Back to Fís Studio

Privacy & cookie notice

Last updated: 19 August 2026 · Draft — pending owner approval.

Fís Studio (“we”, “us”) is operated by Straitéis AI Limited, Ireland. This draft notice describes the data the current service can process. It does not make a deployment-residency, transfer, retention, or contractual promise that has not been confirmed for a production deployment.

Our roles

For workshop content, the facilitator organisation may act as controller. Fís Studio acts as processor only if an executed agreement with the customer designates Fís Studio as processor and sets the applicable processor terms. This draft does not itself make that allocation. For facilitator and administrator account operations, Straitéis AI may determine the purposes and means.

What we process — and what we deliberately don't

  • Participants: a display name and workshop contributions such as stickies, canvas objects, reactions, response answers, positions, and votes. The configured workshop access mode can also collect an email address.
  • Participant email (facilitator-controlled): the facilitator chooses each workshop's access mode. In anonymous workshops we collect no participant email at all. In email sign-in workshops (including domain-restricted and named-list workshops), the address you enter is used to send a one-time sign-in link and reconnect you to the workshop. The facilitator can use it for workshop administration and access controls.
  • Facilitators / administrators: email address and authentication data (passwordless sign-in links; for admins, two-factor secrets and audit records of admin actions).
  • Assessment participants: verified email identity, assessment answers, saved-answer state, completion status (including skipped or incomplete), score data, and the assessment version. Assessment notices show the controller, purpose, lawful basis, recipients, retention, rights contact, and intended use before participation.
  • Progress and setup: self-directed activity-progress records; workshop and activity settings; personal templates, including names and definitions; and references to uploaded images.
  • Uploads and result sharing: uploaded image bytes and related storage metadata; and read-only result views exposed through share links. Anyone who receives a share link can view the results that link exposes.

How you join a workshop

Facilitators choose one access mode per workshop: anonymous (join by link or QR with just a display name — no email is collected or accepted), email sign-in (enter your email and receive a one-time sign-in link), domain-restricted (email sign-in limited to addresses at domains the facilitator lists), or named list (email sign-in limited to addresses the facilitator has listed). Where an email is used, it is used only for the workshop purpose — signing you in, reconnecting you to your own contributions, sharing workshop results or follow-up materials, and enforcing a facilitator's removal of a participant. It is retained while the workshop exists and is visible to the workshop facilitator.

Legal bases (where Fís Studio is the controller)

  • Contract (Art. 6(1)(b) GDPR) — facilitator and administrator account data (email, authentication data): processing necessary to provide the service under our Terms.
  • Legitimate interests (Art. 6(1)(f) GDPR) — keeping the service secure and protecting other users' information (Recital 49): rate-limiting by IP address, security and audit logging, participant join/reconnect records, and enforcing a facilitator's removal of a disruptive participant. These records never include how anyone voted.
  • Workshop content and participant emails: the workshop facilitator and their organisation determine the legal basis. Where an executed customer agreement designates Fís Studio as processor, Fís Studio processes this data on documented instructions under the terms of that agreement. The draft DPA is not accepted processor terms.

Providers and deployment facts

See sub-processors for services the application can be configured to use. Confirm active providers, hosting location, backup location, and any transfer safeguards before production. Microsoft Planner is dormant unless configured. No live AI provider or model integration is active.

Cookies — strictly necessary only

Fís Studio uses only strictly-necessary (functional) cookies to keep you signed in and to maintain your workshop session. Because we set no analytics, advertising, or tracking cookies, there is no consent banner — this notice serves as your cookie information. The cookies we set are:

CookiePurposeLifetime
fis_sessFacilitator session7 days
fis_sessAdministrator session12 hours
fis_ptParticipant workshop session30 days
fis_assessVerified-email assessment identity30 days

If we ever introduce a non-essential cookie, we will ask for your consent first.

Browser storage preferences

The application also uses persistent localStorage for interface preferences. For facilitators, the fis:slideDefaults:<facilitator email> key stores Slide defaults for text size and font family, keyed to the facilitator email. For participants, fis.board.toolbarCollapsed and fis.board.helpHidden store toolbar and help preferences in that browser. You can clear this data in your browser by clearing Fís Studio's site data, or control it using your browser's site-data settings.

Retention

The service has different retention mechanisms for workshops, assessments, sessions, uploads, and templates. Assessment retention is configured by the facilitator for each published assessment and is shown in the assessment notice. Confirm production retention, backup, restore, and erasure operations before making a production deployment.

Your rights

Contact the workshop facilitator or the assessment rights contact shown at entry for workshop and assessment requests. You can also email privacy@fis.studio. The applicable controller and request process must be confirmed for the deployment and agreement.

Contact

Straitéis AI Limited · privacy@fis.studio

Terms · DPA · Sub-processors · Help on privacy and data

Straitéis AI Limited · 77 Lower Camden Street, Dublin 2, D02 XE80 · Company Registration Number: 799503 · info@straiteis.ie