Privacy Policy

1. What we collect

Only what the product needs to work. There is no advertising network on this site and no third-party tracking pixels.

• Your email address. It is how you sign in — we email a six-digit code instead of storing a password.
• Your name and profile photo, only if you choose Continue with Google. Google passes us nothing beyond your basic profile and email.
• Whatever you put into a template: photos, messages, names, dates, and any password you set on a published page.
• Order records — which template, the amount, and whether payment succeeded. Card and UPI details go straight to the payment provider and never reach our servers.
• Ordinary technical logs kept by our hosting: IP address, browser, device type and timestamps.

2. Why we hold it

• To sign you in and keep you signed in.
• To build, host and serve the pages you create, and to let you edit them later.
• To take payment, show your orders, and give you access to what you bought.
• To answer support messages.
• To spot abuse — fraudulent orders, spam sign-ins, illegal uploads.
• To meet tax, accounting and other legal obligations.

3. Cookies

We set cookies for one reason: to remember that you are signed in. There are no advertising or analytics cookies. Clearing them signs you out, nothing more.

4. Who else handles your data

We do not sell your personal data and we do not share it for anyone else's marketing. We do rely on a small number of service providers, each of which only receives what it needs:

• Supabase — database, sign-in and file storage.
• Resend — delivers your sign-in codes and other transactional email.
• Google — only if you use Continue with Google, and only to confirm who you are.
• Gravatar (Automattic) — receives a one-way hash of your email address so we can show your profile picture if you have one there.
• Vercel — hosts the site and keeps request logs.
• Our payment provider — processes your payment and holds the card or UPI details we never see.
• Government or law-enforcement bodies, where we are legally required to disclose something.

5. Pages you publish

A page you publish lives at its own unlisted link. It is not listed anywhere on this site and search engines are asked not to index it, but an unlisted link is still a link — anyone you send it to can forward it. Setting a password at publish time is the only real lock, so use one for anything private.

Please do not put anything into a page that you would not want a stranger to read if that link travelled further than you meant it to.

6. How long we keep it

• Your account and the pages you made: until you ask us to delete them.
• Order and payment records: as long as Indian tax and accounting law requires, even after you close your account.
• Sign-in codes: they expire within the hour and are single use.
• Server logs: a short rolling window kept by our hosting provider.

7. Your rights

Under India's Digital Personal Data Protection Act, 2023 you can ask us to show you the data we hold about you, correct anything wrong, delete your account and its contents, or withdraw consent you previously gave. Write to us and we will act on it within a reasonable time, and we will ask you to confirm you are the account holder first.

If you are unhappy with how we handled a request, our grievance contact is hello@urbancutiez.store.

8. Security

Traffic runs over HTTPS, passwords are not stored because sign-in is code-based, and access to the database is restricted. No system is perfect, though. If we ever discover a breach affecting your data we will tell you and the Data Protection Board as the law requires.

9. Age

Urban Cutiez is not intended for children. If you are under 18, use it only with a parent or guardian's involvement, and we will delete an account on request if we learn it belongs to a child.

10. Changes

If we change this policy we will update the date at the top of this page. Significant changes will be flagged by email to the address on your account.

11. Contact

Questions, requests or complaints about your data: hello@urbancutiez.store. We are [Registered business name], based in India.