Spin'A'Cloud™ is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights under the Digital Personal Data Protection Act 2023 (DPDPA) and other applicable Indian laws.

1. Who We Are

Spin'A'Cloud™ is operated by Shirish Productions (operating as Spin'A'Cloud™), based in Belgaum (Belagavi), Karnataka, India. We act as the Data Fiduciary in respect of personal data collected through our website and Portal. For privacy-related queries, contact our designated Privacy Contact at mail@spinacloud.com.

2. What Personal Data We Collect

2.1 Data You Provide Directly

Account registration: full name, email address, phone number, and password.
Billing information: name, GST number, billing address, and payment method details (processed via our PCI-DSS compliant payment gateway; we do not store full card numbers).
Support queries: any information you include in communications with our support team.
KYC information: if required for regulatory compliance, identity documentation.

2.2 Data Collected Automatically

Usage data: pages visited on our website and Portal, features used, time and duration of sessions.
Technical data: IP address, browser type and version, device type, operating system, and referring URLs.
Server logs: access logs generated by your use of hosted services on our infrastructure.
Cookies and similar technologies: as described in our Cookie Policy.

2.3 Data From Third Parties

We may receive limited personal data from payment gateways (transaction status, masked card details) and from identity verification services where applicable.

3. How We Use Your Personal Data

We use your personal data for the following purposes and on the following legal bases:

Providing and managing your account and Services - necessary for the performance of your contract with us.
Processing payments and issuing invoices - necessary for contractual performance and legal compliance (GST obligations under Indian tax law).
Sending transactional communications (account confirmations, payment receipts, service alerts, maintenance notifications) - necessary for contractual performance.
Sending marketing communications about new features, plans, or offers - based on your consent, which you may withdraw at any time by clicking 'Unsubscribe' in any email.
Improving our services through usage analytics - based on our legitimate interest in providing a better service.
Complying with legal obligations, responding to lawful requests from government or regulatory authorities.
Detecting, preventing, and responding to fraud, security incidents, and abuse.

4. Data Storage and Security

4.1 Storage Location

Your personal data and the content you host on Spin'A'Cloud™ is stored in data centres located within India in secure Indian data centres. We do not transfer your personal data outside India except where strictly necessary for payment processing or legal compliance, and in such cases we ensure adequate protections are in place.

4.2 Security Measures

We implement appropriate technical and organisational measures to protect your personal data, including SSL/TLS encryption in transit, encrypted storage for sensitive data, access controls limiting data access to authorised personnel only, regular security assessments, and DDoS protection infrastructure.

4.3 Data Breach

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify you and the relevant authorities as required under applicable Indian law, including the DPDPA.

5. How Long We Keep Your Data

Account data: retained for the duration of your account and for 3 years after account closure, for legal and dispute resolution purposes.
Billing and invoicing records: retained for 8 years to comply with Indian accounting and tax law (Companies Act 2013, GST law).
Server logs: retained for up to 90 days.
Support communications: retained for 2 years after the resolution of the query.
Marketing consent records: retained until you withdraw consent plus 3 years.

When data is no longer required, we delete it securely or anonymise it.

6. Sharing Your Personal Data

We do not sell your personal data. We share it only in the following circumstances:

Service providers: third parties who help us deliver services (payment gateways such as Razorpay, infrastructure providers, email delivery services). These parties are bound by data processing agreements and may only process your data for the purposes we specify.
Legal compliance: where required by Indian law, court order, or government authority.
Business transfers: in the event of a merger, acquisition, or sale of our business, your data may be transferred to the successor entity, subject to equivalent privacy protections.
With your consent: for any other purpose you explicitly agree to.

7. Your Rights Under the DPDPA

Under the Digital Personal Data Protection Act 2023, you have the following rights:

Right to access: you can request details of the personal data we hold about you.
Right to correction: you can request that we correct inaccurate or incomplete data.
Right to erasure: you can request deletion of your personal data, subject to our legal obligations to retain certain records.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to grievance redressal: you have the right to raise a grievance with us, which we will address within 30 days.

To exercise any of these rights, contact us at mail@spinacloud.com. We may need to verify your identity before processing your request.

8. Children's Privacy

Spin'A'Cloud™'s services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us at mail@spinacloud.com and we will delete it promptly.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal data.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with a revised effective date. For material changes, we will notify you by email. Your continued use of our Services after the effective date constitutes acceptance of the revised Policy.

11. Contact and Grievance Officer

If you have any questions, concerns, or complaints about how we handle your personal data, please contact:

Privacy Contact / Grievance Officer — Spin'A'Cloud™

Shirish Productions (operating as Spin'A'Cloud™)

Address: CTS No. 3439/1A and 3439/2A, 4th Floor, MORE Plaza, College Road, Above Arena Animation Belagavi, Karnataka – 590001

Phone: +91 810-5631-983

Email: mail@spinacloud.com

We will acknowledge your query within 48 hours and resolve it within 30 days.

Privacy Policy