Legal
Privacy Policy
OpenCloud Studio Suite
Last updated: 2026-08-31
ItzPanda LLC, a Missouri LLC ("OpenCloud Studio", "we") makes the OpenCloud Studio Suite desktop app and runs the OpenCloud Studio license service. This policy explains what we do and don't collect.
The short version
- Your Roblox API keys and OAuth tokens never reach us. They're encrypted on your PC and sent only to Roblox.
- We collect the minimum needed to sell you a license and keep it working: your email, a hashed machine ID, and payment metadata from our processor.
- We don't sell your data or use it for advertising.
What stays on your computer (we never receive it)
Stored under %LOCALAPPDATA%\OpenCloudStudioSuite\:
- Open Cloud API keys and OAuth tokens — encrypted at rest with Windows
DPAPI (scoped to your Windows account). Transmitted only to
apis.roblox.com, by your machine, in thex-api-keyorAuthorizationheader, to perform actions you initiate. - Your settings, publish history, moderation audit log, and telemetry snapshots — plain local files.
What the license service receives
Only when you buy or activate a license:
| Data | Why we need it | How long we keep it |
|---|---|---|
| The email address you enter at checkout | to issue your license, send the claim code, and provide support | until you ask us to delete it |
| A hashed machine identifier (SHA-256 of a Windows machine GUID, truncated) | to bind a license to a device and enforce the seat limit | for the life of the license |
| Payment metadata from Stripe (e.g. last 4 digits, card brand, country, subscription status) — never full card numbers | fraud prevention, receipts, renewals | per Stripe's retention |
| For Litecoin orders: the receiving address, expected amount, and transaction id | to confirm your payment on-chain and issue the license | for the life of the order record |
| Your app version and license ID on update and refresh checks | to serve the correct update and to enforce cancellations / revocations | rolling server logs, ~30 days |
We do not collect analytics, usage telemetry, crash reports, or your Roblox content.
Service providers
- Stripe, Inc. — card processing. Privacy policy.
- BlockCypher — read-only lookups of public Litecoin blockchain data for the address your payment is sent to. No personal data is sent.
- Cloudflare, Inc. — routes traffic to our license service and serves ocstudio.xyz. Privacy policy.
We may disclose information if required by law or to protect our rights.
Your choices and rights
Email support@ocstudio.xyz to access, correct, or delete the data we hold about you, or to get a copy of it. We'll respond within 30 days. Deleting your data may end your ability to activate or refresh a license.
If you're in the EEA or UK, you have rights under the GDPR / UK GDPR; our lawful bases are performing our contract with you and our legitimate interest in preventing fraud. If you're a California resident, you have rights under the CCPA; we do not "sell" or "share" personal information as those terms are defined.
Children
The Software is a creator tool marketed to developers. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we'll delete it.
Changes
We'll post changes at https://ocstudio.xyz/privacy with a new date.
Contact
ItzPanda LLC — support@ocstudio.xyz