Privacy Policy

01About this policy

Index Studio is the studio name used by this website, which operates from India. The contracting operator’s identity and formal grievance details are awaiting approval before commercial launch. For privacy questions, contact indexstudiohq@gmail.com.

This policy describes the current website. Purchases and live payments are not currently enabled. Newsletter sign-up requires a separate consent choice and email confirmation. We will update this notice before introducing materially different processing.

02Information we collect

Account information includes your email address, user identifier and profile information. Google sign-in supplies the account information you authorize, such as name, email and profile picture. Optional profile fields include a display name, phone number and uploaded photo. Password authentication is handled by Supabase Auth; passwords are not stored in the customer profile table.

We store saved products and account preferences, and process authentication and technical request information needed to operate and secure the service. When you email support, we receive your email address, message and any attachments you choose to send. Please do not send passwords, payment-card details or sensitive identity documents.

Order and entitlement records will be used for genuine purchases when sales are enabled. We do not currently collect payment-card information or create purchases from a successful browser redirect.

03Why information is used

We use account information to authenticate you, maintain your profile, show your own library and saved products, respond to requests, prevent abuse and secure the service. Future order records will support fulfilment, accounting, refunds and legal obligations.

Where a legal basis is required, it depends on the activity and applicable law: providing a requested service or contract, complying with legal duties, consent where required, or legitimate interests where that basis is available and balanced against your rights. Optional marketing requires a separate choice; creating an account does not subscribe you.

04Services and sharing

Supabase provides authentication, database services and private file storage. Vercel hosts the website. Google provides optional sign-in and the Gmail support mailbox. Website fonts are self-hosted. These providers receive information necessary for their functions and may process operational or security logs.

Dodo Payments is planned but live checkout is not enabled. Resend sends newsletter confirmation emails when subscriptions are available. Newsletter requests and confirmation status are stored in Supabase, separately from customer accounts. Authentication emails are handled through the configured Supabase Auth email service. We will disclose additional providers before enabling new collection.

We do not sell personal information. Information may be disclosed when legally required, to protect rights and security, or to authorized service providers supporting the purposes described here.

05Storage and international processing

The Supabase project is configured in Mumbai. Hosting, support, authentication providers and their subprocessors may process information in other countries. This does not mean every copy or operational log stays in India. Appropriate contractual and transfer safeguards must be assessed for the markets served.

The Cookie Policy describes browser storage, including login sessions, the cart and invitation dismissal. No first-party advertising or analytics tracker is currently configured in the application.

06Retention and security

We retain account information while needed to provide the account and deal with legitimate operational or legal requirements. You may request deletion. Records subject to legal retention or a dispute may need to be retained; backups may take additional time to expire. A detailed retention schedule will be approved before sales launch.

Access controls, private storage and account-specific database policies help protect information. No transmission or storage system can be guaranteed completely secure. Keep your sign-in credentials private and tell us promptly about suspected unauthorized access.

07Your choices and rights

You can edit supported profile fields, request an email change through the account page, sign out and clear browser storage. Email changes follow Supabase confirmation requirements; changing your Index Studio email does not change your Google account.

Email indexstudiohq@gmail.com to request access, correction, deletion or information about processing. Depending on your location and applicable law, you may also have rights to portability, restriction, objection or withdrawal of consent, and to complain to a competent privacy authority. We may need proportionate identity verification and will explain any lawful limitation. Withdrawing consent does not invalidate earlier lawful processing.

08Children and changes

The service is not intended to collect children’s personal information without any authorization required by applicable law. If you believe a child has provided information without appropriate authorization, contact us so we can investigate. Account eligibility and any parental-consent process require operator approval before commercial launch.

We will revise this notice when practices change and give additional notice where required. The revision date is shown above; this review draft has no approved effective date.

Questions?

indexstudiohq@gmail.com