1. Who we are
This policy explains how Biverio Studios Ltd ("Biverio", "we", "us") collects and uses personal information when you visit biverio.studio, use our Mac apps, contact us, or buy services from us.
Biverio Studios Ltd is the data controller for that information. We are a company registered in England and Wales (company number 17162474) with our registered office at 6-7 St Mary At Hill, London EC3R 8EE, United Kingdom, and we are registered with the UK Information Commissioner's Office (ICO) under number ZC215138.
Questions about privacy: hello@biverio.studio.
Handfastly (handfastly.com) has its own privacy policy, which applies to that service.
2. Our Mac apps
Wavestitch, Project Converter Pro, RAW Matcher Pro and Photo NSC run entirely on your Mac. They do not require an account and do not collect, transmit or store your personal data, files, photos, video, audio or project data on our servers. We use no analytics, advertising or tracking SDKs in the apps.
- Purchases are handled by Apple through the Mac App Store. We receive only anonymous, aggregated sales information from Apple, never your name, email address or payment details.
- Crash and usage data: if you have chosen to share analytics with app developers in macOS settings, Apple may provide us with anonymised crash reports and statistics. You can turn this off in System Settings → Privacy & Security → Analytics & Improvements.
- File access: the apps read and write only the files and folders you choose, on your Mac, to do the job you asked for.
3. Information we collect
Information you give us
- When you email us (for support or a project enquiry): your name, email address, the content of your message and any attachments you send.
- When you become a client: your name, business name, billing address, email, phone number, VAT number if applicable, project details and the content you share for the project (for example footage, photos, logos or briefs).
- When you pay us: card payments are processed by Stripe. Stripe collects your card details directly; we never see or store your full card number. We receive limited payment information such as your name, email, billing country, the last four digits of your card, and the payment amount and status.
Information collected automatically
- Website hosting logs: our website is hosted on Google Firebase Hosting. Like any web server, it processes technical data such as your IP address, browser type, requested page and time of request in order to deliver the site and keep it secure.
- Fonts and images: pages load fonts from Google Fonts and app icons from Apple's servers, which means your browser sends your IP address to those providers.
- Cookies: biverio.studio does not use advertising or analytics cookies and does not track you across websites. If we ever add analytics, we will update this policy and ask for consent where the law requires it.
4. How and why we use it
Under UK GDPR we must have a lawful basis for each use of personal data:
| Purpose | Data | Lawful basis |
|---|---|---|
| Reply to support requests and enquiries | Contact details, message content | Legitimate interests (helping customers); contract where you are a customer |
| Quote for, deliver and manage client projects | Contact, billing and project data | Contract, or steps before entering a contract |
| Take payments, issue invoices and prevent fraud | Payment and billing data | Contract; legitimate interests (fraud prevention) |
| Keep accounting and tax records | Invoices, payment records | Legal obligation (UK company and tax law) |
| Operate and secure the website | Server logs, IP address | Legitimate interests (running a secure website) |
| Respond to legal claims or regulators | Relevant records | Legal obligation; legitimate interests |
We do not sell your personal data, use it for advertising or make decisions about you by automated means that have legal or similarly significant effects.
5. Who we share it with
We share personal data only with service providers who process it on our behalf and under contract, and only as needed:
- Stripe Payments UK Ltd / Stripe, Inc. — card payments, invoicing and fraud prevention.
- Google (Firebase Hosting, Google Fonts) — website hosting and font delivery.
- Apple — App Store distribution and purchases (Apple acts under its own privacy policy for your Apple Account).
- Our email and file-storage providers — to receive and keep correspondence and project files.
- Wise — business banking, when we receive or make payments.
- Our accountants and professional advisers — for bookkeeping, tax and legal compliance.
We may also disclose information where required by law, to HMRC or other authorities, or to protect our rights, our customers or others. If Biverio is ever sold or restructured, personal data may transfer to the new owner under this policy.
6. International transfers
Some of our providers (for example Stripe, Google and Apple) process data outside the UK, including in the United States and the European Economic Area. When that happens, we rely on UK adequacy regulations (including the UK–US Data Bridge where the recipient is certified) or the UK International Data Transfer Addendum / Agreement and equivalent safeguards to protect your data.
7. How long we keep it
- Support and enquiry emails: up to 2 years after our last contact, unless they become part of a client project.
- Client project files: for the duration of the project and up to 12 months after delivery so we can supply backups or revisions, unless we agree otherwise in writing.
- Invoices, contracts and payment records: 6 years after the end of the financial year they relate to, as required by UK company and tax law.
- Website server logs: kept by our hosting provider for a limited period, typically no longer than 30 days.
8. How we protect it
We use reputable providers with strong security practices, encrypted connections (HTTPS/TLS) for our website and payments, two-factor authentication on our business accounts, access limited to people who need it, and encrypted devices for storing client work. Card data is handled only by Stripe, which is certified to PCI DSS Level 1. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you and the ICO of a breach where the law requires.
9. Your rights
Under UK data protection law (and EU GDPR where it applies to you), you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data, where we no longer need it;
- object to or ask us to restrict certain processing, including processing based on legitimate interests;
- receive data you gave us in a portable format;
- withdraw consent at any time, where we rely on consent.
To exercise any right, email hello@biverio.studio. We'll respond within one month. There is normally no fee.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk (0303 123 1113), or to the data protection authority in your country.
10. Children
Our website and services are not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.
11. Changes to this policy
We may update this policy as our products and the law change. We will post the new version on this page with a new "last updated" date, and tell clients directly about significant changes.