Privacy Policy

AZpirations Services, trading as @ttrangi Arts & Studio™ ("we", "us"), is the Data Fiduciary for personal data collected through attrangistudio.com. Registered address: C-4/250, Gyan Khand 1, Indirapuram, Ghaziabad 201014, Uttar Pradesh, India.

This policy explains what we collect, why, what we do with it, and what you can require of us. We have tried to write it so you can actually read it.

1. Our commitment in one paragraph

We collect the minimum we need to sell you a toy, deliver it, and obey tax law. We do not sell your personal data. We do not build advertising profiles on you. Your data is stored on servers in India. You can ask us what we hold about you, ask us to correct it, and ask us to erase it.

2. What we collect

When you buy something

• Name, delivery address, email, phone number
• Order contents, amounts, invoice records
• Payment status and a gateway reference. We never receive or store your full card number, CVV, UPI PIN or netbanking credentials — those go directly to our payment gateway

When you create an account

• Email address, and authentication data (we support one-time email codes and Google sign-in; where you enable two-factor authentication, the factor's configuration)

When you join our waitlist or newsletter

• Email address, and where you told us you heard about us

When you contribute a story

• The submission itself, your chosen attribution name, and contact details so we can reach you about it

Automatically, when you browse

• Basic technical data: IP address, browser and device type, pages visited, and error diagnostics
• We use this to keep the site working and secure, and to understand roughly which pages are useful. We do not use it to identify you personally

3. Children

We do not knowingly collect personal data from anyone under 18, and accounts are restricted to adults. We make products children love, and we expect adults to buy them. If you believe a child has given us personal data, write to Ashish Jaiswal, Proprietor — attrangi.ideas@gmail.com and we will delete it promptly.

4. Why we process your data, and on what basis

We ask for consent in clear terms, for a stated purpose, and you may withdraw it as easily as you gave it. Withdrawing consent does not affect processing already carried out, and we may still need to keep records the law requires us to keep.

5. Who we share it with

We share only what is necessary, only with parties who need it to do a job for us:

• Payment gateway — to process your payment and handle refunds
• Courier / logistics partner — your name, address and phone, to deliver your parcel
• Email service — to send transactional email
• Hosting and database (Supabase, Google Cloud) — to run the site
• Error monitoring — technical diagnostics, which may incidentally include an IP address
• Our accountant / tax authorities — invoice and transaction records, as law requires

We do not sell your personal data, and we do not share it for anyone else's advertising.

We may disclose data where legally compelled — a court order, a lawful authority request, or to establish or defend a legal claim.

6. Where your data lives

Our database and file storage are hosted in India (Mumbai region). Some service providers we use may process limited data outside India; where that happens we rely on contractual safeguards and on the transfer being permitted under applicable law.

7. How long we keep it

• Order, invoice and tax records: as long as tax and company law requires (typically several years) — we cannot delete these on request while that obligation runs
• Account data: while your account is open, and a short period after closure
• Waitlist / marketing email: until you unsubscribe
• Story submissions: for as long as the story is published, and thereafter as needed for the licence in our Terms
• Technical logs: a short retention period, then deleted or aggregated

8. Your rights

Under the DPDP Act you may:

• Access — ask for a summary of the personal data we hold about you and what we do with it
• Correct — have inaccurate or incomplete data corrected, updated or completed
• Erase — ask us to delete your data, where we are not legally required to keep it
• Withdraw consent — at any time, for anything we do on the basis of consent
• Nominate — nominate another person to exercise your rights if you die or become incapacitated
• Grievance redressal — complain to us first, and escalate to the Data Protection Board of India if we do not resolve it

To exercise any of these, write to Ashish Jaiswal, Proprietor — attrangi.ideas@gmail.com. We will respond within the period required by law. We may need to verify your identity first — that protection exists for you.

You also have a duty under the Act not to make false or frivolous requests, and to give accurate information about yourself.

9. Security

We protect your data with access controls, encryption in transit, row-level database security, and two-factor authentication on staff accounts with access to customer data. Staff access is limited to those who need it.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the Data Protection Board as required.

10. Cookies and similar technology

We use cookies that are necessary for the site to function — keeping you signed in, remembering your cart and your language. We also use limited analytics to understand which pages are used. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser, but parts of the site will stop working.

11. Automated decisions and AI

We do not make automated decisions that have a legal or similarly significant effect on you.

We do use AI tools to help draft and translate story content. Where a published story or translation was AI-assisted, we say so on the page, and a human approves everything before it is published. AI is not used to process your personal data for profiling.

12. Changes

We will post any updated version here with a new effective date. Where a change materially affects how we use your data, we will tell you.

13. Complaints

Contact our Grievance Officer — see Contact & Grievance Redressal. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

14. Language

Published in English; the English version governs.