Privacy Policy

1. Introduction

Welcome to One Roll Studios LLP ("we," "us," "our"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our products (including AIRankable and future offerings), or engage with our services.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our practices, please do not use our services.

2. Information We Collect

We collect several types of information to provide and improve our services:

2.1 Personal Information You Provide

When you interact with us, you may provide:

• Contact Information: Name, email address, phone number, company name
• Account Information: Username, password, profile details
• Payment Information: Billing details (processed securely by LemonSqueezy, our payment processor)
• Communication Data: Messages, feedback, support inquiries
• Marketing Preferences: Newsletter subscriptions, communication preferences

2.2 Information Collected Automatically

When you use our services, we automatically collect:

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, features used, time spent, click patterns
• Cookies & Tracking: Session cookies, analytics cookies (see our Cookie Policy)
• Location Data: General geographic location based on IP address

2.3 Information from Third Parties

We may receive information from:

• LemonSqueezy: Payment confirmations, transaction details
• Analytics Providers: Google Analytics (GA4) for usage insights
• Email Services: Delivery status, open rates (when implemented)

3. How We Use Your Information

We use your information for the following purposes:

• Provide Services: Deliver products, process transactions, manage accounts
• Improve Experience: Personalize content, enhance features, fix bugs
• Communication: Send updates, newsletters (with your consent), respond to inquiries
• Marketing: Promote new products, services (you can opt-out anytime)
• Analytics: Understand usage patterns, improve website performance
• Security: Detect fraud, prevent abuse, protect user data
• Legal Compliance: Comply with laws, regulations, legal requests

4. Third-Party Services

We work with trusted third-party services that may access your information:

4.1 Payment Processing

LemonSqueezy (our Merchant of Record) processes all payments. They handle credit card information, billing, and tax compliance. We never store your full payment details. See LemonSqueezy's Privacy Policy.

4.2 Database & Hosting

Supabase (US region) hosts our database. Your account data, preferences, and activity logs are stored securely with encryption. See Supabase's Privacy Policy.

4.3 Analytics

Google Analytics (GA4) helps us understand how users interact with our site. This includes page views, session duration, and traffic sources. You can opt-out via our cookie banner. See Google's Privacy Policy.

4.4 Email Services

We plan to use email service providers (e.g., Resend, SendGrid) to send transactional emails, newsletters, and updates. These providers have access to your email address and name.

4.5 Internal Tools

Slack is used internally for notifications (e.g., new contact form submissions). No personal data is shared publicly.

5. Data Sharing & Disclosure

We do NOT sell, rent, or trade your personal information. We only share data when:

• With Your Consent: When you explicitly authorize us
• Service Providers: Third parties helping us operate (payment, hosting, analytics)
• Legal Requirements: To comply with laws, court orders, or government requests
• Business Transfers: In case of merger, acquisition, or asset sale
• Protection: To protect rights, safety, or property of One Roll Studios or others

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: HTTPS/SSL for data transmission, AES encryption for stored data
• Access Controls: Limited access to personal information (need-to-know basis)
• Secure Infrastructure: Supabase's enterprise-grade security, regular backups
• PCI Compliance: Payment security handled by LemonSqueezy (PCI DSS certified)
• Regular Audits: Monitoring for vulnerabilities, security updates

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information as follows:

• Account Data: Kept while your account is active, plus 3 years after closure (for legal, accounting, and dispute resolution purposes)
• Transaction Records: Retained for 3 years (tax compliance, refunds)
• Marketing Data: Until you unsubscribe or request deletion
• Analytics Data: Anonymized after 26 months (GA4 default)

You can request earlier deletion (see Your Rights below), except where we're legally required to retain data.

8. Your Rights

Depending on your location, you have rights regarding your personal information:

8.1 Access & Portability

• Request a copy of your personal data we hold
• Receive data in a structured, machine-readable format

8.2 Correction

• Update inaccurate or incomplete information

8.3 Deletion (Right to Erasure)

• Request deletion of your personal data (subject to legal retention requirements)

8.4 Opt-Out

• Marketing Emails: Unsubscribe via link in emails or contact us
• Cookies: Manage preferences via our cookie banner
• Analytics: Opt-out of Google Analytics tracking

8.5 Restriction & Objection

• Restrict processing of your data
• Object to processing based on legitimate interests

8.6 Withdraw Consent

• If processing is based on consent, you can withdraw it anytime

To Exercise Your Rights: Contact us at legal@onerollstudios.com or support@onerollstudios.com. We'll respond within 30 days.

9. International Data Transfers

One Roll Studios LLP is based in India. Your data may be transferred to and stored in the United States (Supabase servers) and other countries where our service providers operate.

By using our services, you consent to this transfer. We ensure adequate safeguards are in place (e.g., standard contractual clauses, Privacy Shield frameworks where applicable).

10. Compliance with Privacy Laws

10.1 GDPR (European Union)

If you're in the EU/EEA, you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process data based on consent, contract performance, legitimate interests, or legal obligations
• Data Protection Officer: Contact legal@onerollstudios.com
• Supervisory Authority: You can lodge a complaint with your local data protection authority

10.2 CCPA (California)

If you're a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we don't sell data)
• Right to non-discrimination

10.3 India DPDP Act

We comply with India's Digital Personal Data Protection Act (DPDP Act, 2023), ensuring:

• Lawful and transparent data processing
• Purpose limitation (data used only for stated purposes)
• Data minimization (collect only what's necessary)
• Consent mechanisms for sensitive data

11. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience. For detailed information, see our Cookie Policy.

Essential Cookies: Required for site functionality (authentication, security)

Analytics Cookies: Help us understand usage (Google Analytics)

Marketing Cookies: Not currently used (may be added in the future)

You can manage cookie preferences via the banner displayed on your first visit.

12. Children's Privacy

Our services are NOT intended for children under 13 years (or 16 in the EU). We do not knowingly collect personal information from children.

If you believe we've collected data from a child, please contact us immediately at legal@onerollstudios.com. We'll promptly delete it.

13. Third-Party Links

Our website may contain links to third-party sites (e.g., social media, partner tools). We're not responsible for their privacy practices. Please review their policies before sharing information.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements.

Notification: We'll notify you of significant changes via email (if you've provided one) or a prominent notice on our website. Continued use after changes indicates acceptance.

Last Updated: Check the date at the top of this page.

15. Contact Us

For privacy-related questions, concerns, or requests to exercise your rights, contact us:

We aim to respond to all inquiries within 30 days.