Privacy Policy

Last updated: May 6, 2026

We collect only what we need to run the studio:

• Account. Name, email, and Keycloak identity. No password - sign-in is delegated to Keycloak via OAuth.
• Bookings. The service, date, time, payment receipts, and any notes you add. Stored in our database for at least 7 years for tax purposes.
• Payments. Card details are never stored by us. Stripe handles the charge, and we receive only a Payment Intent ID and the last four digits.
• Beats & merch. Audio uploads, producer payout email, and sale records. Audio files stay on our servers and are never shared outside the purchase you grant access to.
• Meta/Instagram integration. If you connect your Meta or Instagram account, we store your Meta user ID and access token to enable cross-posting. You can revoke this at any time in your dashboard.
• Site analytics. Server access logs (IP + user-agent) are kept for 30 days. We do not run third-party trackers or ad pixels.

We do not sell your data. We share with vendors only when necessary to deliver the service: Stripe (payments), Keycloak (sign-in), Cloudflare (CDN/edge), and our hosting provider.

Data Deletion

You can request deletion of your data by emailing thetombstu@gmail.com. Deletions that conflict with our tax-record retention window are honored as soon as that window closes.

For Meta/Instagram-connected accounts, you can also request deletion through your Facebook account settings, which will trigger our automated data deletion callback.

Contact

Questions about privacy? Contact us at thetombstu@gmail.com or visit tomb.freewaterent.com/contact

View our full Terms & Policies for booking, payment, and studio behavior policies.