Privacy policy

This policy explains what the Redminer Studios client portal at portal.redminerstudios.com (“the portal”) collects, why, and what you can ask us to do with it. The portal is run by Redminer Studios (“we”), owned by Pratyush Nair. Questions: pratyush@redminerstudios.com.

Who the portal is for

The portal is invite-only. It is used by the studio and by people at client businesses whom the studio has invited by email to see their invoices, documents and shared notes.

What we collect

• Sign-in details from Google. When you sign in with Google we receive your name, email address and profile picture. We never see your Google password. We use your email only to check that you were invited and to identify you in the portal.
• Business records. Invoices, payments and payment confirmations you report (including any remittance proof you upload), contracts, documents and notes that you or the studio add for your business.
• Activity and security logs. What was done in the portal and when (for example viewing or downloading an invoice, or marking it as paid). For actions you take in the portal we also record your IP address, approximate city (derived from the IP address by our hosting provider) and browser type.
• Emails we send you. Recipient, subject and delivery status of invoice, reminder and receipt emails.
• Cookies. A sign-in session cookie, a cookie that remembers which of your businesses you are viewing, and a short-lived cookie used to explain a failed sign-in. We use no analytics, advertising or tracking cookies.

How we use it

To run the portal and our business with you: showing your invoices and documents, sending invoices, reminders and receipts, recording payments, keeping the records Indian tax and accounting law requires, and keeping the portal secure (including investigating misuse). We do not sell personal data, show advertising or build marketing profiles.

Google user data

Google sign-in is used only to confirm who you are. The studio stores its own files (invoices, contracts, documents) in its own Google Drive, with access limited to files the portal itself created; the portal never accesses your Google Drive or any other Google data of yours.

Redminer Studios’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. That data is not used for advertising, is not sold, and is not read by people except with your permission, for security, or where the law requires it.

Who processes it for us

We use a small number of service providers to run the portal, each only for its part: website hosting (Netlify), the database (Supabase), file storage (Google Drive), email delivery (Zoho ZeptoMail or the studio’s own email provider) and sign-in (Google). Some of them store or process data outside India.

How long we keep it

Invoices, payments, contracts and related documents are kept for as long as Indian tax and accounting law requires us to keep business records. Activity logs are kept for as long as the related records are. Backups are deleted after 30 days. If the studio removes your access, you can no longer sign in, but business records about past work are kept for those legal periods.

Your rights

You can ask us to show you the personal data we hold about you, correct it, or delete it where we are not legally required to keep it, and you can withdraw consent to optional processing at any time, including under India’s Digital Personal Data Protection Act, 2023. Write to pratyush@redminerstudios.com; we will respond within 30 days. For grievances, contact Pratyush Nair at the same address.

Security

Sign-in is Google-only and limited to invited email addresses, access is checked on every request, all connections are encrypted, and files are only served to signed-in people allowed to see them.

Children

The portal is for businesses and is not meant for anyone under 18.

Changes

If we change this policy we will update the date above, and tell portal users by email about significant changes.