Privacy Policy

This policy explains what PlayCloudLabs collects, why, who else handles it, and what you can ask us to do with it. Shubham Maurya (Marathahalli, Bengaluru, Karnataka, India) is responsible for your data, as the data fiduciary under India’s Digital Personal Data Protection Act, 2023.

1. What we collect

• Your account: your name and email address. If you sign up with a password, it is stored hashed by our sign-in provider — we never see it. If you sign in with GitHub or Google, we receive the name and email on that account.
• Your practice: the designs you build, the answers you choose, your scores, the descriptions you write for your own designs, the reviews written for them, and whether you marked a review accurate, with any reason you gave.
• Payments: Razorpay handles your card, UPI or bank details. They never reach us, and we do not store them. We keep the order and payment reference, the plan, the amount and the date.
• Technical: the cookies that keep you signed in, and the basic request logs (such as IP address and browser) our hosting provider keeps for security.

2. How we use it

• To run the service: sign you in, score your designs and write your reviews.
• To give you the access you paid for, and keep a record of the payment.
• To send account emails — confirming your address, resetting your password.
• To prevent fraud and abuse, and enforce the daily limits.
• To answer you when you contact us, and to meet legal and tax obligations.

We do not sell your data, and there is no advertising or ad tracking on the site.

3. Who else handles it

Only the providers the service runs on, each for its own part:

• Supabase — database and sign-in. Your data is stored in its Mumbai region. Their privacy policy.
• Vercel — hosting. Requests may be processed outside India, including in the United States. Their privacy policy.
• Razorpay — payments. Their privacy policy.
• Brevo — sending account emails. Their privacy policy.
• Google — only if you choose to sign in with Google. Their privacy policy.
• GitHub — only if you choose to sign in with GitHub. Their privacy policy.
• An AI model provider — to write reviews, it receives the scenario, your design and any description you wrote. It does not receive your name or email address, so please do not put personal information in a description.
• Authorities — when the law requires us to, and only what it requires.

4. Where your data is

Your account and practice history are stored in India, in Supabase’s Mumbai region. Some providers above — hosting, email, the AI model, and GitHub or Google if you use them — process data outside India, including in the United States, under their own safeguards.

5. Cookies and local storage

We use only the cookies needed to keep you signed in — no advertising or analytics cookies. Your browser’s local storage holds conveniences such as panel sizes and the design you are part-way through; that stays on your device. A design you give a name and save is kept on our servers instead, so it is there on any device you sign in from — you can delete it yourself at any time. Blocking cookies in your browser will sign you out.

6. How long we keep it

We keep your account and practice history while your account exists. When you ask us to delete your account, we do so within 30 days — except payment records, which we keep for as long as tax and accounting law requires.

7. Your rights

You can ask us to:

• show you the personal data we hold about you, and give you a copy of it;
• correct anything in it that is wrong;
• delete it, by closing your account;
• stop using it where you gave consent — which also means closing your account.

Write to us at the address below. We reply within 30 days. Grievance officer: Shubham Maurya, artflowindia@gmail.com.

8. Security

Data travels encrypted, passwords are stored hashed, and access to the database is limited to the server. No system is perfectly secure; if something goes wrong that affects your data, we will tell you.

9. Children

The service is not meant for anyone under 18 without the consent of a parent or guardian. If you believe a child has given us personal data without it, tell us and we will delete it.

10. Changes

We may update this policy. The date at the top shows the latest version, and we will email you about any significant change.

11. Contact

• Name: Shubham Maurya
• Email: artflowindia@gmail.com
• Phone: +91 88517 20358
• Address: Marathahalli, Bengaluru, Karnataka, India