Privacy Policy

We collect three categories of information:

• Account information— your name, email address, hashed password, and (optionally) studio profile details you choose to add (studio name, phone, address, social links, avatar/cover image).
• Customer and event data— information you store about your clients (name, phone, email, address, notes), event names, and photographs you upload for selection.
• Billing information— when you subscribe to a paid plan, your payment is processed by Razorpay. Studiostock receives only a customer reference, subscription status, and invoice metadata; we never receive or store your card number, CVV, or UPI PIN.

• To provide and maintain the Service.
• To authenticate you and keep your account secure (sessions, login, sign-up).
• To process subscription payments through Razorpay and send invoice and payment-status emails.
• To respond to support requests sent to hello@studiostock.in.
• To detect, prevent, and respond to fraud, abuse, or security incidents.

We do not sell your personal information. We do not use your photos for AI training, marketing, or any purpose other than serving them to you and your authorized clients.

• Database— PostgreSQL hosted on Supabase (Mumbai region, AWS ap-south-1).
• Photographs— Cloudflare R2 object storage. Files are scoped to your account and accessible only via authenticated URLs or per-event share codes that you control.
• Payments— Razorpay Software Pvt. Ltd. (PCI-DSS compliant). Razorpay's privacy policy applies to data processed by them at razorpay.com/privacy.

We use essential cookies only — a session cookie set by our authentication provider so you stay signed in. We do not use third-party advertising cookies. We currently do not run any third-party analytics or tracking scripts on the application.

We share information only with the service providers required to operate the Service (Supabase for database, Cloudflare R2 for file storage, Razorpay for payments). These providers act as our processors and are bound by their own confidentiality and data protection obligations.

When you create an event share link, anyone who has both the link and the 6-digit code you set can view the photographs you placed in that event — this is the intended functionality. You can disable or rotate the share code at any time.

You can access, update, or delete the personal information in your account directly from the Profile and Customers pages. To request a full data export or permanent account deletion, email hello@studiostock.in from the email address on the account. We will respond within 30 days.

We retain account, customer, and photograph data for as long as your account is active. When you delete your account, we delete your data from our active systems within 30 days; encrypted backups are purged within a further 60 days.

Billing records (invoices, payment receipts) are retained for 8 years to comply with Indian tax law.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Under the Information Technology Rules, 2011, the name and contact details of the Grievance Officer are:

Sarita Devi (Proprietor)
M/s STUDIOSTOCK
Qamruddinganj, Old Post Office, PO Biharsharif, PS Biharsharif
Biharsharif, Nalanda, Bihar 803101, India
Email: hello@studiostock.in

We may update this policy. We will post the new version on this page with a revised effective date and, for material changes, email account holders.

Questions about this policy or your data? Email hello@studiostock.in.