← Back to Centrl Studio

Privacy Policy

Last updated: June 2025

1. Introduction

Centrl Studio (“we”, “us”, “our”) is operated by Sajal Ghatpande, a sole proprietor based in Pune, Maharashtra, India. We are committed to protecting the personal data of our Platform users and their students, and to handling all personal information with transparency and care.

This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have over your data when you use the Centrl Studio platform at centrlstudio.com. By using the Platform, you agree to the practices described in this Policy.

2. What Data We Collect

We collect the following categories of personal data:

Account Data

When you register and use the Platform, we collect your name, email address, phone number, and business name. This information is required to create and manage your account.

Billing Data

We collect your chosen payment method details and transaction history for the purpose of processing subscription payments. Payments are handled by Razorpay. We do not store full card numbers or CVV details on our systems — these are processed and stored by Razorpay under their PCI-DSS compliant infrastructure.

Studio Data

This includes all data you upload or input into the Platform about your studio's operations: student and member records, attendance logs, enrollment and plan details, class schedules, and payment history. You control this data entirely.

Usage Data

We collect information about how you use the Platform, including login timestamps, features accessed, actions taken, and session activity. This helps us improve reliability and user experience.

Device and Technical Data

We automatically collect your IP address, browser type and version, device type, and operating system when you access the Platform. This is used for security monitoring and platform diagnostics.

3. How We Use Your Data

We use the data we collect for the following purposes:

  • To create and manage your account and deliver Platform services
  • To process subscription payments and maintain billing records via Razorpay
  • To send transactional emails — such as invoices, account notifications, and password resets — via Resend
  • To send WhatsApp messages on your behalf to your students, such as fee reminders and renewal notifications, using Meta's WhatsApp Business Cloud API
  • To monitor and improve Platform performance, reliability, and security
  • To respond to your support requests and inquiries
  • To comply with applicable Indian legal and regulatory obligations

4. Data We Do Not Sell

Centrl Studio does not sell, rent, lease, or trade your personal data or your students' personal data to any third party for marketing, advertising, or commercial purposes. We share data only with third-party processors who assist us in delivering the Platform services, as described in Section 5 below.

5. Third-Party Data Processors

We work with the following third-party service providers who may process your data on our behalf in order to deliver the Platform:

  • Razorpay — Payment processing. Your payment data is subject to Razorpay's privacy policy and PCI-DSS compliance standards.
  • Supabase — Database hosting and infrastructure. Your data is stored on Supabase servers and encrypted at rest. Supabase operates under ISO 27001 and SOC 2 Type II certifications.
  • Resend — Transactional email delivery. Resend processes your email address and message content for delivery of system-generated emails.
  • Meta / WhatsApp Business API — WhatsApp message delivery on behalf of studio operators. Meta processes message content and recipient phone numbers for the purpose of delivering WhatsApp notifications.
  • Vercel — Platform hosting and edge infrastructure. Your requests to the Platform are processed through Vercel's global network.

Each of these processors operates under contractual obligations that restrict them from using your data for any purpose other than delivering the services described above.

6. Student Data — B2B Data Processing

Centrl Studio is a B2B platform. When you, as a studio operator, upload personal data about your students, clients, or staff, the following applies:

  • You are the data controller with respect to your students' personal data. Centrl Studio acts as a data processor on your behalf.
  • You are solely responsible for obtaining valid consent or establishing a lawful basis for collecting and storing your students' personal data, as required under the Digital Personal Data Protection Act, 2023 and any other applicable law.
  • Centrl Studio does not independently contact your students or use their data for any purpose other than delivering the Platform services you have instructed us to provide.
  • We process your students' data only in accordance with your instructions as reflected through your use of the Platform.

7. Data Retention

  • Active accounts: Your data is retained for the duration of your active subscription.
  • Cancelled accounts: Following account cancellation, your data is retained for 90 days. You may request early deletion by contacting us during this period. After 90 days, account and studio data is permanently deleted.
  • Billing records: Transaction records and invoices are retained for a minimum of 7 years in compliance with Indian tax law requirements, including the GST Act and Income Tax Act.

8. Security

We implement reasonable technical and organizational security measures to protect your data, including:

  • Encryption of data in transit using TLS (Transport Layer Security)
  • Encryption of data at rest in our Supabase-hosted database infrastructure
  • Role-based access controls that restrict data access to authorized personnel only
  • Regular security reviews of platform configuration and access policies

While we take security seriously, no system is completely immune to risk. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access.

9. Your Rights

You have the following rights with respect to your personal data held by Centrl Studio:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right of correction: You may request that we correct inaccurate or incomplete personal data.
  • Right of export: You may export your studio data at any time from within the Platform.
  • Right of deletion: You may request deletion of your personal data, subject to our legal obligations to retain billing records.

To exercise any of these rights, please contact us at support@centrlstudio.com. We will acknowledge your request within 5 business days and respond fully within 15 business days.

10. Cookies

The Platform uses the following types of cookies:

  • Essential cookies: Required for user authentication, session management, and security. These cannot be disabled without breaking Platform functionality.
  • Analytics cookies: We may use Google Analytics or Google Tag Manager to understand how visitors use the marketing website. These analytics cookies do not apply inside the authenticated dashboard. You may opt out of analytics tracking by adjusting your browser settings or using your browser's private/incognito mode.

11. Children's Privacy

The Centrl Studio platform is designed for use by business operators and is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 13. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete that data promptly.

Studio operators who use the Platform to manage students who may be minors are responsible for ensuring that parental or guardian consent has been obtained as required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our data practices, legal requirements, or platform capabilities. We will notify you of material changes via email to your registered address or via an in-app notification prior to the changes taking effect.

Your continued use of the Platform after any updated Policy takes effect constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

13. Contact

For any privacy-related questions, data subject requests, or to report a potential data incident, please contact:

Centrl Studio
Operated by Sajal Ghatpande
Pune, Maharashtra, India
Email: support@centrlstudio.com