Privacy Policy

01Who is responsible for your information

NXStudio Lab at nxstudio.in is operated by Niraj Kumar, trading as NXStudio Lab, at Kuba Khurd, Post Sakteshgarh, Chunar Road, District Mirzapur, Uttar Pradesh 231304, India. In this policy, “we”, “us” and “our” refer to this business.

For privacy questions, access or deletion requests, write to [email protected]. This policy covers our website, accounts, purchases, downloads, newsletter and support interactions. Other websites and services have their own privacy notices.

02Information we collect

• Account details: your name, email address, verification status, profile details you provide, and sign-in records. Passwords are stored as hashes, not readable passwords. If you choose Google sign-in, we receive the profile and account information needed to authenticate you.
• Purchases: the products ordered, amount, currency, order and payment references, payment status, invoices, refunds, and the date and version of your checkout agreement. We also hold contact or billing details you supply through available account features.
• Payment details: Razorpay handles payment credentials. Our checkout does not collect or store your complete card number, CVV, UPI PIN or banking password. We receive transaction references, status and payment-method information needed to verify and support orders.
• Support: your name, email, inquiry topic, message and any order reference you send. Contact messages are delivered through our email provider to our support inbox.
• Newsletter: your email, subscription status, confirmation and unsubscribe records, signup source, and consent history. A purchase or contact message does not subscribe you to marketing.
• Technical and security information: IP address, browser/device information, session records, request logs, download/access history and abuse-prevention records. Some security identifiers are hashed.
• Public contributions: ratings, review text and the public name associated with reviews you submit. Avoid including personal or sensitive information in public reviews.
• Browser storage and optional analytics: necessary sign-in/cart data, cookie preferences, and usage information collected by optional analytics and advertising-measurement tags only if you accept them. See the Cookies Policy for details.

03Why we use it

Where a legal basis is required, we rely on the basis applicable to the activity: fulfilling your purchase or requested service, legal obligations, valid consent, or legitimate interests where recognised by the applicable law and balanced against your rights. We do not treat a purchase as consent to unrelated marketing.

• Create and secure accounts, verify email addresses, reset passwords and prevent unauthorised access.
• Process and verify payments, provide downloads, maintain purchase access, issue invoices and handle delivery or refund issues.
• Respond to questions, investigate complaints and send essential account or transaction messages.
• Record newsletter choices and send subscribed updates; measure website use and the performance of our ads, only if you accept optional analytics.
• Detect abuse, protect our products and systems, meet accounting or other legal obligations, and establish or defend legal claims.

04Who receives information

We share relevant information with service providers necessary to operate the studio. These include Razorpay for payment processing, Resend for email delivery, Cloudflare R2 for product-file storage, and our hosting/database providers. Google receives information when you use Google sign-in or when you accept our optional Google Tag Manager integration. Meta (Facebook and Instagram) receives information when you accept it and our Meta Pixel measures visits and purchases from our ads. If you accepted before buying, our server also reports that purchase to Meta through its Conversions API, with your email address and phone number in hashed (one-way encrypted) form, your IP address and browser details, Meta's browser cookies, and the order value and products. This is never done for buyers who rejected or did not accept these cookies. Every order records which campaign or website brought the buyer, without identifiers, so we can measure our own advertising. We may share information with professional advisers or authorities where needed for legal obligations or legitimate claims.

Service providers may process information in countries outside India. Applicable safeguards and provider terms govern that processing; we do not promise that all data stays in India. We do not sell customer information. We do not publish your email address or order details as part of a product review.

05How long information is kept

Account and purchase information is kept as needed to provide your account, verify ownership and support downloads. Transaction, invoice and refund records may need to remain after account closure for accounting, dispute or legal requirements. Security logs and correspondence are kept according to their purpose and operational needs; there is no single retention period for every record.

Unsubscribing stops newsletter marketing but does not automatically erase your subscription history. We retain consent and suppression records to respect your choice and demonstrate it. Deletion requests are reviewed individually; limited records may remain where required by law or necessary for unresolved claims. Backup copies may remain until the relevant backup cycle ends. We will explain applicable exceptions when responding to a request.

06Your choices and requests

Email [email protected] to request access to, correction of, or deletion of your information, or to raise a privacy concern. Depending on applicable law, additional rights may include objection, restriction, portability, withdrawal of consent, grievance redressal or nomination. We honour rights that apply to you and may reasonably verify your identity before disclosing or changing account data.

Use the Unsubscribe page to manage newsletter preferences and Cookie settings to change optional analytics. Withdrawing consent does not affect processing already carried out lawfully. Essential order and security emails may still be sent while you use the service. Deleting an account may affect access to your purchase library; we will explain the consequences before acting on an account-deletion request.

07Security and children

We use access controls, password hashing, payment verification and protected download checks to reduce risk. No internet service can promise absolute security. Please protect your account and never send us card credentials, passwords, private download links or identity documents unless specifically needed and requested through an appropriate process.

Our accounts and checkout are intended for adults aged 18 or over, not for children to register or purchase independently. If you believe a child has supplied personal information, contact us so we can investigate and take appropriate action.

08Updates and concerns

We will update this page when our practices change and use an appropriate notice for material changes. New purposes requiring consent will require a new choice. The date above identifies this version. Contact Niraj Kumar at the email and address below for privacy concerns; this does not prevent you from approaching a competent authority under applicable law.