STUDIO, by Project Moneyball, scores sales and customer-call transcripts. We built the product around data minimization: we process transcripts to score them, but we do not store the full transcripts.
Who is responsible for your data
For data about your organization's own calls, you (our customer) are the data controller and we act as your data processor — we process that data only to provide the service and on your instructions. For your own account information, we are the controller: Project Moneyball, Israel (support@studio-moneyball.io).
What we collect
Account & identity
Your email address, received from our identity provider (Clerk) and used as your account identifier.
Content you submit
Call transcripts you upload or send for scoring. Transcripts may contain personal data about your representatives and the other call participants.
You can minimize this by anonymizing before or during import. Redact the names yourself before uploading, so we never receive them; or turn on our built-in anonymizer at import, which replaces the customer's company name and every buyer-side and third-party participant's name with realistic synthetic stand-ins. Only the anonymized version is then scored and stored, so we do not retain the real customer, business, or third-party identities. Your own reps and company are kept as-is so your coaching stays attributable.
Configuration you create
Scorecard templates and settings, stored under your account.
Usage & security data
Counts of how often the service is used (stored against a hashed email) and technical logs needed to operate and secure the service. Logs never contain transcript content or model output.
Billing & payment
When you buy a paid plan, your payment is handled by Lemon Squeezy as our Merchant of Record. Lemon Squeezy collects your billing name, billing email, payment details, and purchase history to process the transaction and tax. We receive confirmation of your order and subscription status (not your full card number). See Sub-processors and payments below.
How we handle transcripts (the important part)
- A transcript is processed in memory for a single scoring run.
- It is analyzed by a third-party language-processing provider (US), acting only as our processor. That provider returns structured observations about the call, and Project Moneyball's proprietary algorithm turns those into your scores.
- We do not store the full transcript at rest, and we do not log its content.
- We retain the derived analysis: scores, confidence, short verbatim excerpts used as supporting evidence, summaries, and recommendations. This is cached on Cloudflare, keyed to a one-way cryptographic hash of the transcript, and kept indefinitely (no automatic expiry) so re-running or adjusting weights is instant and reproducible. You can request a fresh run that overwrites this cache, and we delete it on request or account closure.
- If you turn on Report History (auto-save), the full derived report, which includes customer and company names and the short call excerpts, is saved to Cloudflare storage until you delete it or close your account. Auto-save is off by default. The full transcript is still never stored.
- If your account has rep performance trends on, we keep a scores-only history per rep (no transcript, no excerpts) for benchmarking, for up to 24 months. New accounts have this on by default; you can turn it off in Settings.
Sub-processors and payments
| Provider | Purpose | Data involved |
|---|---|---|
| Cloudflare | Hosting, database, storage, email routing (lead + report emails), and cookieless web analytics | Account email, templates, derived-analysis cache, saved reports, usage counters, rep-trend history, email content |
| Language-processing provider (US) | Automated analysis of the call | Transcript content (processed to generate your results; not used to train the provider's systems) |
| Lemon Squeezy (Merchant of Record) | Payments, checkout, subscription billing, and sales-tax/VAT collection for paid plans | Billing name and email, payment details, purchase and subscription history |
| Clerk (sign-in) | Sign-in / authentication | Account email, authentication state (cookies) |
We require each provider that processes data on our behalf to protect it under terms no less protective than this notice. Transcript content sent to the language-processing provider is used only to generate your results and is not used to train the provider's systems. Lemon Squeezy acts as the Merchant of Record (seller of record) for purchases and is an independent controller of the payment and tax data it collects; its own privacy terms also apply to that data.
Retention
- Full transcripts: not stored.
- Derived-analysis cache: kept indefinitely (no automatic expiry) so re-scores stay reproducible; scores plus short excerpts only, keyed to a one-way hash, never the transcript; deleted on request or account closure.
- Saved reports (Report History / auto-save, off by default): kept until you delete them or close your account.
- Rep performance trends: scores-only history per rep, up to 24 months, then rolled off; removable per rep on request.
- Scorecard templates & account data: kept until you delete them or close your account.
- Usage counters: short-lived (rolling daily / per-minute windows).
- Logs: limited operational retention; contain no call content.
International transfers
Our sub-processors may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
Security
We protect data with encryption in transit (TLS) and at rest, identity-based access controls, prompt-injection input filtering, output validation, and rate limiting. See our Security Brief.
Your rights
Depending on where you live (e.g. GDPR, CCPA/CPRA), you may have rights to access, correct, delete, or port your personal data and to object to certain processing. For call content where our customer is the controller, please direct requests to them; we assist as their processor. For your own account, contact us below.
Cookies & local storage
We use an essential cookie to keep you signed in, set by our authentication provider, Clerk. We use Cloudflare Web Analytics, which is cookieless and does not track you across sites, to understand aggregate usage. Our web fonts are self-hosted on our own domain (no third-party font CDN). We use no advertising cookies. When you make a purchase, the Lemon Squeezy checkout may set its own cookies needed to process the payment, governed by Lemon Squeezy's terms.
In your browser, the app keeps your in-progress diagnostic in sessionStorage so a refresh doesn't lose it. This copy is tab-scoped: it is cleared when you close the tab, and signing out erases it immediately, so the next sign-in starts fresh. It never leaves your device and is not kept after the tab closes.
Children
The service is for business use and is not directed to anyone under 16.
Changes
We'll post changes here and update the date above; material changes will be communicated to customers.