Privacy Policy

Last updated · 13 May 2026

Introduction

Studiio (operated by Frontier Digital, Mumbai) is a workspace for interior design studios. This policy describes what data we collect, how we use it, and the choices you have. We try to keep it short and concrete — no legal boilerplate that nobody reads.

Data we collect

From you directly when you sign up or use the app:

Your name and email address.
Your studio's name and (optionally) a profile photo or logo.
Project, client, room, BoQ item, vendor, attendance and conversation data that you or your team type into studiio.
Subscription receipts from Apple App Store, Google Play, or Cashfree (transaction ID, plan, period — never card numbers).
Diagnostic data — IP address, device type, browser/OS version, app version — to keep the service running and debug crashes.

Data we don't collect

We do not store credit card or UPI account numbers. Payments are processed entirely by Apple, Google, or Cashfree.
We do not run third-party advertising or analytics trackers inside the authenticated app.
We do not sell, rent, or trade your data with anyone.

How we use your data

To provide the studiio service — store your projects, sync across devices, send invites and notifications you ask for.
To bill you for your subscription and process refunds.
To send transactional email — sign-in OTPs, receipts, dunning notices when a payment fails, weekly studio summaries (if you've opted in).
To investigate security incidents or abuse.

Sharing with third parties

We share the minimum data required with the service providers that make studiio work. We do not sell, rent, or trade personal data to advertisers or data brokers.

Apple Inc. (App Store): billing and subscription state for users who subscribe on iOS. Apple's handling is governed by Apple's privacy policy.
Google LLC (Google Play): billing and subscription state for users who subscribe on Android. Google's handling is governed by Google's privacy policy.
Cashfree Payments India Pvt Ltd: billing for web subscribers. Cashfree's handling is governed by their privacy policy.
Our transactional email provider — to send sign-in OTPs, receipts and notifications.
Our cloud hosting provider in India — to run the database and app servers.

We will disclose data to law enforcement only when we receive a lawful, written request that we believe is valid under Indian law.

Storage and security

All studiio data is encrypted in transit (HTTPS / TLS) and at rest (encrypted Postgres volumes). Any passwords or secrets we hold are hashed with bcrypt — we never see them in plaintext.

We keep backups for 30 days for disaster recovery. When you delete data in the app, it is removed from the live database immediately and purged from backups within 30 days.

Your rights, opt-out and deletion

You can, at any time, and without charge:

Access / export your data — write to [email protected] with the subject "Data export" and we'll email you a JSON archive of everything in your account within 7 days.
Correct your data — most fields (name, studio name, projects, clients, BoQ items, etc.) are editable directly inside the app.
Delete your account and all data — write to [email protected] with the subject "Delete my account" from your studiio sign-in email. We will wipe everything from the live database within 7 days, and from backups within 30 days. Billing records required by Indian tax law (GST invoices, transaction IDs) are retained for the period required by law and then deleted.
Opt out of non-essential email — every non-transactional email has an unsubscribe link in the footer. Transactional email (sign-in OTPs, receipts, dunning, security alerts) cannot be opted out of while your account is active, because they're required to operate the service.
Cancel your subscription — through your Apple ID Account Settings (iOS subscribers), Google Play Account → Subscriptions (Android subscribers), or Settings → Billing on studiio.co.in (web subscribers).

Children

Studiio is a business tool. It is not directed at children under 16, and we do not knowingly collect data from anyone under 16. If you believe a child has signed up, write to us and we'll delete the account.

Changes to this policy

If we make a material change, we'll email account owners at least 14 days before it takes effect. The "Last updated" date at the top will always reflect the current version.

Privacy contact

Privacy questions, data export requests, account deletion requests, and complaints — write to [email protected]. We aim to acknowledge every request within 3 business days and resolve it within 30 days.

Data Controller: Frontier Digital, Mumbai, Maharashtra, India.

See also our Terms of Service for subscription, refund and acceptable-use terms.

Frontier Digital · Mumbai, India