Privacy policy
Last updated: [insert date on legal review]
Note from the studio: this is a v1 template. It is not legal advice. A lawyer should review it before we scale.
Wave Studio is a small-batch jewellery studio in Jaipur. This page is a plain-language account of what we collect, why, and who we share it with. If anything here is unclear, write to us at hello@wave-studio.in and we’ll explain.
What we collect
When you make an account, we store your email address (that’s how we send you the magic link to sign in) and your name. When you place an order, we also store the shipping address and phone number you give us — the phone number is used almost entirely by the courier to reach you on the delivery day. Alongside that we keep a record of your orders so you can see them in your account.
What we don’t collect
We do not see or store your card number, UPI ID, CVV or any other payment credentials — Razorpay handles all of that on their side and only tells us whether a payment succeeded. We also don’t run marketing trackers, ad pixels or behavioural analytics on the site, and we don’t build a profile of you across other websites.
What we do with your information
We use what we collect to do the small handful of things a shop actually needs to do: fulfil your order, hand the right details to the courier, send you transactional emails (order confirmation, dispatch note, refund receipts), answer support questions, and get a general sense of what’s working on the site so we can improve it. That’s it.
Third parties we work with
We rely on a small set of trusted services to actually run the shop:
Supabase hosts our database and stores your account and order data. It is encrypted at rest and access is scoped with row-level security policies so an account can only read its own rows.
Resend sends transactional email — sign-in links, order confirmations, dispatch notifications, refund receipts. Your email address is shared with Resend only for the purpose of delivering those messages.
Razorpay processes payments. When you pay, you enter your card or UPI details directly on Razorpay’s secure form; we receive only the confirmation and a reference ID.
Replicate powers our visual search feature. If you upload an image to search the catalogue, we send that image to Replicate long enough to generate a numerical embedding used for similarity matching, and the image itself is discarded straight after. We don’t keep uploaded images and they aren’t tied to your account.
We do not sell your data to anyone, and we don’t share it with advertisers or data brokers. The list above is the whole list.
Cookies
We use two cookies, both strictly necessary. One is a session cookie that keeps you signed in after you use your magic link. The other is a small cart cookie so the items in your shopping bag are still there when you come back. There are no marketing, advertising or analytics cookies on wave-studio.in.
Your rights
In line with India’s Digital Personal Data Protection Act, you have the right to ask for a copy of the data we hold about you, ask us to correct anything that’s wrong, and ask us to delete your account. Send any of those requests to hello@wave-studio.in from the email address on the account and we’ll act on them promptly. If you’re not happy with how we’ve responded, you can escalate to the relevant Indian data protection authority.
How long we keep it
Order history is kept for seven years — this is what Indian tax law and warranty/return trails typically require of a small business. Everything else tied to a deleted account is removed within 90 days of the deletion request, apart from the minimum records we’re required to keep for legal reasons.
How we keep it safe
Data is encrypted at rest inside Supabase and travels over TLS between your device and our servers. Row-level security policies at the database layer mean one account can’t read another’s rows. We keep the surface area small on purpose. That said, no online service is perfectly secure — if something ever does go wrong, we will tell affected customers as soon as we reasonably can.
Changes to this policy
When we update this policy we’ll change the “last updated” date above. For anything significant we’ll also send a note to the email on your account.
Contact
Wave Studio · Jaipur, Rajasthan, India
Email — hello@wave-studio.in
Instagram — @wavestudio.in