Skip to content

Privacy Policy

Last updated: August 20, 2026

Studio Ryzen ("we", "us", or "our") operates this platform. This Privacy Policy explains how we collect, use, and protect your information when you use our service. By using Studio Ryzen, you agree to the practices described here.

1. What We Collect

We collect the following categories of information:

  • Account information: Your name, email address, studio name, phone number, and profile details provided during sign-up or onboarding.
  • Client data: Names, phone numbers, email addresses, and booking details of your clients that you enter into the platform. You are responsible for obtaining consent from your clients to store this data.
  • Usage data: Pages visited, features used, session duration, and interactions with the platform to help us improve the product.
  • Message content you send: When you use a WhatsApp share link to message a client (quotes, payment reminders, gallery delivery), that message is opened and sent from your own WhatsApp - we generate the message text, but we do not see delivery or read receipts, since it never passes through our servers.
  • Notification data: If you enable push notifications, we store a device subscription (not tied to your identity beyond your account) so we can alert you about due payments, upcoming shoots, and reminders you set.
  • Payment metadata: Subscription status, billing dates, and payment history. We do not store full card numbers - payment processing is handled by our payment provider.
  • Technical data: IP address, browser type, device type, and operating system for security and analytics purposes.

2. How We Use Your Data

  • To provide and operate the Studio Ryzen platform
  • To generate the WhatsApp messages, quotes, invoices, and contracts you send to your clients
  • To process subscription payments and send billing notifications
  • To personalise your experience based on your studio settings and preferences
  • To send push notifications for reminders, payments, and shoots you've asked to be alerted about
  • To send product updates, feature announcements, and support communications
  • To analyse usage patterns and improve the platform
  • To detect and prevent fraud, abuse, or security incidents
  • To comply with applicable legal obligations

We do not sell your data or your clients' data to third parties.

3. Data Storage & Security

Your data is stored on Supabase infrastructure hosted on AWS in the Asia Pacific (Mumbai) region, keeping your data within India. We use row-level security, encrypted connections (TLS), and access controls to protect your data. We regularly review our security practices to guard against unauthorised access, disclosure, or loss.

4. Third-Party Services

We use the following third-party services to operate the platform:

  • Supabase: Database, authentication, and file storage. Data is stored in the ap-south-1 (Mumbai) AWS region.
  • WhatsApp: WhatsApp messages are opened as pre-filled drafts in your own WhatsApp app or WhatsApp Web for you to review and send in one tap - the message never passes through our servers or any WhatsApp Business API.
  • Google OAuth & Calendar: Optional sign-in with Google, and optional two-way sync with your Google Calendar if you connect it from Settings. We receive your name, email, and (if connected) calendar event data.
  • Payment processor: Subscription billing and payment collection. We share only the minimum necessary data (email, amount) for transaction processing.
  • Web Push: If you enable push notifications, your browser's push service (e.g. Google/Mozilla/Apple's push infrastructure) delivers the notification - we send it the alert text, not any of your client data.

Each third-party service has its own privacy policy governing their data handling.

Google user data and Limited Use

If you connect Google Calendar, Studio Ryzen asks for exactly two permissions and uses them for exactly two things:

  • Managing events this app creates (calendar.events) - so a shoot you book here appears on your Google Calendar, and moves or disappears when you change it here.
  • Reading free/busy times (calendar.events.freebusy) - so a personal appointment on your calendar stops a client booking over it. This returns only which times are busy. It does not reveal the title, guests, location or notes of anything on your calendar, and we never request a permission that would.

Calendar data is used only to provide these features to you. It is never sold, never transferred to anyone else except as needed to provide the feature or where required by law, never used for advertising, and never used to train any model, whether by us or on our behalf. No human at Studio Ryzen reads it, except with your explicit permission for support, or for security or legal reasons.

Studio Ryzen's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect at any time from Calendar → Calendar Sync inside the app, which deletes the stored tokens and the busy dates we cached. You can also revoke access directly from your Google Account permissions page.

5. Cookies & Tracking

We use session cookies and local storage to maintain your login session and preferences. We may use analytics tools to understand aggregate usage patterns. You can disable cookies in your browser settings, but this may affect platform functionality.

6. Data Retention

We retain your account and studio data for as long as your account is active. You can delete your account yourself from Settings, then Account, then Delete account. Deletion takes effect after a 30-day waiting period: your access is locked immediately, your data stays intact and exportable during those 30 days, and you can cancel the deletion at any point in that window by logging in and choosing "Keep my account". Logging in by itself does not cancel a deletion request. After the 30 days, your studio data - clients, bookings, payments, messages, files - is permanently deleted. Records of your billing relationship with us (subscription invoices and payments you made to Studio Ryzen) are retained as required by Indian tax and accounting law. Anonymised aggregate usage statistics may be retained indefinitely for product analytics.

7. Your Rights

You have the following rights over your data:

  • Access: Request a copy of all personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Delete your account and all associated data yourself from Settings, then Account (see section 6 for how the 30-day window works), or ask us to do it for you.
  • Portability: Download a full export of your studio data in JSON format any time from Settings, then Account, then "Download my data".
  • Objection: Object to processing of your data for marketing communications.
  • Withdraw consent: Withdraw any consent you have given, as easily as you gave it. Withdrawal does not undo processing that already happened lawfully, and may mean parts of the service stop working.
  • Nominate someone: Nominate another person to exercise these rights on your behalf if you die or become unable to.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Your Rights Under India's DPDP Act

Under the Digital Personal Data Protection Act, 2023 and the Rules made under it, Studio Ryzen is a Data Fiduciary and you are a Data Principal. The rights in section 7 above are how we give effect to that.

Grievance Officer. If you are unhappy with how we have handled your data or a request about it, write to our Grievance Officer at [email protected] with "Grievance" in the subject line. We will acknowledge it and respond within 30 days. If you are still not satisfied, you may complain to the Data Protection Board of India.

If there is a data breach. We will tell the users affected without delay, describing what happened, what data was involved, what we are doing about it and what you should do. We will also report it to the Data Protection Board of India within 72 hours, as the Rules require.

Your clients' data. When you store your clients' details in Studio Ryzen, you are the Data Fiduciary for that data and we process it on your instructions. You are responsible for telling your clients what you collect and why, and for having a lawful basis to do so. We give you the tools to honour their requests: export, correction and deletion of any client record.

9. Children's Privacy

Studio Ryzen is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect. Continued use of the service after changes take effect constitutes your acceptance of the updated Policy.

11. Contact

Questions about this Privacy Policy? Contact us at [email protected].