processed securely via Stripe (we do not store your credit card data)
Session details: dates, shoot locations, package type, content preferences
Communications exchanged in connection with project planning

3. Use of Data

Your personal information is used exclusively for:

Session planning: organizing and coordinating shoots and pre-production
Payment processing: billing and transaction management via Stripe
Communication: sending you confirmations, reminders, and updates regarding your sessions
Service improvement: analyzing our processes to better serve our clients

4. Project Confidentiality

All discussions, production plans, and information shared in connection with the planning of your projects are considered confidential. CASA studio will not disclose any information related to your project without your prior consent, unless required by law.

5. Storage and Security

Your data is stored and protected by the following platforms:

iCloud: secure storage of project files and media
Stripe: secure processing and storage of payment data (PCI DSS certified)
Google Workspace: management of communications and planning documents
Microsoft Clarity (Microsoft Corporation): anonymous behavioral analytics of the website (heatmaps, session recordings, navigation paths) used to improve user experience. Sensitive content (form fields, typed text) is masked automatically. No personally identifiable information is transmitted. You can opt out by enabling your browser's Do Not Track setting or by using an analytics-blocking extension.

We implement appropriate security measures to protect your information against unauthorized access, loss, or destruction.

6. Retention and Deletion

Your personal information is retained for as long as necessary to provide our services and meet our legal obligations. Production files are retained for a reasonable period after final delivery.

You may request the deletion of your personal data at any time by contacting us. We will process the deletion within 30 days, subject to our legal retention obligations.

7. Your Rights

In accordance with Quebec's Law 25 on the protection of personal information, you have the following rights:

Right of access: obtain a copy of your personal information that we hold
Right of rectification: have any inaccurate or incomplete information corrected
Right of deletion: request the deletion of your personal information
Right to withdraw consent: withdraw your consent to the use of your data at any time

To exercise any of these rights, contact us at info@casastudio.ca.

8. Cookies and Analytics

casastudio.ca uses Microsoft Clarity, an analytics tool that sets cookies to understand how pages are used: page views, clicks, scrolling. No advertising cookies are used and no data is sold.

In accordance with Quebec's Law 25, these cookies are off by default. They are only activated after you agree, in the notice shown on your first visit. Your choice is kept for twelve months on your device and you can change it at any time.

For any questions regarding this policy, contact us at info@casastudio.ca.

9. Mobile Apps

CASA studio offers an iPhone app, "CASA studio" (client portal), and an internal app for its team. This policy applies to them in full. What the app collects, and why:

Contact details (name, email, phone, shooting address): to create your file, reach you and plan sessions. The address is a postal address you type in; the app never asks for your location.
Content you upload (video files, photos, comments on edits, chat messages): to produce and deliver your videos.
Booking and billing history: to show your sessions and invoices. Card data is handled by Stripe and never goes through the app.

This information is linked to your account and used only to run the service. The app contains no advertising tracker and no third-party analytics, and no data is shared for tracking purposes. You sign in with a link sent to your email address; no password is stored.

Account deletion: you can delete your account directly in the app (My account, Delete my account). Your sessions are revoked immediately and your information is erased, except accounting records we are legally required to keep (invoices, up to 6 years).

10. Connected social media accounts

If you have the Social Media Management option, you can connect your Instagram, Facebook, TikTok, YouTube or LinkedIn accounts in the app (Stats, Upcoming videos, Your accounts). You connect on the platform itself: you give it your approval, and we never see your password.

What we do with this access:

Publish your videos: only the videos we produced for you, with the planned text, after the approvals you chose (yours, our team's, or automatic if you asked for it).
Read your results: the numbers for these posts and for your account (views, likes, comments, shares, saves, followers), to show them in the app and prepare your reports.
Show the name of the connected account or Page.

What we never do: publish anything other than your approved videos, send messages, reply to comments, change your profile, read your private messages, or sell or share this data.

The access keys issued by the platforms are encrypted on our servers and are never sent to the app or to any third party. Each platform also applies its own policy: Meta (Instagram and Facebook), TikTok, Google (YouTube) and LinkedIn. By connecting YouTube, you agree to the YouTube Terms of Service and the Google Privacy Policy.

Removing access: in the app (Remove, next to the account) or in the platform's settings (for Google: myaccount.google.com/permissions). The keys are then erased. Numbers already collected stay in your file for your reports unless you ask us to delete them: email info@casastudio.ca and we will do so within 30 days. Step-by-step instructions are on the Your connected social accounts page.