← ChoreoStudio

Privacy Notice.

Last updated 24 October 2026

Privacy.txt

This notice explains what personal data ChoreoStudio ("we", "us") collects, why, who sees it, how long we keep it, and how you can use your rights under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). It is part of our Terms of Service.

1. Who is responsible for what

  • Studio owners, visitors and people who contact us. For your own data (your account, billing, earlier walkthrough requests, support messages and website visits), we are the Data Fiduciary.
  • Dancers. A studio enters its dancers' details into ChoreoStudio. For that data the studio is the Data Fiduciary and we are its Data Processor: we hold and process it only to run the service for that studio. If you are a dancer, your studio decides what it holds about you and why, so please ask it first. We will help the studio answer you.

2. What we collect and why

  • Earlier walkthrough requests. The website no longer has this form. If you sent one before, we hold your studio name, WhatsApp number and the range of students you gave us, only to contact you about that request. You agreed by ticking a box, and you can opt out any time.
  • Studio owner account. Your name, email, studio name, phone and city, and your sign-in details. If you sign in with Google, we receive your name and email from Google. Why: to give you an account and the service. Passwords are handled by our sign-in provider and are not readable by us.
  • Subscription. Your plan, status and renewal date, and a customer reference from our payment partner. Card or UPI details go to Dodo Payments and are not seen or stored by us.
  • Dancer records entered by a studio. Dancer name and phone number, fees and charges, payments, attendance, class batches, and whether the dancer asked not to be messaged. Why: so the studio can track fees and classes and prepare reminders.
  • Payment notes from dancers. If a dancer tells a studio they have paid, we keep the amount, the date, the method, an optional reference number and an optional screenshot, so the studio can check it. Screenshots can show a name, UPI ID or phone number, so please send one only if you are comfortable.
  • Telegram (only if your studio switches it on). The Telegram chat identifier of a dancer who joined the bot, and what they type to it, such as "paid".
  • Your country (from your network address). When you view prices or start checkout, our host tells us which country your connection appears to be in, so we can show prices near your own currency. We do not store it or link it to you.
  • Technical records. Basic logs kept by our hosting and database providers for security and fixing faults.
  • Website analytics (only if you allow it). See section 7.

We use data only for the purposes above. We do not sell it, and we do not use it for advertising.

3. Why we may use it

We rely on your consent (for example the analytics choice), and on the fact that you gave us the data voluntarily for a stated purpose, such as signing up. You can withdraw consent at any time. It should be as easy to withdraw as it was to give, and doing so does not affect anything done before.

4. Who we share it with

We share data only with the providers we need to run the service, and only for that purpose:

  • Supabase: database and sign-in, in the Mumbai region of India.
  • Vercel: hosting of the website and app.
  • Dodo Payments: subscription billing.
  • Zoho: our support email.
  • Telegram: only if a studio uses the Telegram bot.
  • Microsoft Clarity: website analytics, only if a visitor allows it.

A studio's reminders are sent by the studio from its own WhatsApp or Telegram account, so those services see the message. We may also disclose data if the law or a court requires it. Each studio sees only its own records. Some of our providers may handle data outside India. We transfer data only where the DPDP Act allows.

5. How long we keep it

  • Account and dancer records: while the account is open. When it closes, you can ask for an export for 30 days, and we delete the data within a further 30 days, except what the law requires us to keep.
  • Payment screenshots: removed when the studio decides the claim, and automatically after 30 days if it is still undecided.
  • Earlier walkthrough requests: until you opt out or ask us to delete them.
  • Support emails: for as long as needed to help you and keep a record of it.

6. Your rights

Under the DPDP Act you have the right to:

  • get a summary of the personal data we hold about you and how it is used;
  • ask us to correct, complete or update it;
  • ask us to erase it, when it is no longer needed for the purpose or the law does not require us to keep it;
  • withdraw your consent;
  • have your complaint dealt with; and
  • name another person to exercise these rights for you if you die or cannot do so yourself.

To use any of them, email support@choreostudio.live from the address you signed up with, or use the opt-out link on the opt-out page. We will confirm that it is you, acknowledge your request within 3 working days, and aim to answer within 30 days. If you are a dancer, the studio is responsible for your data, and we will pass your request to it or help it act on it. If we cannot resolve your complaint, you can complain to the Data Protection Board of India.

7. Cookies and analytics

We use only the cookies the site needs to work, such as keeping you signed in. Analytics cookies from Microsoft Clarity, which record how visitors use our pages (for example where they click), are switched off unless you choose "Allow" on the bar that appears. It runs only on our public pages (home, sign-in, privacy and terms), never inside the studio console or on a dancer's private link. You can change your mind at any time: .

8. Children

ChoreoStudio is for studio owners and adult dancers. We do not knowingly collect data from children through our website. If a studio enters data about anyone under 18, it must have the verifiable consent of their parent or lawful guardian, as our Terms require, and must not use ChoreoStudio to track or monitor a child's behaviour or to target advertising at them. If you think a child's data has been added without that consent, tell us and we will act on it.

9. How we protect it

  • Each studio can see only its own records. This is enforced inside the database, not only on the screen.
  • Data is encrypted while it travels, and secret keys stay on our servers, not in your browser.
  • Dancers' private links are stored only in scrambled form, and can be cancelled by the studio.
  • We limit who on our side can reach data, and we keep software and providers up to date.

If a breach affects your personal data, we will tell the affected studio without undue delay and report it to the Data Protection Board and to those affected, as the law requires.

10. Who to contact, and changes

Grievance Officer and data contact: ChoreoStudio Support, support@choreostudio.live. We may update this notice. If a change matters, we will tell studio owners by email or in the app before it applies, and we will ask for consent again where the law requires it. The date at the top shows the latest version.

Privacy · Terms · Contact