Privacy Policy

This policy explains how 22 Labs (“we”, “us”) collects, uses and protects information when you visit the StudioVector website, join our waitlist or use the StudioVector dashboard, AI agent and MCP server (together, the “Service”).

Information we collect

• Waitlist details. Your email address, the plan you're interested in, which signup form you used, and when you accepted our Terms and this policy.
• Account details. Your name, email, studio name and the team members you invite.
• Mindbody data. When you connect a Mindbody site, we access the data you authorize, such as locations, classes, schedules, sales, memberships, staff and client records.
• Usage data. The questions you ask the AI agent, the answers it gives, the tools it calls and the tokens used, plus basic logs such as timestamps and error reports.
• Billing details. Payments are handled by our payment processor. We never see or store full card numbers.
• Technical data. Your IP address is used briefly to prevent signup abuse. The website does not use advertising or tracking cookies.

How we use it

• To run the waitlist, invite you and send updates about StudioVector.
• To provide the Service: syncing your KPIs, answering your questions and powering MCP connections.
• To meter token usage, bill you and prevent abuse.
• To support you, secure the Service and improve it.

We do not sell your information, and we do not use your Mindbody data to train AI models.

AI processing

To answer a question, we send it, along with the relevant Mindbody data, to a third-party AI model provider that generates the response. Providers process this data only to return results to us. When you connect your own AI tool through our MCP server, that tool's provider receives the data it requests, under your agreement with them.

Your studio's client data

Your Mindbody site holds personal information about your clients and staff. For that data, you are the controller and we process it on your behalf, only to provide the Service. You're responsible for having the right to share it with us. Access is read-only by default and limited to the sites and locations you grant.

Who we share it with

We share information only with service providers that help us run the Service, under agreements that protect it. These include email delivery (Resend), hosting and databases, AI model providers and payment processing. We may also disclose information when the law requires it, or as part of a merger or acquisition.

Retention

We keep waitlist details until you unsubscribe or ask us to delete them. Account and usage data are kept while your account is active and deleted or anonymized within 90 days after you close it, unless the law requires us to keep them longer. Synced Mindbody data is deleted when you disconnect a site or close your account.

Security

We use encryption in transit, OAuth sign-in, per-site access controls and audit logs of every tool call. No system is perfectly secure, but we work to protect your information and will notify you of a breach as the law requires.

Your choices and rights

You can unsubscribe from emails at any time using the link in any email. Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to certain uses. To make a request, email contact@22labs.io. Requests about a studio's client data are best sent to that studio, and we'll help them respond.

Children

The Service is for businesses and isn't directed to children under 16. We don't knowingly collect their information directly.

Changes

We'll update this page when this policy changes. If a change is material, we'll tell you by email or in the Service before it takes effect.

Contact

Questions about privacy? Email contact@22labs.io.