Privacy Policy

Genstic (also operating as Genstic Studio) is an independent digital creative studio providing commercial visual production, cinematic motion, bespoke website engineering, and digital content creation for businesses worldwide.

The business is legally operated by Jagajyoti Kar. Creative direction, studio operations, visual production, and technical architecture are founded and led by Subhasis Kar (Founder & Creative Director).

We practice strict data minimization. We only collect personal information that is directly necessary to communicate with you, fulfill your creative commissions, and generate official commercial invoices.

• Contact Information: Your full name, email address, phone/WhatsApp number (optional), and brand/company name when initiating an inquiry or placing an order.
• Project Brief & Specifications: Creative requirements, desired deliverables, moodboards, aesthetic preferences, and timeline goals provided in our inquiry forms.
• Commercial Transaction Details: Order numbers, line items commissioned, amounts paid in INR, payment timestamps, and unique transaction reference IDs generated by our payment gateway.
• Technical Transit Data: Basic HTTP request headers, IP address, and browser User-Agent strings logged transiently by our hosting and CDN edge infrastructure for security, routing, and DDoS mitigation.

To protect your security, our systems are architected so that highly sensitive financial and identity credentials never touch Genstic servers:

Additionally, we do not require or collect government identification numbers (such as Aadhaar or PAN), customer account passwords, or biometric information.

We process your information exclusively for legitimate commercial, operational, and legal purposes:

• Project Delivery: Reviewing your brief, communicating production progress, and delivering final master digital assets.
• Invoicing & Accounting: Generating official commercial PDF invoices and payment receipts for completed orders.
• Payment Verification: Verifying cryptographic HMAC SHA-256 signatures to confirm that payment has been authentically captured prior to entering production.
• Customer Support: Responding to your questions via email, WhatsApp, or phone.
• Fraud Prevention & Legal Compliance: Maintaining commercial audit records required for taxation, dispute resolution, and regulatory compliance under Indian law.

Online payments are processed through Razorpay Software Private Limited. When you click "Pay & Place Order", an authorized gateway order is initialized, and Razorpay's Standard Checkout script opens an encrypted iframe window.

Your payment details are submitted directly to Razorpay's PCI-DSS Level 1 compliant infrastructure. Once payment succeeds, Razorpay returns an authorized Payment ID, Order ID, and cryptographic signature to our server for automated reconciliation.

We partner with specialized technology providers to host our website, maintain databases, and deliver transactional notifications. Each provider processes data pursuant to their applicable data protection standards:

Genstic maintains an uncompromising privacy standard regarding tracking technologies:

Customer information and commercial order records are stored in private, encrypted PostgreSQL databases hosted by Supabase with Row Level Security (RLS) enforcement. Generated commercial invoice PDFs are stored in private cloud storage buckets accessible solely through short-lived authenticated URLs. For technical architecture details, see our Security & Data Protection overview.

Personal data and transaction records are retained for as long as reasonably necessary for creative service delivery, ongoing client assistance, commercial accounting, tax records, fraud prevention, dispute resolution, and compliance with statutory recordkeeping obligations under Indian law.

We believe in full transparency and respect your rights regarding your personal information. Depending on applicable legal standards, you may request:

• Access: Confirmation of whether we hold personal information about you and a copy of those records.
• Correction: Updating or correcting inaccurate or outdated contact details.
• Deletion: Erasure of your personal data where retention is no longer necessary for ongoing projects or statutory accounting and legal defense obligations.

Because we do not operate self-service user accounts, privacy requests are handled directly by our team. Please email our designated privacy contact at privacy@genstic.com with the subject line "Privacy Request".

Genstic delivers digital creative services to clients across multiple countries. By commissioning services, you acknowledge that your information will be processed in India and through global cloud infrastructure providers (such as Supabase, Vercel, and Resend) operating international servers.

Our commercial services and website are intended strictly for business entities, professionals, and individuals who have reached the legal age of majority in their jurisdiction (18 years or older in India) with full legal capacity to enter into binding commercial contracts.

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our designated privacy representative: