Privacy Policy

1. Introduction

This Privacy Policy explains how Power BI Studio ("we", "us", "our") collects, uses, shares and protects information when you use the website https://powerbistudio.com/, including the theme studio, blog, marketplace and related services (together, the "Platform").

The Owner is Mohd Ayan Khan, an individual and sole owner of Power BI Studio, operating from India. This Policy is prepared in line with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023, to the extent applicable. Where visitors from other regions have additional rights under their local law (for example the EU/UK GDPR or California law), we describe them in Section 12.

By using the Platform you agree to the practices described in this Policy.

2. Information We Collect

2.1 Information you provide directly

• Name and contact details such as your email address.
• Account details, including your password (stored only in hashed form).
• Themes, palettes, AI prompts, chat history and other content you create or save.
• Messages you send through the contact form, feedback, reviews or blog comments.
• Billing details required by payment gateways (for example name, email, phone and billing address).

2.2 Information from sign-in providers

If you sign in with Google, Microsoft or LinkedIn, we receive basic profile information that the provider shares with your permission, typically your name, email address and profile picture. We do not receive your password for those services.

2.3 Information collected automatically

• Log data such as IP address, browser type, pages visited, date and time of visits and referring URLs.
• Device information such as device type, operating system and screen size.
• Usage events, for example which features you use and when you export or download files.
• Download records for purchased digital products (such as time, IP address and file), used to deliver your files, enforce download limits and prevent abuse.
• Information collected through cookies and similar technologies, described in Section 5.

2.4 Payment information

Payments are processed by third-party payment gateways such as Razorpay and PayPal (and others as we may integrate). We do not store full card numbers, CVV, UPI PINs or bank credentials. That information is collected and processed directly by the payment gateway under its own privacy policy. We keep a record of your transactions (for example amount, plan or product, status and transaction reference).

2.5 Image uploads and content

When you upload images or provide URLs for color extraction or palette generation, the content is processed to produce your results and may pass through third-party infrastructure and service providers.

3. How We Use Your Information

• To create and manage your account and keep you signed in.
• To provide, operate and improve the Platform, including AI-based theme generation.
• To process orders, memberships, credits and payments, and to deliver purchased digital products.
• To save your themes, palettes, preferences and other content.
• To respond to support requests, feedback and enquiries.
• To measure and analyse usage so we can fix problems and improve the experience.
• To show advertising that helps keep core features free (see Section 6).
• To detect, prevent and respond to fraud, abuse, security incidents and violations of our terms.
• To comply with legal obligations.

We send service emails (for example verification codes, purchase confirmations and security notices). Where permitted by law and where you have not opted out, we may also send occasional marketing emails, which you can unsubscribe from at any time.

4. Legal Basis and Consent

We process personal data on the basis of your consent, to perform our contract with you (for example to provide your account or deliver a purchase), to comply with legal obligations, and for our legitimate interests in operating, securing and improving the Platform. Where the law requires consent, for example for certain cookies or personalised advertising in some regions, we ask for it and you can withdraw it at any time.

5. Cookies and Similar Technologies

Cookies are small text files stored on your device. We and our partners also use local storage, pixels and similar technologies. We use them for these purposes:

• Essential: to keep you signed in, secure your session and remember items in your cart. The Platform does not work properly without these.
• Preferences: to remember settings such as saved palettes and display choices on your device.
• Analytics: to understand how the Platform is used (see Section 7).
• Advertising: to serve and measure ads, including ads based on your interests (see Section 6).

You can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the Platform, such as signing in, from working. Some browsers send a "Do Not Track" signal; there is no common standard for it, so we do not currently respond to it, but you can use the choices in Sections 6 and 7.

6. Advertising (Google AdSense)

We use Google AdSense to show advertisements on parts of the Platform, such as blog articles. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.

Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet. Learn more about how Google uses information from sites that use its services.

You can control personalised advertising:

• Opt out of personalised advertising from Google in Google Ads Settings.
• Opt out of personalised advertising from other participating vendors at www.aboutads.info or, in the EU/UK, www.youronlinechoices.eu.

