Privacy Policy

1. Introduction

ArtoMania Studio Pvt Ltd, operating as Studio99, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services and associated products.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, phone number
• Profile Information: Avatar, preferences, timezone, language
• Billing Information: Payment method details, billing address (processed by Razorpay/Stripe)
• Content: Designs, projects, text art, and other content you create
• Communications: Support requests, feedback, survey responses

2.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system
• Usage Data: Pages viewed, features used, time spent, API calls
• Session Data: Login times, session duration, device identifiers
• Cookies: Authentication tokens, preferences, analytics

2.3 Third-Party Sign-In

When you sign in with Google, we receive your name, email, and profile picture from Google. We do not receive or store your Google password.

2.4 Text Input, Transliteration & Content Generation (CalligraphyMaker)

CalligraphyMaker lets you type a word or phrase to generate calligraphy artwork. To support Indian-language input, the text you type is processed as follows:

• Transliteration: When you type in Latin (Roman) characters, your input is sent to Google's transliteration service solely to convert it into the corresponding Unicode script (for example, Hindi, Marathi, or Gujarati). This step is provided by Google and is subject to Google's own privacy policy; it is not an Adobe or Canva feature.
• Rendering: The resulting Unicode text is then passed to our own converter, which renders it into calligraphy artwork on our servers.
• No retention: The text you type in this flow is used only to generate your result. We do not store it, sell it, or share it with any third party beyond the transliteration step described above.

About "AI-generated" artwork: While CalligraphyMaker artwork may be described as "AI-generated," the results are produced programmatically using our own rendering engine, fonts, and templates. Output is generated deterministically from your input rather than by a generative machine-learning model, and you are free to use the results in your own designs subject to our content license.

2.5 Calligraphy Maker Android App

When you use the Calligraphy Maker mobile app (distributed via Google Play), the following applies in addition to the rest of this policy:

• Account: Generating calligraphy requires a free Studio99 account (email sign-up or Google Sign-In). Your account information is handled as described in Sections 2.1 and 2.3.
• Device identifier: We collect a device-level identifier (Android's ANDROID_ID) and use it solely for fraud prevention and abuse control — for example, ensuring the monthly free credit allowance is not multiplied by creating many accounts on one device. It is not used for advertising and is not sold or shared.
• Advertising (free tier): The app shows ads served by Google AdMob — banner ads, occasional interstitial ads, and optional rewarded videos you can watch to earn bonus credits. AdMob may collect your device's advertising ID, IP address, and ad-interaction data to serve and measure ads, subject to Google's Privacy Policy. You can reset or delete your advertising ID in your device settings. Paid subscribers see no ads.
• Rewarded credits: When you finish a rewarded ad, Google notifies our server with a signed confirmation (including your account identifier) so we can add the earned credits. We use this only to grant and audit rewards.
• Push notifications: With your permission, the app registers a push token (via Expo / Firebase Cloud Messaging) so we can send service notifications. You can disable notifications in system settings at any time.
• Saving artwork: Downloads are saved to your device's gallery with your permission. The app does not read, upload, or scan your other photos or files.
• Account deletion: You can delete your Studio99 account and associated data at any time from accounts.studio99.app/dashboard/settings (Danger Zone → Delete Account), or by emailing reach@studio99.app.

2.6 AI Assistant Connector (MCP)

Studio99 offers a connector for AI assistants (such as Claude and ChatGPT) built on the open Model Context Protocol (MCP). When you add the connector and sign in with your Studio99 account, the following applies:

• What we receive: Only the specific requests your AI assistant sends to our calligraphy tools — the text to render, the chosen language and style, and (if you use it) a request to save a result as a project. We also receive your Studio99 account identity (name, email) from your sign-in, and the name of the AI application making the request.
• What we never receive: Your conversation history, other messages, files, or memory from your AI assistant. The connector only sees the tool requests described above.
• How we use it: To generate your artwork, operate your monthly credit allowance, maintain your account records (including usage history you can view in your dashboard), prevent abuse, and improve the service (for example, understanding which languages and styles are most used).
• Sharing: Generated artwork images are stored on our content delivery infrastructure (Cloudflare) so your AI app can display them. We do not sell or share your connector data with any third party.
• Retention & control: Connector usage records are retained as part of your account history. You can disconnect the connector at any time from your AI app's settings, and you may request deletion of your account and associated data from your Studio99 dashboard or by contacting us at reach@studio99.app.

