Facility and facilitator data—without client identifiers.

This policy describes the information Recovery Group Studio processes, why it is used, which service providers support the platform, and the choices available to account holders.

Effective: August 31, 2026

1. Information we process

We process facility and account information such as names, work email addresses, optional phone numbers, roles, profile preferences, program settings, sign-in and device-verification records, subscription status, and support communications. We also process group-planning topics, generated materials, shared facility history, usage and performance data, and feedback submitted through the product.

2. Information the service is not designed to hold

Recovery Group Studio is designed without client names, attendance or census records, diagnoses tied to a person, contact information, medical-record numbers, or completed individual clinical notes. Users must not enter protected health information or other identifying client data.

3. How information is used

We use information to create and secure accounts, separate facility workspaces, personalize generation, produce requested materials, maintain shared history, operate billing, provide support, prevent abuse, troubleshoot failures, measure reliability, improve the product, and meet legal or financial obligations.

4. Service providers and third parties

We use service providers for cloud hosting, AI processing, email delivery, payments, security, and operational monitoring. Stripe processes payment details and billing information under its own privacy terms; Recovery Group Studio does not store full payment-card numbers. When users request YouTube content or other linked sources, those third parties may receive ordinary web requests under their own policies.

5. Sharing

We do not sell personal information. We share information with service providers only as needed to operate the service; with a facility's authorized administrators and members according to workspace roles; when required by law; or when reasonably necessary to protect users, the public, or the platform.

6. Retention

Account and facility content is retained while access is active. After cancellation, supported workspace content may remain available in read-only form for up to 90 days before deletion. Security, audit, fraud-prevention, payment, tax, and legal records may be retained longer when reasonably necessary. Feedback may be retained to improve the service unless deletion is requested and no overriding obligation applies.

7. Security

We use access controls, encryption in transit, secure cookies, email verification, new-device codes, rate limits, hashed credentials and tokens, private facility separation, and restricted screenshot storage. No system is perfectly secure, so users must protect their credentials and promptly report suspected unauthorized access.

8. Choices and requests

Account holders may update profile information in the service. Facility administrators may manage invitations and billing. Requests to access, correct, or delete account information may be sent to support@recoverygroupstudio.com. We may need to verify the requester and may retain records required for security, legal, or financial purposes.

9. Children and changes

The service is for professional users and is not directed to children. We may update this policy as the product and legal requirements change. Material updates will be posted with a new effective date.