StudioPulse connects to your studio management platform to generate retention reports. Because this involves your members' personal information, we want to be fully transparent about what data we access, how it's stored, and who can see it.
When you connect StudioPulse to Mindbody, we retrieve the following data from your account via the official Mindbody API:
We do not access payment card numbers, financial account details, or any data outside of what is necessary to generate your reports. All API access is read-only — StudioPulse never writes to or modifies your Mindbody data.
For studios using Mariana Tek or a CSV upload, only the data you explicitly provide is imported.
Member data is stored in a PostgreSQL database hosted on Amazon RDS in AWS (us-east-1). The database operates in a private network and is not accessible from the public internet.
Your studio's data is scoped to your account only. No other studio can access your data, and you cannot access another studio's data. Permissions are enforced at the API layer on every request.
Brian Atkins (founder) has administrative access for the purpose of debugging and customer support only. Any access to studio data for support purposes is available in your account's activity history upon request.
We share data with the following vendors only as necessary to operate the service:
We do not use any other vendors for data processing. We do not share, sell, or license your studio's data to any third party for marketing, advertising, or analytics purposes.
StudioPulse connects to Mindbody via the official Mindbody Public API. We access only the API scopes required to retrieve member and attendance data. We are pursuing Mindbody Certified Partner status, which includes a formal security review of our integration.
Your Mindbody Site ID and API token are used exclusively for scheduled data imports. You can disconnect the integration at any time from your Settings panel, which immediately stops all future syncing.
Member data is retained for as long as your StudioPulse account is active. If you cancel your subscription and request account deletion, all data associated with your account is deleted within 30 days.
Report delivery logs are retained for 90 days to support troubleshooting and duplicate-send prevention.
In the event of a data breach or security incident that affects your studio's member data, we will notify you by email within 72 hours of becoming aware of the incident, as required by applicable law.
If you believe your account has been compromised or you have a security concern, contact us immediately at brian@getstudiopulse.com.
If you have questions about our security practices or want to request a copy of your data, contact us at brian@getstudiopulse.com.