2.7 AMS Converter Android App

AMS Converter (by IndiaFont / Studio99, distributed via Google Play) is a free, ad-supported utility that converts typed or pasted text into the AMS font keyboard format. It requires no account or sign-in, and it is designed to collect as little data as possible:

• Your text: Conversion to AMS format happens entirely on your device. When you type in English, the text you enter is sent to Google's Input Tools service to obtain Hindi/Marathi/Gujarati transliteration suggestions, subject to Google's Privacy Policy. We do not receive, store, or log your text on our servers — the app has no Studio99 backend.
• History: Your recent conversions are saved only on your device and can be deleted in the app at any time. Uninstalling the app removes them.
• Advertising: The app shows banner and occasional interstitial ads served by Google AdMob. AdMob may collect your device's advertising ID, IP address, and ad-interaction data to serve and measure ads, subject to Google's Privacy Policy. You can reset or delete your advertising ID in your device settings.
• No account, no personal data: The app has no sign-up, collects no name, email, contacts, files, or photos, and sends no notifications.

3. How We Use Your Information

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Detect, prevent, and address security or technical issues
• Monitor and analyze trends, usage, and activities
• Enforce usage limits and subscription tiers
• Personalize your experience across products
• Send marketing communications (with your consent, opt-out available)

4. Information Sharing

We do not sell your personal information. We may share your information in these limited circumstances:

• Service Providers: Third-party vendors who assist in providing our services (payment processors, email services, cloud hosting)
• Legal Requirements: When required by law, subpoena, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

5. Data Security

We implement appropriate technical and organizational security measures:

• Encryption of data in transit (TLS) and at rest
• Secure password hashing with bcrypt (12 salt rounds)
• HttpOnly, secure session cookies
• Rate limiting and bot protection (Cloudflare Turnstile)
• Server-side session management with automatic expiry
• Regular security audits and dependency updates

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Storage and Retention

Your data is stored on secure cloud infrastructure:

• Database hosted on Neon PostgreSQL (AWS Southeast Asia)
• Files and assets stored on Cloudflare R2
• We retain your data for as long as your account is active
• You may request deletion of your account and data at any time
• Certain information may be retained as required by law or for legitimate business purposes

7. Your Rights

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Delete your account and data yourself at accounts.studio99.app/dashboard/settings, or request deletion by email
• Portability: Request export of your data
• Opt-out: Unsubscribe from marketing communications
• Object: Object to certain data processing activities

To exercise any of these rights, contact us at reach@studio99.app.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze usage patterns and improve services
• Provide bot protection via Cloudflare Turnstile

You can control cookies through your browser settings. Disabling cookies may affect authentication and service functionality.

9. Third-Party Services

Our services integrate with third-party services:

• Payment Processors: Razorpay (India), Stripe (International)
• Email Services: AWS SES for transactional emails
• Authentication: Google OAuth for social sign-in
• Transliteration: Google transliteration service — converts typed Latin text to Unicode script in CalligraphyMaker (see Section 2.4)
• Advertising: Google AdMob — serves ads in the Calligraphy Maker and AMS Converter Android apps (see Sections 2.5 and 2.7)
• Push Notifications: Expo / Firebase Cloud Messaging — delivers mobile app notifications (see Section 2.5)
• Platform Integrations: Canva, Adobe Express, Google Play, and MCP-capable AI assistants such as Claude and ChatGPT (for CalligraphyMaker — see Section 2.6)

These third parties have their own privacy policies. We are not responsible for their practices.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our services. Your continued use after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices: