Legal

Privacy Policy

Last updated 6 October 2026

This policy explains how Astral Studios processes personal data. It is published under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. For this purpose, we are the Data Fiduciary.

1. What we collect

Contact details you send us: name, email, phone, company.
Project information you share during scoping and delivery.
Billing details: billing address and GSTIN, for invoicing.
Usage data: IP address, browser, pages visited, collected through essential cookies and privacy-friendly analytics.

We do not knowingly collect data from children under 18. If you build a product for minors with us, we follow your verifiable parental consent process as required by the DPDP Act.

2. Why we use it

To reply to enquiries and prepare proposals.
To deliver, support and invoice projects.
To meet legal duties such as GST and tax record-keeping.
To keep the site secure and understand how it is used.

We process data on the basis of your consent or for legitimate uses permitted under Section 7 of the DPDP Act. We never sell personal data.

3. Sharing

We share data only with service providers who help us operate (email, hosting, accounting, payment gateways), under contract and only as needed, or when required by law or a government authority.

4. Client data we process for you

When we build or maintain systems that hold your customers' data, you are the Data Fiduciary and we act as your Data Processor. We process that data only on your written instructions.

5. Storage and retention

Data is stored on secure servers, which may be located outside India in countries not restricted by the Government of India. We keep enquiry data for up to 2 years and billing records for 8 years as required by tax law, then delete it.

6. Security

We use encryption in transit, access controls, two-factor authentication on internal accounts and regular backups. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as required.

7. Your rights

You may ask to access, correct, update or erase your personal data, withdraw consent, nominate another person to exercise your rights, and raise a grievance. Write to legal@astralstudios.in. We respond within 30 days. If unsatisfied, you may approach the Data Protection Board of India.

8. Cookies

See our Cookie Policy.

9. Grievance Officer

Name of Grievance Officer, Astral Studios, Registered office address, City, State – PIN, India. Email: legal@astralstudios.in. See Grievance Redressal.

10. Changes

We may update this policy. The date at the top shows the latest version.