Privacy Policy

This policy explains how Gravityy Studio ("we", "us") processes personal data when you use our website, client portal and services.

Data we collect

• Information you give us: name, company, email, phone, project details, billing details and messages you send through forms, the client portal or support tickets.
• Usage data: pages visited, referrer and UTM campaign parameters, device and browser information. Analytics cookies are only set after you consent.
• Payment data: payments are processed by Stripe and Razorpay. We never store full card numbers.

How we use it

• To respond to enquiries and prepare proposals (legitimate interest / steps prior to contract).
• To deliver services, invoices and support (performance of contract).
• To meet tax and accounting obligations, including GST records (legal obligation).
• To send newsletters, only when you subscribe (consent). Unsubscribe at any time.
• To improve our website with analytics (consent).

Sharing

We share data only with processors that help us run the business: Supabase (database & auth), Vercel (hosting), Resend (email), Stripe and Razorpay (payments), PostHog and Google Analytics (analytics, consent-based) and Sentry (error monitoring). Each is bound by data-processing terms.

Retention

Leads are retained for up to 24 months after last contact. Client and invoice records are kept as required by tax law (typically 8 years in India). Analytics data is retained for 14 months.

Your rights

You may request access to, correction of, export of, or deletion of your personal data, and withdraw consent at any time. Clients can delete their account from Portal → Settings. Anyone can submit a request on our data request page or email us. We respond within 30 days.

Security

Data is encrypted in transit and at rest. Access is restricted by role with row-level security, and all access to admin tools is logged.

Contact

Grievance officer / data protection contact: privacy@gravityy.studio