Legal

Privacy policy

What data we hold on your studio and the families in it, why we hold it, who else touches it, and how to get it back or deleted.

Draft, not yet legal advice. This page records what the product actually does with data, as a basis for counsel to turn into a binding policy. It is not a reviewed privacy policy and is excluded from search indexing until it is.

Who we are

FrontRow provides studio management software to studios and activity schools. Where your studio uses FrontRow, the studio is the controller of its families' data and we are its processor: your studio decides what to collect and why, and we handle it on their instructions.

What we hold

  • Studio and staff accounts: names, email addresses, roles, authentication credentials and two-factor secrets, sign-in history.
  • Families and students: names, contact details, dates of birth and age ranges, relationships between guardians and students, and any custom fields the studio chooses to define.
  • Health and emergency data: medical notes, allergies and emergency contacts, where the studio collects them so staff can act on them in a class.
  • Enrollment and attendance: classes, terms, attendance records, absences and make-up credits.
  • Financial records: charges, credits, discounts, payment attempts and the ledger. Card and bank details are held by Stripe, not by us; we store only the tokens and the last four digits needed to show a family which method is on file.
  • Communications: messages sent and received by SMS, email and the portal, along with consent states, opt-outs and delivery outcomes.
  • Website analytics: first-party page views and form submissions for studio websites built with us.

Processors we use

  • Stripe: payment processing and stored payment methods. Your studio holds its own Stripe account.
  • Twilio: SMS delivery and inbound replies.
  • Amazon Web Services: hosting, email delivery (SES), file and media storage (S3), and backups.
  • Intuit QuickBooks Online: only where a studio connects it; credentials are encrypted at rest.
  • OpenAI or Amazon Bedrock: only for the in-product assistant, and only for the studio data needed to answer the question asked. Data imports never use a model.

Retention

Financial records are append-only and retained for as long as your studio's account exists, because they are the studio's books. Assistant conversations are kept for 30 days. Archived families are retained until erased.

Your rights

A studio owner can export the studio's data in full at any time, and can archive, merge or erase a family outright on request. If you are a parent or guardian, ask your studio: they control the record, and they can action it directly in the product.

Security

See our security page for specifics: required two-factor authentication for owners and admins, a permissions model, an audit log, and an append-only financial ledger.

Contact

Questions about this policy or a data request: hello@frontrowhq.com.