Privacy notice

1. Two hats

Proscenium wears two hats, and this notice says which one is on in each place.

• On this site — the pages you are reading, the form, the sign-up — Proscenium is the controller: we decide what is collected and why, and this notice is ours to keep.
• On a school's own site and desk running on the platform, the school is the controller of its students' data and Proscenium is the processor: we handle that data on the school's instructions, under a data processing agreement, and never for a purpose of our own.

2. What this site collects, and when

• The start form: the studio's name and city, the timetable you upload or a link to it, your site or Instagram, your name, email and phone, what you teach and the plan you have in mind, and the fact that you ticked the consent box — not the box itself as anything else.
• The sign-up: your email, the code we email you to confirm it, the school you create — its name, address, rooms, timetable and logo, plan, colours and domain — and, once it exists, the password you choose through the welcome email, which is stored only as a hash.
• The server log: IP address, time, page and browser, kept for weeks and used only to keep the site up and to stop abuse — the form's per-address ceiling counts against it.
• Statistics only with your permission: the site ships no analytics unless one is switched on and you say yes to it, and that choice is stored in your own browser, not in a cookie of ours. This site sets two cookies: the form's security token (CSRF), without which a form cannot be submitted safely, and a session cookie for the sign-up and for signing in, which lasts fourteen days.
• No advertising cookies, no cross-site tracking, no social pixels, no request to any third party from your browser.

3. Why, and on what basis

• To answer your request and build the preview: the steps you asked us to take before any contract, and the consent you gave in the box on the form. You can withdraw it at any time by writing to us.
• To run the account you opened: the contract between the school and Proscenium.
• To keep the site and the platform secure: our legitimate interest in not being abused.
• To write to schools we found ourselves: our legitimate interest in contacting businesses — only legal persons, as Portuguese law allows, never a natural person without prior consent, and every message says who sent it, from where, and how to stop it with one word.

4. The preview

A preview is a version of a school's site that we build from what the school already publishes — its public pages, or the timetable it sent us — and show back to it privately. Three things are true of every preview, and all three are enforced by code rather than by policy: it is not indexed (every response tells search engines so), it is linked from nowhere, and it is deleted after 30 days. Reply “remover” to the email that carried the link and it is taken down within the hour — the pages, the photographs we read from the school's site and everything built from them, not only the rows. A preview is built with no student in it, and a trial request left on one reaches us, not the school.

5. On a school's site: the students' data is the school's

When a school runs on Proscenium, its students, their bookings, memberships, payments, consents and messages are the school's data. The school decides what is collected and answers its students' requests; Proscenium stores and processes it on the school's instructions and under a data processing agreement that is sent before anything is signed. We never use one school's data for another, never use it for our own marketing, and never sell it. The school can take all of it away in one archive on request, and everything is deleted thirty days after the account closes.

6. How long we keep it

• A request from the form, or a school we found and wrote to, that does not lead to a conversation: deleted after 12 months. A conversation is kept while it is live.
• A preview: 30 days from the day it was built, or the day you ask.
• A customer's account: for the length of the contract, then thirty days in which the export can still be asked for, then deletion — except what Portuguese tax law obliges us to keep, which is the invoices, for the years it names.
• Server logs: weeks, not years.
• A request to stop being written to: kept for as long as it takes to honour it, which is forever — the address is on a suppression list and nothing else about you stays with it.

7. Where it lives

In the European Union. The platform runs on a server in Paris, France, and its nightly backups stay in the same region. We transfer nothing outside the Union ourselves; a provider we use is named below with the conditions under which it touches data at all.

8. Who else touches it

One provider per job, and only the jobs the service actually has today:

• Hosting: Amazon Web Services, in its Paris region (eu-west-3) — the server, its disk and the backup store.
• Email delivery: the provider through which the platform sends its emails, on the day one is configured — it is named here then. Until then the platform sends through its own mail path and no provider sees an address.
• Payments: Stripe for cards and SEPA, and Ifthenpay for MB WAY and Multibanco references — each only for a school that has connected it, and only for that school's payments; Proscenium holds no card number and moves no money of its own.
• Certified invoices: InvoiceXpress, only for a school that has switched it on, and only the name and tax number an invoice must carry.
• Error monitoring: Sentry, only when switched on for the platform, and configured so that no personal data travels with an error report.

Anyone added to this list is added here first, and every customer is told by email before they touch any data.

9. Your rights

Access, correction, deletion, restriction, objection and portability — the six the GDPR gives you. Write to the address at the top; a deletion request from the form or from an email we sent is honoured within 72 hours, and the rest within the month the law allows. You can also complain to the Portuguese data protection authority, the CNPD. A student's request about data held by a school goes to the school, which is its controller; if it reaches us first we pass it on the same day and tell you we did.

10. Changes

When this notice changes in a way that matters we tell every customer by email, and the version date at the top moves.