1. Information we collect
- Account data — name, email, phone, password hash, OAuth identifiers.
- Business data — storefront content, products, orders, customer messages.
- Payment data — handled by our payment gateways (Razorpay, Stripe). We store transaction references, not card numbers.
- Usage data — IP, device, browser, pages viewed, feature usage.
- AI inputs — prompts you submit to PanStudio AI tools.
2. How we use it
- To operate the Platform, fulfil orders, and provide support.
- To generate AI drafts using third-party model providers (e.g. Google Gemini).
- To send transactional emails (order confirmations, password resets, receipts).
- To detect fraud, abuse, and security incidents.
- To improve the Platform through anonymised analytics.
3. Legal basis
We process personal data to perform our contract with you, to comply with legal obligations, with your consent for marketing, and for our legitimate interests in running the Platform.
4. Sharing
We share data with:
- Payment gateways — Razorpay, Stripe for processing transactions.
- Shipping partners — Shiprocket for fulfilment.
- Email delivery — Resend for transactional email.
- AI providers — Google Gemini for generating drafts.
- Hosting infrastructure — cloud providers under appropriate data-processing terms.
We do not sell your personal data.
5. Retention
Account data is retained while your account is active and for up to 7 years after closure for tax and legal compliance. Transactional records follow statutory retention periods.
6. Security
We use industry-standard encryption in transit (TLS) and at rest, row-level access controls, encrypted credential storage, and regular security reviews. No system is 100% secure.
7. Your rights
Depending on your jurisdiction you may have the right to access, correct, delete, port, or restrict processing of your data, and to lodge a complaint with a supervisory authority. Email info@panstudio.cloud to exercise these rights.
8. Cookies
We use essential cookies for authentication and analytics cookies to improve the Platform. See our Cookie Policy for details.
9. International transfers
Data may be processed outside your country. We use appropriate safeguards (standard contractual clauses) where required.
10. Children
The Platform is not directed at children under 18 and we do not knowingly collect their data.
11. Changes
We will notify you of material changes by email or in-app banner.
12. Contact
Data Protection contact: info@panstudio.cloud.
Note: This document is provided as a template and does not constitute legal advice. PanStudio recommends reviewing it with qualified counsel before relying on it for binding legal enforcement in your jurisdiction.