Who we are
Pars Studios operates studiospars.com, a recording studio in Istanbul and California that sells beat licenses, mixing and mastering services and studio bookings. Pars Studios is the controller of the personal data described here.
Privacy policy.
What we collect when you use studiospars.com, why we collect it, and who processes it on our behalf. We keep this short and plain; if anything is unclear, write to us.
What we collect
Account: your e-mail address, an optional display name and a password, which we store only as a hash. If you sign in with Google, we receive the e-mail address, name and profile picture that Google shares with us; we never see your Google password.
Orders: the items you buy, amounts, currency, invoice details and a Stripe payment reference. Card numbers are entered on Stripe's checkout page and never reach our servers.
Service orders: the audio files you upload for mixing or mastering, your notes and references, and the files we deliver back to you.
Bookings: the date, time, service type and any notes you add when reserving studio time.
Technical data: the IP address, browser and timestamps of requests, kept in server logs for security and debugging.
Why we use it
To create and secure your account, deliver the licenses and files you purchase, run your bookings, and send transactional e-mails such as verification links, receipts and order status updates.
To prevent fraud and abuse, to keep accounting records the law requires, and to answer your messages.
We do not send marketing e-mails unless you ask for them, we do not run advertising trackers, and we never sell your data.
Cookies and local storage
We set a session cookie and a CSRF cookie so that you stay signed in and forms cannot be forged. Both are essential and expire when your session ends or you sign out.
Your shopping cart is kept in your browser's local storage and is never sent to us until you check out.
Who processes data for us
Stripe for payments, Google for optional sign-in, Cloudflare R2 for file storage, Resend for e-mail delivery, and Vercel and Hetzner for hosting. Each processor only receives the data needed for its task and is bound by its own privacy terms.
Data may be processed in the European Union and the United States under the safeguards these providers offer.
How long we keep it
Your account and order history stay until you ask us to delete them. Accounting records are kept for as long as tax law requires, even after account deletion.
Purchased downloads are available for the period stated in your license (30 days by default, extendable on request). Files uploaded for a service order and the deliverables we produce are kept while the order is open and for a limited period afterwards so revisions and re-downloads remain possible, then deleted.
Server logs are rotated and kept for no longer than 90 days.
Your rights
You can ask us at any time to access, correct, export or delete your personal data, or to object to a specific use. Where the EU General Data Protection Regulation (GDPR) or the Turkish Personal Data Protection Law (KVKK) applies, you have the rights those laws grant, including the right to complain to your local supervisory authority.
To exercise a right, e-mail us from the address on your account. We answer within 30 days.
Changes
When this policy changes we update the effective date above and, for material changes, notify account holders by e-mail.