Welcome to Avishkar Studio. We respect your privacy and are committed to handling your personal information transparently. This Privacy Policy details how personal information is collected, used, processed, and safeguarded when you visit our website (https://avishkarstudio.com), communicate with us, submit service requests, or leave customer reviews.
1 Introduction & Scope
This Privacy Policy applies to the Avishkar Studio public website, subdomains, online contact forms, service inquiry workflows, newsletter subscriptions, and feedback mechanisms. It outlines our operational data practices under applicable commercial and electronic data protection standards in India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 where applicable.
2 About Avishkar Studio
For the purposes of applicable data protection laws, your information is handled by:
3 Information We Collect
We collect information in two primary ways: information you choose to provide directly, and technical information collected automatically during website use.
A. Information Voluntarily Provided
- Contact & Inquiries: When you complete our contact form, request a quote, or submit service inquiries, we collect your full name, email address, telephone number, business or brand name, and project description.
- Reviews & Testimonials: When submitting a client review, you authenticate using Google Authentication. We receive your public Google profile name, email address, and profile picture to verify review authenticity.
- Newsletter Subscription: When subscribing to studio updates via our newsletter footer form, we collect your email address.
- Feedback & Support: When submitting general feedback or support queries, we collect your contact details and message contents.
B. Information Collected Automatically
When you browse our website, technical diagnostic and usage information is recorded automatically by our web server and analytics tags:
- Network & Device Information: Internet Protocol (IP) address, browser type and version, device category, screen resolution, and operating system.
- Usage & Interaction Data: Pages viewed, referring website addresses, date and time of visits, links clicked, and approximate regional location derived from IP addresses.
- Spam Prevention Signals: Interaction patterns analyzed by Google reCAPTCHA to prevent automated spam and malicious submissions.
4 How We Use Personal Information
We process personal information only for legitimate operational and business purposes, including:
- Responding to project inquiries, providing service quotations, and answering technical questions
- Executing, delivering, and managing client design and software development projects
- Authenticating and displaying genuine client testimonials and reviews
- Delivering periodic studio newsletters (where you have subscribed)
- Monitoring website technical stability, performance, and user interface responsiveness
- Preventing spam, bot submissions, credential abuse, and cyber threats
- Maintaining standard commercial, accounting, and tax records in accordance with Indian business practice
5 Third-Party Services
To deliver our digital services, we utilize specialized third-party service providers. The following table identifies providers utilized by the website and the data processed by each:
| Provider | Purpose | Information Involved |
|---|---|---|
| Formspree | Form handling for contact, quotes, and feedback | Name, email, phone number, project details, and inquiry text |
| Google Firebase & Firestore | Review storage and reviewer verification | Google account name, email address, avatar, review rating, and comments |
| Google Tag Manager | Managing performance and analytics tags | Aggregated usage events, page visits, and technical browser data |
| Google reCAPTCHA v2 | Automated anti-spam and security verification | Device signals, interaction timings, and IP address |
| Mailchimp | Newsletter subscription list management | Email address and subscription timestamp |
| Hostinger | Web server hosting and network routing | Standard HTTP access logs, IP addresses, and request headers |
| WhatsApp / Meta | Direct messaging and client communication | Phone number, chat messages, and shared files (when initiated by you) |
6 Direct Messaging (WhatsApp / Meta)
Our website includes direct WhatsApp click-to-chat links. When you choose to contact Avishkar Studio through WhatsApp, your communications are transmitted across infrastructure operated by WhatsApp LLC / Meta Platforms.
Your phone number, chat history, and any files you send are processed in accordance with WhatsApp’s own Terms of Service and Privacy Policy. Avishkar Studio does not control Meta’s independent data processing practices.
7 Firebase & Reviewer Authentication
To prevent fabricated feedback and ensure community integrity, our customer review system utilizes Google Firebase for data storage and Google Authentication for identity verification.
When submitting a review, you sign in through Google. Firebase receives your public display name, email address, and profile photo. This information is associated with your review rating and testimonial. Google processes this authentication data subject to Google's Privacy Policy and Terms of Service.
8 Cookies & Tracking Technologies
We use small text files known as cookies and similar web technologies to support core website functionality and analytics:
- Essential Technologies: Required for secure navigation, CSRF protection, and anti-abuse verification (such as Google reCAPTCHA).
