Privacy policy

Who operates VOI Studio

VOI Studio is operated by Mark James Graham, an individual sole trader, ABN 41 244 585 735. Contact admin@voi.studio about this policy or your information.

Each studio using VOI Studio manages its own workspace and customer relationships. Victims of Ink is one studio using the software. A studio's enquiry notices and privacy policies describe its own collection and use of client information; this platform policy does not replace them.

Information used to provide the platform

We process account and contact details, studio and staff profiles, workspace settings, subscription and payment references, and support and security records. Studios may enter enquiries, client contact details, appointment records, notes, images, consent responses, communication history and payment records to run their business.

We use this information to provide the features the studio requests, control workspace access, support users, maintain security and troubleshoot the service. Payment and subscription providers process payment details; VOI Studio stores the references and status information needed for the relevant workflow rather than full card details.

Connecting Google Ads

A studio owner or administrator can choose Connect Google in the Google Ads integration settings. Google asks for permission to manage Google Ads data and use its Data Manager service. Those permissions are broad; the connection workflow uses them to read accessible advertiser accounts, manager relationships and conversion-action settings, and to validate and send eligible purchase conversions to the destination the studio selects.

Account information includes account identifiers, names, currency, timezone and conversion ownership. Conversion-action information includes its identifier, name, type, category, status and whether it is used as a primary goal. VOI Studio uses these details to offer account choices, verify the selected destination and display the saved connection.

VOI Studio does not use this connection to change campaigns, budgets, bids or conversion-action settings. Connecting an account does not by itself enable purchase delivery.

Purchase information sent to Google

When purchase delivery is enabled for the studio, VOI Studio sends eligible completed, fully paid appointment purchases linked to an enquiry with a recorded Google advertising click identifier. A record contains an order identifier, purchase time, value, currency and the recorded click identifier, together with the selected conversion destination.

This purchase upload does not contain customer names, email addresses, phone numbers, enquiry notes, photos or consent-form responses. General marketing preferences are not treated as permission for advertising-data use. Google processes the submitted information under its own applicable terms and privacy policy.

VOI Studio retains submitted record details, Google request identifiers and delivery results to prevent duplicate delivery, explain failures and show processing status. Processing success does not guarantee that Google attributes a purchase to an advertisement.

Storage, protection and sharing

Stored Google OAuth refresh credentials are encrypted in server-side storage. Access to connection settings and reports is restricted to authorised studio owners and administrators; credentials are not exposed in the browser. We use encrypted network connections and access controls to protect information.

We use hosting, database and other service providers to operate the requested features. Google connection information is processed through our hosting and database providers, including Vercel and Supabase. These services may process information outside Australia. Information is shared with Google when needed for the studio's authorised connection and conversion delivery.

We do not sell Google user data. We use it to provide or improve the connection features described here. Human access is limited to the circumstances allowed by Google's policy, such as your affirmative agreement for support, investigating security issues, or meeting legal obligations.

VOI Studio's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is not used to train general-purpose AI models.

Retention, disconnection and deletion requests

We retain information for the purposes described in this policy, including providing the service, maintaining security, preventing duplicate conversions, resolving disputes and meeting applicable recordkeeping obligations. Retention depends on the record and its purpose; there is no automatic fixed-duration purge of Google delivery history.

Disconnect in the studio's Google Ads settings removes access from that studio's active connection and pending setup, and prevents new delivery authorisations. If another studio connection or pending setup still uses the same Google grant, its access is retained. When no connection or pending setup needs the grant, we queue revocation at Google. A delivery already authorised or received by Google may still complete. Saved connection settings and delivery history remain in the workspace; disconnect does not delete information already received by Google.

We verify a Google-issued account identifier during connection and store a private hash of it to associate authorisations safely across studios. We do not request your Google email address or profile for this purpose. An unused credential may remain encrypted in restricted cleanup storage until Google confirms revocation or a failed or uncertain removal is resolved. It cannot be used for advertising delivery from that cleanup storage. We then delete the retained credential and keep the cleanup result as security evidence.

You can also remove VOI Studio's access through your Google Account connections. This removes the Google account's app-wide grant and can affect other studios you connected with that same Google account. Contact admin@voi.studio to request access, correction or deletion of platform information, including retained Google connection and delivery records. We will verify your authority and explain what can be deleted and what must be retained. History deletion is handled through support, not automatically by the Disconnect button.

For information a studio collected about you as its client, contact that studio first so it can assess the request for its records. We can assist the authorised studio with platform handling.

Questions and policy changes

Contact admin@voi.studio with privacy questions or complaints. We will update this policy when our practices change and obtain further consent where required before using Google data for a new purpose.