Privacy Policy

• Your account and billing details: Pixlabo Technologies decides how they are used, so for this data we are the data fiduciary.
• The details you keep about your own clients, leads, crew and team: your studio decides why and how they are used, so your studio is the data fiduciary and we are its data processor. We handle that data only to run the service for you, on your instructions.

• Account details: your name, email address, mobile number and your password, which is stored only as a one-way scrypt hash, never as the password itself.
• Studio records you add: clients, leads, projects, events, crew, files, claims and finances.
• Sign-in and security records: when each session started, the type of device and its IP address.
• Billing records: your plan and whether each payment went through. Card and bank details are entered with Razorpay and never reach us.

We use your data to provide and protect the service, to bill your plan, to meet our legal duties (such as keeping tax invoices) and to send messages you need, such as receipts, renewal reminders and security alerts. You give consent when you create your account, and you can withdraw it at any time by closing the account.

Product news reaches you by email or WhatsApp only if you agreed to it, and you can switch that off in Settings → Account. We never sell personal data, never rent it out and never use it for advertising.

• We use it only to run your studio's workspace: never for our own marketing, never to contact your clients, never for profiling and never to train AI models.
• It belongs to your studio. You can export it as spreadsheets whenever you want, and it stays readable only to the logins you give access to.
• Our team does not browse studio data. If someone on our team must look into a problem, every visit to your workspace is recorded in an audit log, support staff can only view and never change or export, and everyone on our team is bound to keep what they see confidential.
• When your studio asks us to, or when its account ends, we delete the data as described below, apart from what the law makes us keep.
• As the data fiduciary, your studio is responsible for having a lawful reason (usually consent) to keep its clients' details and for answering their requests. We give you the tools to correct, export and delete their records, and we help when you need more.

• Razorpay, to take payments.
• Google, for sign-in if you choose Continue with Google, and for sending email if you connect a Gmail account.
• Hostinger, which runs our servers and database in Indonesia.
• Cloudflare, which stores uploaded photos and files.

Each provider gets only the data it needs for its job and is bound to keep it secure and confidential. Some of them may store or process data outside India. We use only providers in countries where the DPDP law allows personal data to be transferred.

With Continue with Google we receive only your name, email address and profile picture, to create your account and sign you in.

When you connect Gmail, we ask only for your Gmail address and permission to send email. We use it solely to send the quotes, invoices, reminders and receipts you send, or switch on, from your studio, from your own address. We never read, search, store or delete the email in your mailbox, never use it for advertising, and never sell it or pass it to anyone. People cannot read it, except with your permission or when the law or security requires it. The access key Google gives us is stored encrypted, and you can disconnect Gmail at any time from your settings or your Google account.

Pixlabo Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Data is encrypted while it travels and while it is stored, and a backup is taken every day.
• Every record belongs to one studio, and every request is checked against it, so no studio can reach another studio's data.
• Inside a studio, roles decide who sees and changes what, and employees can be limited to their own work.
• Client photos and documents open only through private links that expire.
• Passwords are stored as scrypt hashes, and access keys for connected services are encrypted.
• Important actions, and every visit by our team, are written to an audit log, and we keep security logs for at least one year as the DPDP rules require.

If a breach affects personal data, we tell the affected studios and people without delay. We explain what happened, what it may mean for them, what we have done about it and what they can do. We also report it to the Data Protection Board of India, with the detailed report its rules require, currently within 72 hours. Where the breach touches your clients' data, we give your studio what it needs to inform them.

We keep your data while your account is open. We erase it once it is no longer needed for the purpose it was given for, unless the law requires us to keep it.

When a studio's Admin closes the studio (Settings → General), every login of the studio stops at once. For 30 days the data is kept so the studio can be restored if the Admin changes their mind. Then all its records and files are erased for good, apart from the billing records the law requires us to keep, such as tax invoices. Backups are kept for 30 days and then overwritten, so erased data also leaves the backups within that time.

• See a summary of your personal data and how it is used.
• Correct, complete or update your details. Most of this you can do yourself in the app.
• Ask us to erase your data, and withdraw consent at any time, which is as easy as giving it.
• Name someone who may use these rights for you if you die or can no longer act yourself.
• Complain to our Grievance Officer, and, if you are not satisfied, to the Data Protection Board of India.

To use any of these rights, write to info@pixlabo.com. We reply as soon as we can and always within the time the DPDP law sets, currently at most 90 days. Your studio's clients should contact your studio first, since your studio decides about their data. We will help your studio respond.

Pixlabo Studio is for businesses and is not meant for anyone under 18. If your studio keeps details of a child, for example from a family shoot, your studio must have the consent of a parent or guardian.

For any concern about how your data is handled, write to our Grievance Officer, Grievance Officer Name, at info@pixlabo.com. We will acknowledge your complaint and respond within the time the law allows.

Pixlabo Technologies, Registered office address, City, State, PIN.

When we change this policy in a way that matters, we tell you in the app or by email before the change takes effect. The date at the top shows when it was last updated.