Last updated: May 6, 2026
We collect only what we need to run the studio:
- Account. Name, email, and Keycloak identity. No password - sign-in is delegated to Keycloak via OAuth.
- Bookings. The service, date, time, payment receipts, and any notes you add. Stored in our database for at least 7 years for tax purposes.
- Payments. Card details are never stored by us. Stripe handles the charge, and we receive only a Payment Intent ID and the last four digits.
- Beats & merch. Audio uploads, producer payout email, and sale records. Audio files stay on our servers and are never shared outside the purchase you grant access to.
- Meta/Instagram integration. If you connect your Meta or Instagram account, we store your Meta user ID and access token to enable cross-posting. You can revoke this at any time in your dashboard.
- Site analytics. Server access logs (IP + user-agent) are kept for 30 days. We do not run third-party trackers or ad pixels.
We do not sell your data. We share with vendors only when necessary to deliver the service: Stripe (payments), Keycloak (sign-in), Cloudflare (CDN/edge), and our hosting provider.
Data Deletion
You can request deletion of your data by emailing thetombstu@gmail.com. Deletions that conflict with our tax-record retention window are honored as soon as that window closes.
For Meta/Instagram-connected accounts, you can also request deletion through your Facebook account settings, which will trigger our automated data deletion callback.
Contact
Questions about privacy? Contact us at thetombstu@gmail.com or visit tomb.freewaterent.com/contact
View our full Terms & Policies for booking, payment, and studio behavior policies.
