Privacy

Who we are

Sotto Studio makes software for media agencies and businesses: the Sotto Studio back office, Sotto Hub for clients, Sotto Carve for editors and Sotto Pass on the iPhone. Questions about this page: headchef@sottoapp.ai.

This website

sottostudio.media sets no cookies and runs no analytics or advertising trackers. The book-a-demo form opens your own email app; we receive only the email you choose to send.

Our hosting provider keeps short-lived server logs (such as IP addresses and the pages requested) to run and secure the site.

The software

Each company that uses Sotto Studio runs on its own deployment with its own database. The company decides what it keeps about its clients and team, and Sotto Studio processes that information on the company's behalf to provide the service.

We do not sell personal information and do not use it for advertising.

Signing in

You sign in with your email address and a one-time code. The Sotto accounts service keeps your email address and which companies you work for, so Sotto Carve, Sotto Pass and HQ can list them. Sign-in attempts are counted by a keyed hash of the address, not the address itself.

Connected services

A company can connect services such as Google, Dropbox, QuickBooks, Stripe, Mux, Twilio, CubiCasa, AutoHDR and Follow Up Boss. Access tokens are saved, encrypted, in that company's own database and are used only for the features the company turns on. Sotto Studio's shared service passes a token to the provider when it is created or refreshed and does not store it.

Google user data

When a company connects Google, Sotto Studio uses Google Calendar to place and update shoots on the company's calendars, and Gmail to send the company's own booking and delivery emails from its account. It does not read your inbox.

Sotto Studio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for advertising, is not sold, and is not read by people except with your permission, for security, or where the law requires.

AI features

When a company turns on AI features, only what the feature needs (for example an order's property facts, or a photo for a quality check) is sent to the AI provider to produce the result.

Keeping and deleting

Company data stays in the company's own database until the company deletes it. To see, correct or delete information about you, ask the company you work with, or write to us and we will help.

Changes

We will update this page when our practices change. Last updated 26 October 2026.