Privacy
Policy.

1. Who operates this site

Tarun Studio is an independent website design, development and management service operated by Tarun. For privacy requests, email jtarunhyd@gmail.com or call +91 90322 73535.

2. Information you choose to provide

• Account: your name and email address. Supabase Auth processes the password you create; Tarun Studio does not receive your plaintext password.
• Project brief: only when you choose to send one: business or project name, industry, audience, website goals, style and colour choices, features, timing, budget, domain or hosting preferences, reference links and notes.
• Contact phone: requested only if you choose a phone call or WhatsApp as your reply method. Email is always available as an alternative.
• Uploads: files you choose to attach, such as images, documents or source code. Do not upload passwords, API keys, payment card information or other credentials.
• Security and service records: Cloudflare Turnstile may process technical signals needed to check for automated abuse. Necessary authentication and hosting logs may also be created by service providers.

Date of birth, account phone, and account-level business or industry fields are not collected. Account creation time is already recorded by Supabase Auth and is not copied into a second profile table.

3. Why the information is used

Name and email create and secure your account. Brief details are used to understand a project, prepare a scope or quote and contact you using the reply method you selected. Files are used only to review the request. Security signals help prevent abuse. Optional analytics is used only after you allow it. We do not sell personal information for advertising.

4. Service providers

The site uses service providers to operate its features:

• Supabase: account authentication, database records and private file storage.
• Cloudflare: site hosting, delivery, bot verification through Turnstile when configured, and optional Web Analytics only after analytics consent.
• Brevo: transactional brief notifications and acknowledgements if email delivery is configured.

These providers process information to provide their services. Their infrastructure locations and retention practices are governed by your project settings and their terms. External project links may take you to separate websites with their own privacy notices.

5. Browser storage, bot checks and analytics

Necessary browser storage keeps your sign-in session and privacy choice working. The site does not use advertising or cross-site marketing cookies. When configured, Cloudflare Turnstile helps protect account creation and project submission from automated abuse. If you choose “Allow analytics”, the Cloudflare Web Analytics beacon may load; if you choose “Only necessary”, or have not chosen analytics, it is not loaded. You can change this choice at any time using Cookie settings.

6. Private briefs and file links

Project briefs are stored with account access controls. Uploaded files are stored in a private bucket. If configured, a notification email to Tarun Studio may contain a signed file link that expires after seven days. The stored file remains until you delete your account or ask for removal.

7. Access, correction and deletion

While signed in, use Delete my account & project data in the footer to permanently remove your Supabase Auth account, website briefs and the uploaded files linked to those briefs. The flow asks you to verify your password, complete a security check and type DELETE. The account and database deletion is performed server-side; it is not only hidden from the page. If the automated deletion cannot safely finish, the site reports that and you can email jtarunhyd@gmail.com from your account email for a verified request.

Deleting an account cannot recall a notification email already delivered to the studio inbox or erase provider security logs and backups immediately. Email us if you want us to remove studio inbox copies. Information required by law or needed to resolve an active dispute may be retained for that limited purpose.

8. Security

The site uses HTTPS hosting, account authentication, private storage and server-side checks for brief submissions. No online service can promise perfect security. Keep your password private and do not place secrets in a brief or upload.

9. Your choices and questions

You can decline analytics and still use the site. You can choose email instead of sharing a phone number. You can request access, correction or deletion by using the account deletion control or writing to jtarunhyd@gmail.com. We may ask you to verify control of the account before acting on a request.

10. Changes and contact

This notice may be updated as the site changes. The latest version will be published here with its update date. For questions or privacy requests, contact jtarunhyd@gmail.com.