Privacy Policy

Hynova Studio is a sole proprietorship owned and operated by Avik Kumar, based in Bengaluru, Karnataka, India ("Hynova", "we", "us", "our"). This Privacy Policy explains how we collect, use, share and protect personal data when you visit hynovastudio.com or engage our services.

We are committed to compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules, and — where relevant to our clients and visitors — the EU/UK GDPR and the California Consumer Privacy Act (CCPA/CPRA).

1. Scope

This policy applies to personal data we process about website visitors, prospects, clients, and contacts. Under the DPDP Act we act as a Data Fiduciary for data we determine the purpose of. For client projects where we process data on a client's instructions, we act as a Data Processor and the client's own privacy terms govern.

2. Information we collect

Information you give us

• Contact and identity details — name, work email, phone/WhatsApp, company.
• The contents of forms, audit requests, enquiries, and messages you send us.
• Information you provide during a project (where you are a client).

Information collected automatically

• Usage and device data via cookies and analytics — pages viewed, referral source, browser, approximate location.
• We use Google Analytics 4, Microsoft Clarity, and may use Meta Pixel and LinkedIn Insight Tag. See our Cookie Policy.

Information from third parties

• Advertising and analytics platforms, and business-data/enrichment sources, where you have interacted with our ads or content.

3. How we use your information

• To respond to enquiries, schedule calls, and deliver an AI Growth Audit.
• To provide, manage and improve our services and website.
• To send relevant updates and marketing where you have consented (you may opt out anytime).
• To comply with legal, tax and regulatory obligations.

4. Legal bases

Under the DPDP Act we rely on your consent, and on certain "legitimate uses" permitted by the Act. Under the GDPR (where applicable) we rely on consent, performance of a contract, our legitimate interests (running and growing our business), and legal obligations.

5. Cookies & tracking

We use essential, analytics and advertising cookies. You can manage these through your browser and the controls described in our Cookie Policy.

6. How we share information

We do not sell your personal data. We share it only with service providers who help us operate, under appropriate safeguards:

Category	Examples
Hosting & infrastructure	Vercel
Analytics	Google Analytics, Microsoft Clarity
Advertising	Meta, Google, LinkedIn
Communication & CRM	Email, WhatsApp, CRM tools
Payments (when enabled)	Razorpay (India), Stripe (international)

We may also disclose data where required by law or to protect our legal rights.

7. International transfers

Some providers process data outside India (including the US/EU). Where we transfer data internationally we take steps to ensure an appropriate level of protection, consistent with applicable law.

8. Data retention

We keep personal data only as long as necessary for the purposes above and to meet legal/business requirements, after which it is deleted or anonymised.

9. Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission is fully secure, so we cannot guarantee absolute security.

10. Your rights

Under India's DPDP Act

• Right to access a summary of your personal data and how it is processed.
• Right to correction, completion, updating and erasure.
• Right to grievance redressal (see contact below).
• Right to nominate another person to exercise your rights in case of death or incapacity.
• Right to withdraw consent at any time.

Under GDPR (EU/UK)

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent; and the right to complain to your supervisory authority.

Under CCPA/CPRA (California)

Right to know, delete, and correct your personal information, and to opt out of "sale" or "sharing" — note we do not sell personal information. We will not discriminate against you for exercising these rights.

11. How to exercise your rights

Email info@hynovastudio.com with your request. We will verify and respond within the timelines required by applicable law.

12. Complaints to the Data Protection Board of India

If you are not satisfied with our handling of your personal data, you may lodge a complaint with the Data Protection Board of India after raising it with us first.

13. Children

Our services are intended for businesses and are not directed at individuals under 18. We do not knowingly collect children's data.

14. Changes

We may update this policy from time to time. The latest version is always available on this page with the "last updated" date above.

15. Grievance / Data Protection contact

Avik Kumar · Proprietor, Hynova Studio
Email: info@hynovastudio.com
WhatsApp: +91 95351 33473
Address: Hynova Studio, #28, 16th Main, 38th Cross Rd, 4th T Block East, Jayanagar, Bengaluru, Karnataka 560041, India

16. Client Platform Data (Meta)

Where a client engages us to manage their Meta advertising, Facebook Pages or Instagram business accounts, the client grants us access to their own Meta business assets. We access and process this data solely to deliver the services contracted by that client. We act as a Data Processor for this data. We do not sell it, do not share it with third parties, and do not use one client’s data for any other client.

Depending on the services a client has contracted, this may include:

• Advertising data — creating, managing and optimising campaigns, ad sets and creatives within the client’s own ad account.
• Performance and insights data — campaign, Page and account metrics retrieved to produce the client’s reports and dashboards.
• Content — posts, stories and creatives we schedule and publish to the client’s Facebook Page and Instagram business account on their behalf.
• Leads — enquiries submitted through the client’s lead forms, passed to the client’s own sales team and CRM.
• Messages and comments — direct messages and comments received by the client’s Page or Instagram account. We access these so enquiries can be answered, routed and followed up on the client’s behalf, including automated replies sent in response to a message a person has sent to the client first (for example, someone who messages a keyword such as “discount” to receive a link or offer). We do not send unsolicited or proactive messages to people who have not contacted the client.
• Audience segments — audiences created within the client’s own ad account for that client’s campaigns.

Where we process messages, comments or leads from people who contact a client, we do so only on that client’s instructions and on their behalf. That data belongs to the client, is used only to respond to and manage that enquiry, and is never used to market to those individuals on behalf of any other business.

We retain client platform data only for as long as the engagement is active, and thereafter only for the period required to meet our legal, tax and contractual obligations, after which it is deleted or anonymised.

Clients may revoke our access at any time from their own Meta Business Settings, and may request deletion of their data by emailing info@hynovastudio.com.

17. Data deletion instructions

To request deletion of data we hold about you or your business:

• Email info@hynovastudio.com from the address associated with your account, using the subject line “Data Deletion Request”.
• If you are a client, you may also remove Hynova Studio’s access to your Meta business assets at any time in Meta Business Settings → Partners.
• We will acknowledge your request and complete the deletion within 30 days, except where we are required by law to retain certain records.