If you opt out you will still see ads, but they will be less relevant to you. Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent before personalised ads are shown, through a consent message provided by Google, and can change that choice at any time.

We may also show promotions for our own products, such as dashboards from our marketplace. These do not use third-party advertising cookies.

7. Analytics

We use the following analytics services to understand and improve how the Platform is used:

• Google Analytics, which uses cookies to collect information such as pages visited, time on site and approximate location. You can opt out using the Google Analytics Opt-out Browser Add-on.
• Microsoft Clarity, which records how visitors interact with pages (such as clicks, scrolls and mouse movements, including session replays) to help us find usability problems. Clarity masks sensitive input fields by default. See the Microsoft Privacy Statement.
• Our own first-party usage statistics, such as page views and feature usage, stored in our database.

8. How We Share Information

We do not sell your personal information. We share it only as needed with:

• Payment gateways, such as Razorpay and PayPal, to process payments.
• Sign-in providers, such as Google, Microsoft and LinkedIn, when you choose to sign in with them.
• AI service providers that process the prompts and inputs you submit for AI-based theme generation. Please do not include confidential or personal data in prompts.
• Hosting, database, email delivery and other technical providers that run the Platform for us.
• Advertising and analytics partners, as described in Sections 6 and 7.
• Professional advisers, such as lawyers or accountants, where reasonably necessary.

We may also disclose information to comply with law, court orders or lawful requests from government authorities, to enforce our terms, or to protect the rights, property or safety of the Owner, our users or the public. If the Platform is transferred to a new owner, information may be transferred as part of that transaction, subject to this Policy.

9. International Data Transfers

Our service providers may store or process information outside India, for example on servers in Singapore, the United States or the European Union. Where we transfer information internationally, we rely on providers that apply appropriate safeguards and protect it as described in this Policy.

10. Data Security

We use reasonable technical and organisational measures to protect personal information from unauthorised access, alteration, disclosure or destruction, including encrypted connections (HTTPS) and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your personal data, we will notify you and the relevant authorities where the law requires.

11. Data Retention

We keep personal information for as long as your account is active or as needed to provide the Platform, and afterwards only as long as required for legal, tax, accounting, dispute-resolution or fraud-prevention purposes. When you delete your account, we delete or anonymise your personal data within a reasonable time, except for records we must keep by law. Aggregated or anonymised statistics may be kept longer.

12. Your Rights and Choices

Subject to applicable law, you can:

• Access the personal data we hold about you and get a summary of how it is processed.
• Correct inaccurate or incomplete data, or update it from your account settings.
• Request deletion of your account and personal data.
• Withdraw consent you have given, for example for marketing emails or personalised ads.
• Object to or restrict certain processing, and request a portable copy of your data.
• Nominate another person to exercise your rights in case of death or incapacity (India).
• Raise a grievance with us, and if unresolved, with the relevant data protection authority.

EU, UK and Swiss visitors: you have the rights above under the GDPR, including the right to lodge a complaint with your local supervisory authority.

California residents: you have the right to know, delete and correct personal information and to opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising. We do not sell personal information for money. To opt out of personalised ads, use the choices in Section 6 or contact us. We will not discriminate against you for exercising these rights.

To exercise any right, email support@powerbistudio.com. We may need to verify your identity, and we aim to respond within 30 days.

13. Third-Party Links and Services

The Platform links to third-party websites and services, such as YouTube videos, Power BI resources and payment pages. They are governed by their own terms and privacy policies, and we are not responsible for their practices.

14. Children's Privacy

The Platform is not directed at children. It is not intended for anyone under 18 years of age, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

15. Changes to this Privacy Policy

We may update this Policy to reflect changes in law, technology or our services. The latest version will be published on this page with a revised "Last Updated" date. For significant changes we will give additional notice, for example by email or a notice on the Platform. Continued use of the Platform after an update means you accept the revised Policy.

16. Grievance Officer and Contact

For privacy questions, requests or complaints, contact:

Owner & Grievance Officer: Mohd Ayan Khan

Email: support@powerbistudio.com

We will acknowledge grievances promptly and aim to resolve them within 30 days.