Privacy policy
Last updated 15 October 2026
Zorlo is software that photography and videography studios use to run their bookings, crew and payments. It is provided by zorlo.io, Singapore ("we", "us"). This policy explains what personal data Zorlo holds, why, and what you can ask us to do with it. We follow Singapore's Personal Data Protection Act 2012 (PDPA).
Who this covers
- People who use Zorlo: studio owners, studio admins and freelance crew.
- Studio clients, such as couples and companies, whose details a studio keeps in Zorlo.
When a studio enters its clients' details, the studio decides what to collect and why. We store and process those details on the studio's behalf. If you are a studio's client, please contact the studio first about your data. We will help them with your request.
What we collect
- Your account: your name, email address and phone number, and the role a studio gives you. Your password is stored by our sign-in provider in a form that cannot be read back. Owners and admins also set up two-step sign-in.
- If you sign in with Google: your name and email address from your Google account. We do not ask Google for anything else, and we cannot see your Google password.
- What studios enter: client names, phone numbers, email addresses and addresses; event dates, times and venues; booking notes and contact persons; packages and prices; payments recorded (amount, date and method); and crew roles, levels and hourly rates.
- What crew enter: dates they cannot work, and their replies to job offers.
- Records: a log of who created, changed or deleted bookings, events, clients, payments and people, and when.
We never collect NRIC numbers or payment card numbers. Zorlo does not take payments.
How we use it
- To run Zorlo for your studio and show each person what their role allows.
- To send emails the service needs: invitations, sign-in codes, job offers, reminders and changes to jobs.
- To keep accounts secure and to find and fix faults.
We do not sell personal data, use it for advertising, or share it with other studios.
Who can see it
- Within a studio, people see what their role allows. Crew see only the jobs they are offered, never booking prices, payments or other crew members' rates.
- Other studios cannot see your studio's data.
- Our team looks at a studio's data only to give support the studio asked for, or to keep the service secure.
Service providers we use
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in | Singapore |
| Vercel | Runs the app | Singapore |
| Resend | Sends Zorlo's emails | Japan |
| Sentry | Error reports. These carry account and record ids only, never names, phone numbers, email addresses or IP addresses. | European Union |
| Sign-in, only if you choose Continue with Google | Google's own servers |
Our data is stored in Singapore. Emails pass through Japan on their way to you, and error reports are kept in the European Union. Each of these providers is bound by its own data protection terms.
How we protect it
- Data is encrypted when it is sent and when it is stored.
- Each studio's data is kept apart by rules in the database itself, not only by what the screens show.
- Owners and admins must use two-step sign-in.
- The database is backed up daily.
How long we keep it
We keep a studio's data while the studio uses Zorlo. We do not delete data automatically yet. A studio can ask us to delete its data, and you can ask us to delete yours, as described below.
Your choices
You can ask to see the personal data we hold about you, to correct it, or to delete it. Email hello@zorlo.io. We aim to reply within 30 days. Some records, such as payments a studio has logged, may need to be kept by the studio for its own accounts.
Cookies
Zorlo uses only the cookies it needs to keep you signed in and to finish joining a studio with Google. Your browser also remembers how you last signed in, so the sign-in page can suggest it. We do not use advertising or tracking cookies.
Changes to this policy
If we change how we use personal data, we will update this page and the date at the top. We will tell studios before a change that affects them.
Contact
zorlo.io,
653 Jalan Tenaga, Singapore 410653.
Email: hello@zorlo.io