Privacy policy

What we collect

• Your account: name, email address, and a password if you set one (stored only as a one-way hash, never readable). If you sign in with Google, we receive your name, email address and profile photo from Google, and the sign-in tokens Google issues.
• Sign-in records: for each device you sign in on, the IP address and browser name, so you and the studio can spot sign-ins that were not you.
• Your work: messages, voice notes, files, approvals and project details you or the studio add.
• Invoices and payments: invoice details and the reference you give for a payment (the bank transfer reference, such as the UTR). We never ask for or store card numbers or bank passwords.
• Attendance, for team members only: check-in and check-out times, and your location at the moment you check in, only after you agree to it. There is no background tracking.
• Change history: a record of who changed roles, settings, clients, projects, files, invoices or payments, and when.

Why we use it

• To run the workspace: sign you in, show you your projects, deliver messages and files.
• To provide the architecture services agreed with you, and to bill for them.
• To keep tax and accounting records that Indian law requires.
• To keep the workspace secure and find out what happened when something goes wrong.

We do not sell your data, show advertising, or use tracking or analytics cookies.

Who else handles it

• Cloudflare hosts the workspace, its database and stored files.
• Google, only if you choose to sign in with Google.
• Resend delivers sign-in and account emails.
• Your browser's push service (for example Google, Apple or Mozilla), only if you turn on push notifications. Notifications are encrypted so that service can't read them.

These providers process data only to run their service for us. Cloudflare serves the workspace from data centres around the world; the main database is in the Asia-Pacific region. Your data may therefore be processed outside your country.

Cookies

We use only the cookies the workspace needs to work: one that keeps you signed in and one that remembers whether the side menu is open. Your light or dark theme choice is saved in your browser. None of these are used for tracking.

How long we keep it

• Account details: while your account is open.
• Check-in locations: deleted after 90 days. Attendance times are kept.
• Invoices and payment records: for as long as Indian tax law requires.
• Project messages and files: for as long as the project and any related legal claims need them. Items you delete are hidden straight away. Deleted chat messages can be restored for 4 hours; after that, their attached files are permanently removed from storage.
• Change history: kept, so past changes can always be checked.

Your rights

Wherever you live, you can ask us to show you the personal data we hold about you, correct it, delete it, or give you a copy. Where we rely on your consent, such as location at check-in, you can withdraw it at any time. Some records, such as invoices, may have to be kept by law even if you ask us to delete them; we will tell you if so.

Send requests to the studio. We reply within one month. If you are not satisfied, you can complain to the Data Protection Board of India or, in the EU, to your local data protection authority.

Children

The workspace is not meant for anyone under 18.

Changes to this policy

When this policy changes, we update this page and the date at the top. For significant changes we will also tell you in the workspace.