Last updated: October 7, 2026
This policy explains how Polotno Studio ("Studio") handles personal data. It covers the Studio editor, your Studio account, cloud storage, and the Studio Automation API. For the Polotno SDK, see the SDK privacy policy.
The data controller is Lavrton LLC, a Wyoming limited liability company registered at 1309 Coffeen Avenue, Ste 1200, Sheridan, WY 82801, USA. You can reach us about privacy at legal@polotno.com.
1. Summary
- You can open the Studio editor and design without an account. In that mode your work stays in your browser and is not sent to or stored by Polotno.
- Once you create an account, we store your account details, your saved designs and uploads, and a record of your usage so the service can function.
- We do not sell your personal data, and we do not use your designs or uploaded content to train AI models.
- We share data only with the service providers needed to run Studio (payments, authentication, hosting), and only as described below.
2. Data we collect
2.1 Account data
When you create an account we collect your name, email address, password (stored only as a secure hash), and, for paid plans, billing details. If you sign in through a third-party identity provider, we receive the basic profile information that provider shares.
2.2 Content you create and upload
When you use cloud save, projects, brand kits, or the Automation API, we store the designs, templates, images, fonts, and other assets you create or upload ("Your Content"), together with the rendered outputs you generate. We process Your Content solely to provide Studio to you and your authorized team members.
If you use the Studio editor without signing in, Your Content is kept in your browser and is not transmitted to Polotno.
2.3 Usage and technical data
To operate and secure the service we collect usage and technical data such as credits consumed, render and API activity, feature usage, log data, IP address, browser and device information, and approximate location derived from IP.
2.4 Payment data
Payments are processed by our payment providers (see Section 6). We receive confirmation of a transaction and limited billing metadata — such as the last four digits of a card, billing country, and plan — but we do not receive or store full card numbers.
2.5 Support and communications
When you contact support or post in the community forum, we collect the information you choose to provide, including the content of your messages.
3. How we use your data
We use personal data to:
- provide, maintain, and secure Studio, including storing and rendering Your Content
- authenticate you and manage your account, team, and API keys
- process payments, manage subscriptions, and meter credit usage
- provide support and respond to your requests
- monitor for abuse, enforce our license agreement, and comply with law
- send service and transactional messages (and, where you have opted in or where permitted, product updates — you can opt out at any time)
- analyze aggregate usage to improve the product
We do not use Your Content to train machine-learning models, and we do not sell personal data.
4. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on:
- Contract — to provide Studio and administer your account and subscription.
- Legitimate interests — to secure the service, prevent abuse, and improve the product, balanced against your rights.
- Legal obligation — to meet accounting, tax, and other legal requirements.
- Consent — for optional marketing communications and non-essential cookies, which you can withdraw at any time.
5. Cookies and analytics
The Studio application uses cookies and similar technologies that are strictly necessary to sign you in and keep the service working, and — where you consent — a limited set of analytics cookies to understand product usage. You can manage non-essential cookies through the in-product controls or your browser settings. The no-account editor does not require sign-in cookies.
6. How we share your data
We share personal data only with providers that help us operate Studio, under contracts that limit their use of it to providing their service to us. Our current subprocessors include:
- Authentication and account management — Outseta
- Payment processing — Paddle and Stripe, depending on region and plan
- Cloud hosting, storage, and content delivery — the infrastructure providers that host the service and store and deliver Your Content and rendered outputs
- AI model providers — used only for optional AI features, and only when you use them (see Section 8)
We may also disclose data when required by law, to protect the rights, safety, and property of Polotno or others, or in connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in how your data is handled.
7. Third-party content integrations
Studio lets you access third-party content such as Google Fonts, Unsplash, and The Noun Project through Polotno-managed endpoints. When you search or load this content, limited request information (such as your search query) is sent to retrieve results. This content is governed by each provider's own terms and privacy practices.
8. AI features
Some Studio features are powered by third-party AI models and are optional. When you choose to use such a feature, the input you provide for that operation is sent through Polotno to the relevant model provider solely to return your result. These features are not used to train models on Your Content. If you do not use AI features, no content is sent to AI providers.
9. International transfers
Polotno is based in the United States and uses providers that may process data in the United States and other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
10. Data retention
- Account data is retained while your account is active and for a limited period afterward to meet legal, accounting, and dispute-resolution needs.
- Your Content is retained according to your plan's file-storage and render-retention limits, as published on the pricing page. Rendered outputs are removed after your plan's retention window.
- Backups are kept for a limited period for service continuity and then overwritten.
When you delete content or close your account, we delete or anonymize the associated personal data within a reasonable period, except where we must retain it by law.
11. Security
We use technical and organizational measures to protect personal data, including encryption in transit, access controls, and hashed passwords. Uploads in the default editor are processed in your browser. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. For more on our architecture and controls, see the Security overview.
12. Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent. To exercise these rights, email legal@polotno.com. You can also access and update much of your data directly in your account settings, and export or delete your designs from within Studio.
If you are in the EEA or UK, you may lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to know what personal information we collect, to request its deletion or correction, and to opt out of any "sale" or "sharing" of personal information. We do not sell personal information. We will not discriminate against you for exercising these rights.
13. Children
Studio is not directed at children and is not intended for use by anyone under the age required to form a binding contract in their jurisdiction (and in no case under 13). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
14. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you through the service or by email. Your continued use of Studio after a change takes effect means you accept the updated policy.
15. Contact
For any question about this policy or your personal data, contact legal@polotno.com or write to Lavrton LLC, 1309 Coffeen Avenue, Ste 1200, Sheridan, WY 82801, USA.
