Privacy Policy

ArtMade is a handmade miniature art business run by a solo artist based in India. We sell keychains, fridge magnets, pet portraits, custom portraits, and other handcrafted art pieces directly to customers.

If you have any questions about this policy, contact us at hello@artmade.in.

We only collect what we need to process and deliver your order:

• Name, email, phone number — To confirm your order and send you updates via email or WhatsApp.
• Delivery address — To ship your order to the right place.
• Order details — To fulfil your purchase and maintain our records.
• Reference photos (custom orders only) — If you place a custom portrait order and choose to upload a reference image, it is stored in a private, encrypted storage bucket. Only the artist can access it. It is used solely to create your artwork and deleted after delivery.
• Account information — If you sign in via Google or email magic link, we store your email and a user ID via Supabase Auth. This lets you track your orders. We never see your password — authentication is handled by Google or Supabase.

• Credit card numbers or bank details — payments are handled entirely by Razorpay, a PCI-DSS compliant gateway. We never see or store your card information.
• Advertising tracking cookies — we do not use Google Ads, Facebook Pixel, or any third-party ad trackers.
• Behavioural profiling data — we do not sell or share your data with advertisers.

We use one functional cookie to keep you signed in across sessions. We do not use advertising or analytics cookies. You can disable cookies in your browser settings, but you may need to sign in again on each visit.

We use Vercel Analytics — a privacy-first, cookieless analytics tool — to understand how pages perform. It does not track individual users or store personal information.

Your data is stored on Supabase, a secure cloud database hosted on AWS infrastructure in the US. Supabase is SOC 2 compliant. We use Row Level Security to ensure order data is accessible only to you and to the store admin.

Reference photos are stored in a private Supabase Storage bucket and are not publicly accessible. Access is restricted to the artist.

• Order records — Kept for 3 years for accounting and dispute purposes, then deleted.
• Reference photos — Deleted within 30 days of order delivery.
• Account data — Kept until you request deletion.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to processing of your data
• Receive a copy of your data in a portable format

To exercise any of these rights, email us at hello@artmade.in and we will respond within 30 days.

We use the following third-party services, each with their own privacy policies:

• Razorpay — Payment processing
• Supabase — Database and authentication
• Google (OAuth) — Sign-in provider
• Vercel — Hosting and analytics

ArtMade is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it immediately.

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Continued use of ArtMade after changes constitutes acceptance of the updated policy.