Privacy Policy

Passion Collective, LLC ("Concept," "we," "us," or "our") operates the Concept platform, including our website at conceptstudio.app, mobile applications, and all related services (collectively, the "Platform"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Platform.

By using the Platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Platform. This Privacy Policy should be read alongside our Terms of Service.

— Information You Provide

When you create an account or use the Platform, you may provide us with:

• ◦Account information: name, email address, phone number, and profile details;
• ◦Project data: projects you create or join, your role, collaborators you invite, and files you upload;
• ◦Communications: messages sent through the Platform;
• ◦SMS consent status: whether you have opted in or out of SMS notifications, and the date and method of your consent;
• ◦Support inquiries: information you provide when contacting us for help.

— Information Collected Automatically

When you access the Platform, we automatically collect:

• ◦Usage data: pages visited, features used, time spent, and interaction logs;
• ◦Device data: IP address, browser type, operating system, and device identifiers;
• ◦SMS delivery data: message delivery status, timestamps, and sender/recipient phone numbers (for messages sent through the Platform).

— Information From Third Parties

We do not purchase or receive personal information from third-party data brokers. We may receive limited information from third-party service providers (such as authentication services) as necessary to operate the Platform.

We use the information we collect to:

• ◦Operate, maintain, and improve the Platform;
• ◦Facilitate project collaboration between users;
• ◦Send you project-related SMS notifications, if you have opted in;
• ◦Send you service-related communications (such as account verification, security alerts, and support responses) — these are not marketing messages and are necessary for the operation of your account;
• ◦Provide customer support and respond to inquiries;
• ◦Detect and prevent fraud, abuse, and security incidents;
• ◦Comply with legal obligations;
• ◦Analyze Platform usage to improve user experience.

We do not sell your personal information to third parties. We do not use your personal information for third-party advertising purposes.

— How We Use Phone Numbers

We collect your phone number during account registration for account verification purposes. If you choose to opt in to SMS notifications, we also use your phone number to deliver project-related text messages via our SMS service.

— SMS Data Sharing

We do not sell, rent, lease, or share your phone number or SMS consent information with third parties for their own marketing or promotional purposes. Phone numbers are shared only with our SMS delivery provider (Twilio, Inc.) solely for the purpose of delivering messages on our behalf, subject to their privacy and data protection policies.

— SMS Opt-In and Opt-Out

SMS notifications are optional. You may opt in during account registration or at any time through your account settings. You may opt out at any time by:

• ◦Replying STOP to any SMS from +1 (888) 652-3252;
• ◦Updating your notification preferences in your account settings;
• ◦Contacting us at legal@conceptstudio.app.

Opting out of SMS does not affect your ability to use the Platform. Your account, projects, and in-app communications remain fully functional without SMS notifications enabled.

We may share your information with:

• ◦Service providers who help us operate the Platform (including Twilio for SMS delivery, Vercel for hosting, and AWS for cloud infrastructure), bound by confidentiality agreements and limited to performing services on our behalf;
• ◦Other users only to the extent necessary for project collaboration (for example, your name and role within a shared project);
• ◦Law enforcement or regulatory authorities when required by law, legal process, or to protect the rights, safety, or property of Concept, our users, or the public;
• ◦A successor entity in connection with a merger, acquisition, or sale of assets, with prior notice to users where practicable.

We do not sell your personal information. We do not share your personal information with third parties for their own direct marketing purposes.

We retain your personal information for as long as your account is active or as needed to provide the Platform and services to you. Upon account deletion, we will delete or anonymize your personal data within 90 days, except where retention is required by law or necessary for legitimate business purposes (such as resolving disputes or enforcing our Terms of Service).

SMS consent records (including opt-in and opt-out timestamps) are retained as required by the Telephone Consumer Protection Act (TCPA) and applicable regulations.

We implement industry-standard security measures to protect your personal information, including:

• ◦Encryption in transit (TLS/SSL);
• ◦Encrypted data storage;
• ◦Access controls and authentication requirements;
• ◦Regular security reviews.

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

Depending on your jurisdiction, you may have the right to:

• ◦Access the personal information we hold about you;
• ◦Correct inaccurate or incomplete personal information;
• ◦Delete your account and personal information;
• ◦Opt out of SMS communications as described in Section 3;
• ◦Object to or request restriction of certain processing of your personal information;
• ◦Data portability — request a copy of your data in a structured, machine-readable format;
• ◦Lodge a complaint with your applicable data protection authority.

To exercise any of these rights, contact us at legal@conceptstudio.app. We will respond to your request within 30 days (or sooner if required by applicable law).

— California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information.

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a user under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a minor, please contact us at legal@conceptstudio.app.

The Platform integrates with third-party services to provide functionality. These services have their own privacy policies, and we encourage you to review them. Key third-party services include:

• ◦Twilio, Inc. — SMS message delivery;
• ◦Vercel — website hosting;
• ◦AWS (Amazon Web Services) — cloud infrastructure;
• ◦Apple App Store / Google Play — mobile app distribution.

We are not responsible for the privacy practices of third-party services. Links to external websites are provided for convenience and do not constitute endorsement.

We may use cookies and similar technologies to:

• ◦Maintain your session and authentication status;
• ◦Remember your preferences;
• ◦Analyze Platform usage and performance.

You can control cookie settings through your browser. Disabling cookies may affect certain Platform functionality.

The Platform is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to such transfers.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Privacy Policy on the Platform and updating the Effective Date above. If we make significant changes to how we handle your personal information, we will notify you via email or through the Platform. Your continued use of the Platform after changes become effective constitutes your acceptance of the revised Privacy Policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact: