Privacy Policy

MishoraStudio is an independent software studio (Rajeev Ranjan, Ahmedabad, India) that builds and sells native iOS, macOS, and Android apps, and takes on freelance app development work. This policy explains what personal data we collect through www.mishorastudio.com and our apps, why, and what rights you have over it. If you have questions this policy doesn't answer, email mishorastudio@gmail.com.

• Account data: when you register for a customer account, we collect your email address and (optionally) name, bio, website, and location via Supabase Auth.
• Order & payment data: product purchased, amount, currency, and Razorpay payment/order identifiers. We never see or store your card, UPI, or bank details — those are collected and processed directly by Razorpay, a PCI-DSS-compliant payment processor.
• License keys & download activity: for products that require a license key, we generate and store one tied to your order. We log download counts, timestamps, and IP address for each download to enforce per-purchase limits and prevent abuse — raw download tokens are never stored, only a one-way SHA-256 hash of each token.
• Reviews & testimonials: rating, title, and text you submit for a product you've purchased, or a studio testimonial submitted via an invite link.
• Freelance inquiries: name, email, company, phone (optional), and project details submitted via our hire form.
• Contact form: name, email, and message content, submitted voluntarily via our contact form.
• Technical & error data: if the site or an app encounters an error, Sentry may capture the error message, stack trace, and basic browser/device information to help us diagnose and fix it.
• Analytics: aggregated usage data (pages visited, time on site, referring source, approximate location derived from IP) via Google Analytics 4.
• Anti-abuse data: to prevent spam and fraudulent submissions, we temporarily record a hash of your IP address and email when you submit a public form (contact, inquiry) and check it against rate limits. We also use Cloudflare Turnstile, a privacy-preserving bot-detection challenge, on these forms.

• Account data: to authenticate you and grant access to apps you've purchased.
• Order & payment data: to process purchases, issue download tokens and license keys, send receipts, and handle refunds.
• Freelance inquiries and contact submissions: to respond to your enquiry. We do not use these to send unsolicited marketing.
• Purchase-related communications: if you've purchased a product, we may occasionally email you about updates, fixes, or news relevant to that specific product. These are tied to a real purchase, not sold or shared with a third-party marketing list. To stop receiving them, email us and we'll remove you.
• Technical & error data: solely to identify and fix bugs. We do not use error reports for marketing or profiling.
• Analytics data: in aggregate, to understand how visitors use the site and to improve it. We do not use analytics to build individual user profiles.

We do not sell or rent your personal information to third parties, and we do not share it with third parties for their own marketing purposes.

Where required by law (for example, under the EU/UK GDPR), we process your data on one of these bases: your consent (e.g. analytics cookies, marketing emails), performance of a contract (e.g. processing an order you placed), or our legitimate interest (e.g. fraud prevention, keeping the service secure). Where we rely on consent, you can withdraw it at any time — for analytics, use the opt-out described in Section 6; for purchase-related emails, contact us; for account data, delete your account or ask us to delete it (Section 8). Withdrawing consent doesn't affect the lawfulness of anything already done based on it.

We use browser cookies from Supabase Auth to keep you signed in, and from Google Analytics to measure site traffic. We also use your browser's localStorage (not a cookie, but similar in purpose) to remember your theme preference — this never leaves your device and isn't sent to us. Analytics cookies don't contain personally identifiable information. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on, or block cookies entirely in your browser settings (this may affect sign-in).

• Account data: retained while your account is active. If you ask us to delete your account, we delete your profile data; order records are kept afterward as required for tax and accounting purposes (typically several years under Indian tax law), with personal details minimized where possible.
• Contact & inquiry submissions: retained in our email inbox indefinitely unless you ask us to delete them, since they're the only record we have of the conversation.
• Anti-abuse hashes (IP/email hash for rate limiting): retained for a rolling short window (on the order of hours), then discarded automatically.
• Error reports (Sentry): retained per Sentry's own default retention (typically 90 days), then deleted.
• Analytics (Google Analytics): retained for 26 months per Google's default settings.

To request deletion of your personal data, or to ask what we hold about you, email mishorastudio@gmail.com. We'll respond within a reasonable time, subject to our obligation to retain order records for tax purposes.

We use the following third-party services to run this site and our business. Each processes data under its own privacy policy, linked below:

• Supabase: hosts our database, authentication, and file storage. See their privacy policy.
• Razorpay: processes payments. See their privacy policy.
• Resend: sends transactional email (order confirmations, download links, contact/inquiry notifications). See their privacy policy.
• Cloudflare: provides our DNS, CDN, and Turnstile bot-protection on forms. See Cloudflare's privacy policy.
• Google Analytics: provides website analytics. See Google's privacy policy.
• Sentry: captures error reports to help us fix bugs. See Sentry's privacy policy.
• Vercel: hosts this website. See Vercel's privacy policy.

Each of these providers only receives the data necessary for the function they perform for us, and none are permitted to use it for their own advertising purposes.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing — under India's Digital Personal Data Protection Act (DPDP Act) and, for visitors in the EU/UK, the GDPR. To exercise any of these rights, email mishorastudio@gmail.com with your request. We will respond within a reasonable time, subject to our obligation to retain order records for tax purposes. If you're unsatisfied with our response, you may lodge a complaint with your local data protection authority.

This site and our apps are not directed at children, and we do not knowingly collect personal data from anyone under 13 (or the minimum age required by your local law). If you believe a child has provided us personal data, contact us and we'll delete it.

We use industry-standard measures to protect your data: passwords and payment details are never handled by our own servers (authentication is delegated to Supabase Auth, payments to Razorpay); download tokens are stored only as one-way hashes; and access to our database is protected by row-level security policies scoped to each user's own data. No method of transmission or storage is 100% secure, but we take reasonable steps appropriate to the sensitivity of the data involved.

This policy covers the MishoraStudio website and account system. Each app we publish links back to this same policy from its App Store, Google Play, and in-app listings, unless a specific app requires additional disclosures — in which case those are noted on that app's page within this website.

We may update this policy from time to time to reflect changes in our practices or for legal reasons. Material changes will be reflected by an updated "last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance of the revised policy.

Questions about this policy or how we handle your data? Email mishorastudio@gmail.com.