About Studio
SO. by Sora operates SO. Studio at consign.sobysora.com for consignor accounts, piece submissions and consignment activity. This notice covers the platform, including Google sign-in. For privacy questions or requests, contact info@sobysora.com.
Information we receive
We receive information you provide: contact details, piece descriptions and photographs, appointments, messages, uploaded documents and agreement decisions. Bank details and payment evidence may be recorded for actual settlements. Technical information includes IP addresses, request times, authentication events and email delivery records. Avoid uploading unrelated personal information or other people’s photographs without permission.
Google sign-in
Google provides basic account identity, including email, name, profile picture and an account identifier. We use this to authenticate you and associate your login with your Studio account. Customer sign-in requests only basic identity permissions, not Gmail messages or Drive files. You can revoke access in your Google Account settings; this does not automatically delete Studio records. Staff Drive authorisation is a separate connection for copying client files to the selected SO. Studio folder.
How information is used
Information is used to operate and secure accounts, review pieces, manage appointments, record agreements and decisions, send service updates, administer applicable fees and payouts, handle support and meet legal obligations. Creating an account does not consent to unrelated marketing. Processing may be necessary for a requested service, an agreement or a legal requirement. Where consent is required, it is obtained separately and can be withdrawn subject to applicable law.
Service providers and sharing
Authorised boutique staff use records to provide the service. Supabase provides authentication; OpenAI Sites and Cloudflare provide hosting, databases and file storage; Resend delivers transactional emails; Google provides sign-in and the separate staff Drive connection. When photo suggestions are requested, piece images are sent to the OpenAI API for suggestions requiring human review. Accepted piece details and selected photographs may be transferred to Shopify for listing; private client documents are not all made public. Relevant records may be disclosed to professional advisers or authorities where necessary and legally permitted. We do not sell personal information. Use of Google data is subject to the Google API Services User Data Policy, including Limited Use requirements where applicable.
Storage, security and retention
Providers may process data outside Saudi Arabia; Saudi-only storage is not promised. Applicable cross-border requirements and safeguards must be addressed for those arrangements. We use access controls, protected authentication cookies, HTTPS and encryption for selected sensitive records and connection tokens. Absolute security cannot be guaranteed. Retention depends on record purpose, account and consignment activity, disputes and legal obligations; there is no single fixed deletion period for every record. Request deletion by email. Records legally needed may be retained or restricted, and backups may remain until their normal replacement.
Cookies and your rights
Studio uses cookies for authentication, verification and staff sessions, and browser storage for language preferences and supported local interface state. Removing these may sign you out or reset preferences. Providers have their own privacy notices. Under applicable Saudi law, you may request information about processing, access or a copy, correction or deletion, and withdraw consent where relied upon, subject to legal exceptions. Contact info@sobysora.com; identity verification may be needed before records are disclosed or changed. You may complain to the competent Saudi data-protection authority.
Updates and contact
Changes are published with an updated date and further notice where required. This notice does not replace the separate consignment agreement or other providers’ policies. Contact: info@sobysora.com.