Privacy Policy

1. Introduction

ArtoMania Studio Pvt Ltd, operating as Studio99, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services and associated products.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, phone number
• Profile Information: Avatar, preferences, timezone, language
• Billing Information: Payment method details, billing address (processed by Razorpay/Stripe)
• Content: Designs, projects, text art, and other content you create
• Communications: Support requests, feedback, survey responses

2.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system
• Usage Data: Pages viewed, features used, time spent, API calls
• Session Data: Login times, session duration, device identifiers
• Cookies: Authentication tokens, preferences, analytics

2.3 Third-Party Sign-In

When you sign in with Google, we receive your name, email, and profile picture from Google. We do not receive or store your Google password.

3. How We Use Your Information

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Detect, prevent, and address security or technical issues
• Monitor and analyze trends, usage, and activities
• Enforce usage limits and subscription tiers
• Personalize your experience across products
• Send marketing communications (with your consent, opt-out available)

4. Information Sharing

We do not sell your personal information. We may share your information in these limited circumstances:

• Service Providers: Third-party vendors who assist in providing our services (payment processors, email services, cloud hosting)
• Legal Requirements: When required by law, subpoena, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

5. Data Security

We implement appropriate technical and organizational security measures:

• Encryption of data in transit (TLS) and at rest
• Secure password hashing with bcrypt (12 salt rounds)
• HttpOnly, secure session cookies
• Rate limiting and bot protection (Cloudflare Turnstile)
• Single-session policy to prevent session hijacking
• Regular security audits and dependency updates

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Storage and Retention

Your data is stored on secure cloud infrastructure:

• Database hosted on Neon PostgreSQL (AWS Southeast Asia)
• Files and assets stored on Cloudflare R2
• We retain your data for as long as your account is active
• You may request deletion of your account and data at any time
• Certain information may be retained as required by law or for legitimate business purposes

7. Your Rights

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Request export of your data
• Opt-out: Unsubscribe from marketing communications
• Object: Object to certain data processing activities

To exercise any of these rights, contact us at support@studio99.app.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze usage patterns and improve services
• Provide bot protection via Cloudflare Turnstile

You can control cookies through your browser settings. Disabling cookies may affect authentication and service functionality.

9. Third-Party Services

Our services integrate with third-party services:

• Payment Processors: Razorpay (India), Stripe (International)
• Email Services: AWS SES for transactional emails
• Authentication: Google OAuth for social sign-in
• Platform Integrations: Canva, Adobe Express (for CalligraphyMaker)

These third parties have their own privacy policies. We are not responsible for their practices.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our services. Your continued use after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices: