Who I am
Albatany Studio is run by me, Muhammad Aziz Syah Dani, from Indonesia. This policy explains what data I collect when you use this site, why, and what your rights are.
Data I keep
When you create an account or order, I keep your name, email, phone or WhatsApp number, country, time zone, language and currency preferences, cart and favorites, project brief, order history, proof of payment, deliverables, revision requests, reviews, and project chat messages. Profile photo, bio, gender and date of birth are optional. Only share what you want to.
Passwords and sign in
Passwords are stored as hashes by Supabase Auth, so I can never see them. If you sign in with Google or GitHub, I only receive the basic details you allow, such as your name, email and profile photo. I never receive your Google or GitHub password.
How data is used
Your data is used to run your account, process and deliver orders, take payments, send updates about your project, and keep the site secure. I don't sell your data or use it for advertising.
Payments
Card and PayPal payments are processed by PayPal. Card details are entered on PayPal's own pages and never reach my server. I only receive the payment status, amount, currency and transaction reference. For bank transfers and digital wallets, I keep the proof of payment you upload.
Third parties and where data is processed
This site uses Vercel for hosting, Supabase for the database, sign in and file storage, and PayPal for payments. Cloudflare Turnstile may run a security check on the sign in and sign up forms. These services may process data outside Indonesia, for example in Singapore or India. I use providers that apply encryption and access controls, and the site always uses HTTPS.
Who can see your data
Only you and I, as the studio owner, can see your orders, files and project chat. Database rules make sure other customers can't open your data. Your profile photo only appears publicly on approved reviews, and only if you turn that on.
Cookies
I use cookies that are needed for sign in, language, currency and security. Guest carts and favorites are stored in your browser. Analytics are optional, contain no personal data, and only run after you agree.
How long data is kept
Account data is kept while your account is active. Order and payment records are kept as long as needed for bookkeeping and tax obligations. If you have no orders, you can delete your account yourself at any time from the Account page.
Your rights
You can view and correct your profile, download a copy of your account data, withdraw photo consent, and delete your account from the Account page. For anything else, such as deleting data tied to an order, reach me through the Contact page and I'll reply as soon as I can.
Changes
If this policy changes, the date at the top will be updated. Important changes will be announced on the site before they take effect.