Privacy notice · last updated June 2026

What we keep,
what we never touch.

The short version: your photos, brand kits, trained models, and generated frames are yours. We store them on European servers, we never train shared models on them, and we delete them within 30 days of you closing your atelier. The long version is below.

1. Who we are

Drape Studio is a product of Syntranova AL Ltd, a private company registered in Cyprus under company number HE 485824. We are the data controller for everything you do at drape.studio. The contact for privacy questions is privacy@drape.studio.

2. What we collect, and why

Account data: your email, your house name, your password (hashed with Argon2id, never readable). Used to let you log in and to issue invoices.

Product data: photos you upload, brand kits you build, models you train, frames you generate. Used only to deliver the product to you.

Billing data: handled by Stripe in Ireland · we never see your card. Used to process subscription payments.

Telemetry: server logs, error traces, performance metrics. Used to keep Drape fast and operational. Retention 30 days.

3. Where we store it

Frankfurt, Germany (primary) and Dublin, Ireland (replicas). Never the United States. Never China. Never anywhere outside the European Economic Area. We use Hetzner and AWS Frankfurt as infrastructure providers, both bound by EU-standard data protection contracts.

4. What we never do

We never train shared foundation models on your data. Period.

We never sell, rent, or share your data with third parties for marketing.

We never use your generated frames in our own marketing without explicit written consent.

We never use ad-tech tracking on drape.studio. No Meta pixel, no Google Ads pixel, no third-party retargeting.

5. Your rights

Under GDPR, you have the right to access (Article 15), rectify (16), erase (17), restrict processing (18), data portability (20), object (21), and not be subject to automated decision-making (22). Email privacy@drape.studio and a real person replies in 72 hours, with the data or the action you requested.

6. Retention

We keep your atelier data as long as your atelier is active. If you close your atelier, we delete everything within 30 days — including all backups. We hold invoices for 7 years for tax law compliance, which is the only thing we keep longer.

7. Cookies & analytics

We use one first-party cookie for session authentication (drape_session, expires when you log out). We use Plausible Analytics for product analytics — privacy-friendly, no tracking, no personal data, hosted in Germany. No third-party cookies. No fingerprinting.

8. Children

Drape is a B2B product. We do not knowingly collect data from anyone under 16. If you believe a child has an account, email us and we will delete it immediately.

9. Changes to this notice

We will email you 30 days before any material change to this notice. We will not change it quietly. We have published 2 versions in 18 months.

10. Complaints

If something is wrong, email privacy@drape.studio first — we want to fix it. If we cannot resolve it together, you have the right to complain to the Cyprus Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy) or your local supervisory authority.
Free · no card
10 editorial frames waiting in your inbox.
Open atelier →