Your Studio connection

This notice covers Lustra Studio’s integrations with ChatGPT and Claude. Contact hello@lustrastudio.co for privacy questions or requests concerning your account data.

Information and purposes

We use your Studio account ID, name, email and approved permissions to authenticate your connection and keep access limited to your account. When you request a tool, we process the relevant project names, messages, prompts, reference images, generated images, saved model images, generation settings, job status and credit usage to perform that request and save its results in Studio. Requested account information and tool results are returned to the assistant you connected.

Your password is checked by Lustra Studio’s login service and is not included in MCP tool results or returned to your assistant. OAuth connection credentials are separate from your website login.

Service providers and recipients

Cloudflare hosts the integration and stores account-related records, connection credentials and image files. Google’s image-generation services receive the prompts, settings and reference images needed to generate your requested results. If you connect ChatGPT, OpenAI receives the information returned to it and handles it under OpenAI’s privacy policy. If you connect Claude, Anthropic receives the information returned to it and handles it under Anthropic’s privacy policy. Reference imports fetch the image location you provide; that hosting service receives the download request.

Security and operational data

The login rate limiter uses your IP address and submitted email to limit repeated attempts within a 60-second window. Cloudflare also processes request metadata, timestamps, status codes, errors and sampled traces to operate, secure and diagnose the integration. Hosted Worker logs and traces are retained for up to seven days under Cloudflare’s standard observability retention. These operational records are used for security and service reliability.

Retention

Pending connection records expire after 24 hours and are removed when authorization completes. Access tokens and temporary image download links expire after one hour. Refresh tokens expire after 30 days; another sign-in is then needed.

Saved account records, projects, prompts, messages, reference files, model images and generated images have no automatic age-based expiry in this integration. They remain in Studio storage until deleted or a deletion request is processed. Removing a project or message from the application does not by itself guarantee removal of its underlying stored image files. To request deletion of stored files or account data, contact the address above. Disconnecting your assistant does not delete previously saved Studio content.

Your controls

You choose what prompts and references to send and which tools to request. You can disconnect Lustra Studio in ChatGPT or Claude to stop that client using the connection, and manage your projects in Studio. Contact us to request access, correction or deletion of account data, including stored image files, or for help with connection revocation. Information already returned to ChatGPT or Claude is governed by OpenAI’s or Anthropic’s retention and deletion controls.