Privacy Policy

ArtiSync ("we," "us," "our") operates www.artisync.in, a directory and private-enquiry platform connecting clients with performing and creative artists. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we act as the Data Fiduciary for personal data processed through the platform, and you (as a registered artist or client) are the Data Principal.

We collect only what's needed to operate the platform:

• Account information: email address and password, managed through our authentication provider.
• Profile information: whatever an artist or client chooses to add — name, stage name, bio, category, skills, portfolio media, pricing, location, and (for artists) phone/email/website intended for private sharing.
• Enquiry and message content: the text and attachments exchanged through the enquiry and private-conversation system.
• Technical data: standard request logs (IP address, user agent, timestamps) generated by our hosting infrastructure for security and abuse prevention.

We do not collect payment card details, government ID numbers, or biometric data.

• To create and operate your account, and to display published artist profiles publicly.
• To route enquiries and messages between the client and artist involved.
• To detect and respond to abuse, fraud, or violations of our Terms of Service.
• To maintain and secure the platform (error monitoring, rate limiting, audit logs).

We do not use your data for third-party advertising, and we do not sell or rent personal data to anyone.

An artist's phone number, email, and website are private by default. They are never included in a public profile page, public API response, sitemap, structured data, or search result — this is enforced in our database access rules, not just hidden by the interface.

Contact details are revealed to a specific client only after the artist explicitly approves a contact-sharing request from that client within a conversation, and approval can be revoked afterward. Clients' own contact details follow the same consent-gated mechanism.

• Other users: published profile fields are visible to any visitor. Enquiries, conversations, and messages are visible only to the two people involved, enforced at the database level.
• Service providers: we use Supabase (authentication, database, and file storage) and Vercel (hosting) as infrastructure processors. They process data on our behalf under their own security commitments and do not use it for their own purposes.
• Legal requirements: we may disclose information if required by law, court order, or to protect the rights, safety, or property of ArtiSync, our users, or the public.

We do not share personal data with data brokers or advertising networks.

We retain account and profile data for as long as your account is active. If you delete your account, profile and message data associated with it is removed or anonymized within a reasonable period, except where retention is required for legal, security, or dispute-resolution purposes (e.g., records of a filed report).

Access to enquiries, conversations, and private contact details is restricted at the database level using row-level security policies scoped to the specific users involved — this means access control is enforced by the database itself, not only by application code. Passwords are never stored by us directly; authentication is handled by our identity provider.

No system is perfectly secure, and we can't guarantee absolute security of information transmitted to the platform.

Consistent with the DPDP Act and general data protection principles, you can:

• Access, edit, or delete the information on your profile at any time.
• Unpublish your artist profile, making it private and non-indexable.
• Withdraw consent for a previously approved contact-sharing request.
• Block or report another user from within a conversation.
• Request a copy of your data, or full account deletion, by contacting us (see Section 13).

We use strictly necessary cookies/local storage to keep you signed in and to remember basic preferences. We do not currently use third-party advertising or cross-site tracking cookies. If we add analytics in the future, this policy will be updated before that data collection begins.

ArtiSync is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will remove it.

Our infrastructure providers may process and store data outside India as part of their normal hosting operations. Where this occurs, it is governed by those providers' own security and compliance commitments.

We may update this policy as the product changes. Material changes will be reflected here with an updated "Last updated" date at the top of this page.

For privacy questions, data access/deletion requests, or complaints, use the Report option inside a conversation for user-to-user issues, or reach out via the contact details on our Contact page. A named Grievance Officer, as contemplated under the DPDP Act, will be designated here once one is formally appointed.