- Analytics Tags: Deployed via Google Tag Manager to help us understand aggregate traffic patterns, popular services, and site speed.
- Authentication State: Managed by Google Firebase to recognize authorized reviewers during active submission sessions.
You can configure your browser to block or alert you about cookies; however, certain interactive features (such as review submission) may not function properly without them.
9 Data Sharing & Disclosures
Avishkar Studio does not sell, trade, or rent your personal information to third parties for independent marketing purposes. We share personal information only in the following operational scenarios:
- Authorised Service Processors: With cloud, hosting, form delivery, and email vendors listed in Section 5 strictly to support website operations.
- Legal & Regulatory Compliance: Where disclosure is strictly required by Indian law, a valid court order, government investigation, or law enforcement request.
- Protection of Rights: Where necessary to investigate security incidents, enforce our Terms & Conditions, or protect the safety and property of Avishkar Studio and the public.
10 Data Retention Schedule
We retain personal data only for as long as necessary to fulfill the purpose for which it was collected or to comply with operational, accounting, and legal requirements:
| Data Category | Purpose | Retention Period |
|---|---|---|
| Inquiries & Service Requests | Responding to inquiries and project estimates | Retained for the duration of communication and up to 12 months for commercial follow-up, or until you request deletion. |
| Client Project & Billing Records | Contract performance, dispute records, and tax accounting | Retained for up to 7 years in accordance with standard Indian commercial and tax accounting practice. |
| Customer Reviews & Testimonials | Social proof and verified public feedback | Retained while the review remains published, or until the author requests removal. |
| Newsletter Subscriptions | Studio updates and design insights | Retained until you unsubscribe or request removal. |
| Server & Network Access Logs | Security monitoring and diagnostic analysis | Rotated and purged according to hosting provider administrative schedules (typically within 30 to 90 days). |
11 Technical & Operational Security
We implement reasonable and appropriate technical safeguards to protect personal information against unauthorized access, accidental loss, alteration, or disclosure:
- Encryption in Transit: All web traffic is transmitted via HTTPS secured with standard Transport Layer Security (TLS/SSL).
- Server Security Headers: Our web server configuration enforces security headers (such as
X-Content-Type-OptionsandX-Frame-Options) to mitigate cross-site framing and MIME-sniffing attacks. - Access Control: Administrative access to email accounts, hosting dashboards, and third-party panels is restricted to authorized personnel.
- Anti-Spam Filtering: Public forms are protected with Google reCAPTCHA to prevent automated bot exploitation.
Please note that no method of transmission over the Internet or electronic storage is completely infallible. While we apply reasonable administrative and technical measures, we cannot guarantee absolute security against unforeseen cyber attacks.
12 Your Privacy & Data Rights
Depending on applicable law and the circumstances of processing, you may have rights relating to access, correction, deletion, withdrawal of consent, and grievance redressal:
- Right of Access: You may request a summary of the personal information we hold regarding your inquiries or project engagements.
- Right to Correction: You may ask us to update or rectify inaccurate or outdated personal details.
- Right to Erasure: You may request deletion of your contact information or published reviews, subject to our statutory recordkeeping obligations.
- Withdrawal of Consent: Where processing relies on your consent (such as newsletter subscriptions), you may withdraw consent at any time by clicking the unsubscribe link or contacting us.
13 Privacy & Grievance Contact
If you have questions, feedback, or wish to exercise your data rights, please contact our designated representative:
We aim to acknowledge privacy and grievance requests promptly and will handle them within the timelines required by applicable law.
14 International Data Processing
Avishkar Studio operates in India. However, because we utilize third-party cloud infrastructure (such as Google Firebase, Formspree, and Mailchimp), data submitted through our website may be routed or stored on server infrastructure located outside India. These providers apply their own global technical security and compliance measures. By using the website, you acknowledge this international transmission.
15 Children's Privacy
Our website and digital development services are intended for commercial businesses, professionals, and general audiences. We do not knowingly solicit or collect personal information from children under the age of 18 without appropriate parental or guardian consent. If we become aware that a child has provided us with personal data without verification, we will take prompt steps to remove such information.
16 Policy Updates & Amendments
We may update this Privacy Policy from time to time to reflect modifications in our service offerings, technical integrations, or legal requirements. When revisions occur, the updated policy will be published on this page with an amended "Last Updated" date at the top. We encourage visitors to review this policy periodically.