Data & your privacy

Where your data lives

All of our data is hosted in Sydney, Australia, and backed up daily. Data is encrypted and safely stored in line with best practices. It stays under Australian jurisdiction as we are 100% Australian based and owned 💚🇦🇺

How it's protected

All records are isolated in their own cluster at the database layer. Everything travels encrypted. Important actions are written to an audit trail we can only read back with your permission if anything ever looks odd. We use zero tracking cookies. The only cookies are the ones that keep you signed in: no advertising trackers, ever.

Wunda Studio is studio management software operated by Wunda Studio Pty Ltd in Australia. Studios use it to run their business; their timetables, client records, billing and client emails. Each studio owns and controls its own client records; we look after that data on the studio's behalf. If you are a client of a studio that uses Wunda Studio, your relationship is with your studio, and they are your first port of call for anything about your information.

The encrypted data we store is as follows:

Studio accounts: the owner's and team's names, email addresses and business details.

Studio records: the client information a studio chooses to enter or collect through its forms, which can include names, contact details, dates of birth, emergency contacts, attendance, billing history and, where the studio offers it, health fund details for rebate receipts.

Technical records: sign-ins, devices and an audit trail of important actions, kept so studios can trust what happened in their account.

Our website: When you visit wunda.studio, we count visits without cookies, using Vercel's analytics. It records things like the page you viewed, the site that sent you, your country and the type of device, but not who you are. When you use Let's talk, we collect what you type in: your name, email and mobile, your studio's name and website or Instagram, what you use now, and any invite code (for instructors, where you teach instead of the studio details). We use it only to reply, send you a tour of our demo studio and talk with you about Wunda Studio. If you'd like your details deleted, email hello at wunda.studio and we will.

To be able to run the service: scheduling, class lists, invoicing, receipts, the client portal and the emails a studio triggers. To keep accounts safe: sign-in verification and the audit trail. To support studios when they ask for help. That is the list. We do not sell data, we do not use it for advertising, and we do not have access to it without your explicit permission. Example: You would like a 1:1 training session live with us where we use your Studio to show you how things are done.

Only the providers that make the service work: Supabase (database hosting, Sydney), Vercel (app hosting), Resend (email delivery) and Stripe (card payments). Each receives only what its job requires. Email and payment processing may involve infrastructure outside Australia operated by those named providers.

Studio owners manage their records directly in the app and can export them at any time. Clients can see and fix their details through their studio, or through the portal and update forms where their studio has switched those on. For anything else, email hello at wunda.studio and we will help.

A studio's records stay for as long as the studio uses the service we provide. A studio that leaves can take its data with it and ask us to delete what we hold, and we will. Once it is deleted it cannot be recovered.

If you think we have got something wrong with your information, email hello at wunda.studio and we will look at it properly and reply. If you are not satisfied with our answer, you can raise it with the Office of the Australian Information Commissioner (oaic.gov.au) who will investigate further.