Privacy Policy
Version 1.0 · Effective [Effective date]
In short: Studio runs on your computer, and we never receive your photos, videos or prompts. We collect only what we need to sell you a licence, deliver it and keep it working: your name, email address and phone number, your order, and basic details of the computers you activate. We do not sell your data, show you ads or track you.
This policy is our notice to you under the Digital Personal Data Protection Act, 2023 and the rules made under it. [Legal name] ("SpaceBlanket", "we") is the Data Fiduciary for the personal data described here. Contact: [Grievance email].
1. What we never receive
Studio works on your computer. We do not receive your projects, photos, videos, music, prompts or the videos Studio makes.
Studio uses your own Claude Code, which sends your instructions and the content it reads to Anthropic to do the work. That is between you and Anthropic, under Anthropic's privacy policy. Optional services you connect yourself, such as HeyGen, handle data under their own policies. Studio switches off the usage telemetry of the HeyGen tools it includes.
2. What we collect, why, and for how long
| Data | Why we need it | How long we keep it |
|---|---|---|
| Name, email address, phone number, entered at checkout | To create your order, email your licence key and receipt, contact you about a payment or delivery problem, give support and handle refunds | Paid orders: as long as your licence exists, then as long as tax and accounting laws require. Checkouts that are never paid: one year |
| Order details: order reference, PhonePe transaction reference, amount, status and times | To match your payment to your licence, keep accounts, meet tax obligations and process refunds | As long as tax and accounting laws require |
| Licence key and its status | To identify and validate your licence | As long as your licence exists |
| Computer details: a device identifier (a one-way code derived from your computer's hardware ID), the computer's name, its operating system, and activation and last check-in times | To keep to the 2-computer limit, keep your licence valid and let you move it between computers | Until you deactivate that computer, or we reset your activations or delete your licence |
| IP address, stored only as a shortened one-way code | To limit repeated requests and prevent misuse of the licence service | Deleted automatically within about 24 hours |
| Technical logs (may include IP address and browser details) | To keep our website and licence service secure and fix problems | A short period kept by our hosting provider, unless needed longer to investigate a security incident |
| Messages you send us | To answer you and keep a record of support and complaints | As long as needed to resolve your request, then as long as needed for the order records above |
We do not collect card, UPI or bank details. You enter those on PhonePe's pages, and PhonePe handles them under its own privacy policy. From PhonePe we receive only the status, amount and reference of your payment. We do not send PhonePe your name, email or phone number.
Our website uses no analytics, advertising or tracking cookies. During checkout it sets one strictly necessary cookie, studio_order, for one day, so that the confirmation page shows your full licence key only in the browser you paid from. The website loads its fonts from Google Fonts, so Google receives your IP address and browser details when the page loads.
3. Why we are allowed to use it
You give us your details to buy Studio, and we use them only for the purposes in the table above (section 7(a) of the Digital Personal Data Protection Act, 2023). We keep order records for longer only where a law requires it. We do not send marketing emails unless you separately ask to receive them, and you can stop them at any time.
If you ask us to stop using your data, we will, except where the law requires us to keep it. Without your contact details and licence records we cannot deliver, activate or support your licence.
4. Who we share it with
We do not sell personal data. We share it only with service providers who process it for us under contract (Data Processors), and only for the purposes above:
- Cloudflare hosts our website, checkout, licence service, database and downloads, and sends the licence email.
- Resend may send the licence email if Cloudflare's email service is unavailable.
- Google (Google Workspace) hosts the order spreadsheet our support team uses (name, email address, phone number, order reference and amount).
- PhonePe processes your payment.
We may also disclose data where the law requires it, for example to tax authorities or under a court order. Some providers may process data outside India. We transfer data abroad only as Indian law permits.
5. How we protect it
Data is sent over encrypted connections, access to it is limited to people who need it, licence checks are cryptographically signed, and IP addresses are stored only as one-way codes. We hold no passwords or payment card data. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.
6. Your rights
You can ask us to:
- give you a summary of the personal data we hold about you and how we use it, and who we have shared it with;
- correct, complete or update it;
- erase it (erasing your licence record ends your licence; we keep only what the law requires);
- stop using it, where we rely on your consent; and
- let a person you nominate exercise these rights if you die or become unable to.
Email [Grievance email] from the address you bought with, or include your order reference so we can confirm it is you. We acknowledge your request within 48 hours and respond within 30 days.
7. Complaints
Our Grievance Officer handles privacy questions and complaints: [Grievance Officer name], [Designation], [Grievance email], [Grievance phone], [Address for correspondence]. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
8. Children
Studio is for adults. You must be 18 or older to buy it, and we do not knowingly collect children's personal data. If you think a child has bought a licence, contact us and we will delete their data.
9. Changes
Each version of this policy has a version number and effective date. If we make a material change, we will email you before it takes effect.