How Studio handles your information.

You can read this website and open its public pages without signing in or creating an account.

Studio does not currently configure advertising trackers, behavioral advertising, or marketing cookies on this website.

If Black Lentil selects you for private Studio access, you may sign in with Google using the exact email address approved for your Studio. Google provides Studio with your Google account identifier, verified email address, name, and basic profile information. Studio does not request access to your Gmail, Google Drive, Calendar, contacts, files, or passwords.

Studio keeps its own user, invitation, membership, access-status, session, policy-acceptance, and security-audit records. These records determine whether an identity may enter Studio and which client it may access. Signing in to Studio does not create, imply, or grant access to Black Lentil Desk.

A Studio session ends after 30 minutes without activity and no later than 12 hours after it begins. Studio stores a one-way hash of the session token rather than the usable token itself. You can sign out at any time, and Black Lentil can revoke access when needed to protect a client or the service.

The request form keeps your answers in the page only long enough to prepare an email draft. The page does not send those answers to Black Lentil or store them on a Studio server.

When you continue, your device may open your email application with the draft. You decide whether to send it. If you send the email, Black Lentil and the email providers involved receive the information in the message, including your name, email address, location, organization, public link, and the details you choose to include.

Do not include passwords, payment-card details, government identifiers, or confidential records in a public request.

Hosting, network, and security providers may process ordinary access information—such as an IP address, browser or device information, requested page, and time of access—to deliver and protect the website. Those providers may keep security and access logs under their own agreements with Black Lentil.

Links to Black Lentil, Desk, email services, and other websites lead to services with their own privacy practices.

Information sent in a Studio request is used to understand the request, respond, decide whether Studio is a fit, protect the service, keep necessary business records, and meet legal obligations.

Black Lentil may use service providers for hosting, security, and email. They receive only the information needed to perform those functions. Black Lentil does not sell Studio request information or use it to create behavioral advertising profiles.

Information may also be disclosed when required by law or reasonably necessary to protect rights, safety, or the service.

Email requests, access records, and related records are kept only as long as reasonably needed to evaluate or provide the requested work, administer or protect access, maintain business records, resolve disputes, or meet legal obligations. They are then deleted or de-identified when appropriate.

Black Lentil uses administrative, technical, and physical safeguards appropriate to the information it maintains. No transmission or storage method can be guaranteed completely secure.

Studio is based in New York City and may receive requests from other countries. If you send a request from outside the United States, your information may be transferred to and processed in the United States, where privacy rules may differ from those where you live.

You may ask what personal information Black Lentil maintains about your Studio request, request a correction or deletion, or raise a privacy question. Some records may need to be retained for security, contractual, dispute, or legal reasons. Rights and exceptions differ by location.

Email george@blacklentil.com with “Studio privacy” in the subject.

Studio is a professional service and is not directed to children under 13.

If Studio begins collecting information in a new way—for example, through a connected form, analytics, client report, task record, calendar connection, or payment service—this notice must be updated before that change is released. A material update will carry a new date.