SCULT STUDIO
Legal

Privacy Policy

Last updated: September 21, 2026

SCULT STUDIO (“Studio,” “we,” “us,” or “our”) is the internal operations and client-management platform used by SCULT to run its business — tracking clients, projects, invoices, proposals, and deliverables — and to give SCULT’s own clients a portal to view their own project status, invoices, proposals, and files. This Privacy Policy explains what personal information we collect from the people who sign in to Studio (our team members and our clients), how we use it, and the choices you have.

Studio is not a public consumer product. Access is granted individually, by email, either to a SCULT team member (an “Admin”) or to a named contact at a client organization (a “Client Portal User”). If you are viewing this policy because you were asked to sign in with Google to access Studio, this document applies to you.

1. Information We Collect

We collect information in two ways: what Google shares when you sign in, and what is entered into Studio as part of normal business use.

a. Account information from Google Sign-In. When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We use your email address as your identity: it must already be on an allow-list (as an Admin or as a Client Portal User for a specific client) before Studio grants you access to any data. Signing in with an email that is not on that list does not grant access to anything.

b. Business data entered into Studio. Depending on your role, Studio stores information such as: client and project details, task and timeline data, invoices and payment status, proposals, uploaded files and documents, written or voice feedback left on a project, and — for Admins only — internal income/expense records. This information is entered by Admins or, in limited cases (file uploads, project feedback), by Client Portal Users about their own engagement.

c. Usage and device information. We automatically log basic technical information needed to operate and secure the service, such as sign-in timestamps, IP address, and browser/device type, for security, troubleshooting, and abuse prevention.

2. How We Use Your Information

  • To authenticate you and determine what you’re allowed to see (Admins see internal operations; each Client Portal User sees only their own organization’s data).
  • To operate Studio’s core features: project tracking, invoicing, proposals, file sharing, and client communication.
  • To personalize the interface (showing your name and photo) and to record who created, edited, or actioned a given record for accountability.
  • To keep the service secure — detecting suspicious sign-in activity and enforcing access controls.
  • To communicate with you about your account or about a project you’re associated with, when necessary.

We do not use your personal information for advertising, we do not build behavioral advertising profiles, and we do not sell personal information to third parties.

3. Data Storage and Security

Studio is built on Supabase, a hosted database and authentication provider, which stores our data on secure cloud infrastructure. Access to data within Studio is enforced at the database level via row-level security policies, meaning each account can only retrieve the rows it is explicitly authorized to see — a Client Portal User’s account cannot read another client’s data even if they attempted to, because the database itself denies the request.

Uploaded files (briefs, deliverables, receipts, and similar documents) are stored in a private file storage bucket that is not publicly browsable, and is only reachable by an authenticated, authorized session.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify affected users as required by applicable law.

4. Data Sharing and Third Parties

We share personal information only in the following limited circumstances:

  • Service providers. Supabase (database, authentication, and file storage) and Google (sign-in) process data on our behalf, strictly to provide their respective services to Studio.
  • Within your own organization’s data. If you are an Admin, you may see data across SCULT’s clients as needed to do your job. If you are a Client Portal User, you only ever see your own organization’s projects, invoices, proposals, and files — never another client’s.
  • Legal obligations. We may disclose information if required to do so by law, such as in response to a valid legal request, or to protect the rights, property, or safety of SCULT, our clients, or others.
  • Business transfers. If SCULT is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to the same protections described here.

We do not sell, rent, or trade personal information to third parties for their own marketing purposes.

5. Cookies and Local Storage

Studio uses cookies and browser local storage strictly for functional purposes: keeping you signed in, remembering interface preferences (such as sidebar layout), and maintaining session security. We do not use third-party advertising cookies or cross-site tracking pixels.

6. Data Retention

We retain account and business data for as long as your access to Studio remains active and as needed to operate the service, meet our legal and financial record-keeping obligations (for example, GST invoice records under Indian tax law), and resolve disputes. When an Admin removes your access, your account record is deactivated; some business records you were associated with may be retained where required for the business or legal reasons above, even after your personal access ends.

7. Your Rights and Choices

You may request access to, correction of, or deletion of your personal information by contacting us at the email below. Where you are a Client Portal User, you may also make such a request through your primary contact at SCULT. We will respond within a reasonable time and consistent with applicable law, noting that certain records (such as issued invoices) may need to be retained for legal or financial compliance even after a deletion request.

You may revoke Studio’s access to your Google account at any time from your Google Account permissions page. This will not automatically delete data already stored in Studio, but it will prevent any future sign-in until access is separately restored by an Admin.

8. Children’s Privacy

Studio is a business tool intended for use by working professionals and is not directed at, or knowingly used by, children. We do not knowingly collect personal information from anyone under the age of 18.

9. Where Your Data Is Processed

SCULT is based in India, and Studio’s data is processed and stored using infrastructure that may be located outside your own country. By using Studio, you acknowledge that your information may be transferred to and processed in countries other than your country of residence, which may have different data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the “Last updated” date above when we do. Continued use of Studio after a change becomes effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or how your information is handled, contact us at connect@scult.in.