Privacy notice
In plain English
- We collect as little as we can: order details if you buy, and your messages if you write to us.
- Our tools collect nothing: no telemetry, they never contact us, and your project files never leave your Mac.
- We never see your card or bank details, never sell your data and use no advertising trackers.
- You can ask us to see, correct or delete your data at any time.
- Our products and this site are for adults (18+).
1. Who we are
The data fiduciary (data controller) is Sudo Sukoon, an independent animation studio in Bengaluru, India. For purchases, our Merchant of Record (Gumroad) also handles your payment and order data under its own privacy policy. Privacy questions: sudosukoon@gmail.com.
Complaints: email sudosukoon@gmail.com with "Complaint" in the subject line. We respond to privacy requests and grievances within 30 days.
This notice is written to the standard of India's Digital Personal Data Protection Act, 2023 and its Rules, and meets the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 that apply today. The section on the EU and UK applies to visitors there.
2. What we collect and why
| What | When | Why |
|---|---|---|
| Order data: name, email, country, product, order ID | You buy (shared with us by the Merchant of Record or payment gateway) | To deliver products, give support, process refunds and keep tax records |
| Your state (India only) | You pay in INR, once available | To apply the correct GST place of supply, if we are registered |
| Support emails | You write to us | To answer you and keep a record of complaints |
| Server and network logs (IP address, browser, time) | You visit the site | Security and abuse prevention, kept by our host |
The tools and other products you download collect nothing. They have no telemetry and never contact us, and your project files never leave your Mac.
We never collect passwords, card numbers or bank details; payments are handled entirely by the Merchant of Record or payment gateway. We don't collect sensitive personal data as defined in the SPDI Rules.
Purchases need your order details. We make no automated decisions about you. We only email you about what you bought (receipts, updates, support and, for Chai Round supporters, early episodes), and our emails don't track opens or clicks.
3. Legal basis (EU and UK visitors)
Performance of a contract for purchases, delivery, updates and support; legal obligation for tax records; and legitimate interest for security logs.
4. Who processes it for us
| Processor | Does | Status |
|---|---|---|
| Gumroad | Payments, tax, receipts and file delivery (as Merchant of Record it is also a controller for payment data) | From the first sale |
| Payment gateway for INR | INR and UPI payments | Later phase |
| Email provider | Our support mailbox, and update emails to buyers | From launch |
| Web host and CDN | Serving this website and video files; security logs | From launch |
| Analytics | None today. If added: cookieless, aggregate page counts only | Not in use |
Each processor's name will be listed here before launch. We keep each processor's terms and data-processing agreement on file and give them only what they need.
5. Transfers outside India
Some processors store data in the United States or the European Union. We only use providers that protect personal data with appropriate safeguards, and we'll follow any restrictions the Government of India places on transfers to particular countries.
6. How long we keep it
| Data | Kept for |
|---|---|
| Order records | At least one year after purchase, and longer where tax law requires (to be confirmed with our CA) |
| Support emails and complaints | Up to [to fill: period, e.g. 2 years] after the conversation ends |
| Server logs | One year |
7. Your rights
You can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct, complete or update it;
- erase it, unless we must keep it by law (for example, tax records);
- handle a grievance about how we've processed it;
- let a person you nominate exercise your rights if you die or become incapacitated (India).
If you're in the EU or UK you also have the rights to restrict or object to processing and to data portability. Email sudosukoon@gmail.com from the address you used, with your order ID if you bought something, so we can check it's you; we'll reply within 30 days. EU representative: [to fill: only if our lawyer says one is needed].
You can ask for this notice in English or in any language in the Eighth Schedule to the Constitution of India.
8. Withdrawing consent
Where we rely on your consent, you can withdraw it at any time by emailing us, and we'll act on it promptly. Withdrawing consent is as easy as giving it, and doesn't affect anything already done.
9. Children
This site and our products are for adults (18+). We don't knowingly collect personal data from anyone under 18. If you think a child has given us personal data, tell us and we'll delete it.
10. Security and breaches
The site is served over HTTPS, vendor accounts use two-factor authentication, and access is limited to the people who need it. If a personal data breach affects you, we'll tell you without undue delay, and notify the Data Protection Board of India and any other authority as the law requires.
11. Cookies, storage and analytics
This website sets no cookies and loads no third-party scripts, fonts or trackers. It saves two small preferences in your own browser's storage — light or dark theme, and USD or INR — which never leave your device. If we add analytics, it will be cookieless and aggregate, and we'll list it here with a way to opt out.
12. Complaints
Please contact us first. In India, you may complain to the Data Protection Board of India once it is operational. In the EU or UK, you may complain to your local supervisory authority.
13. Changes
If we change this notice, we'll update the date at the top. If a change affects how we use data you've already given us, we'll email you first.