Privacy Policy
Last Updated: November 1, 2026 • Compliant with US Federal & State Regulations (CCPA/CPRA, CalOPPA) and India Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Overview & Scope
Avelune Studio (“Avelune,” “we,” “us,” or “our”) provides high-end event ticketing, creator bio links, and studio operations technology for independent wellness instructors and studios (“Hosts”) and their clients (“Guests”).
This Privacy Policy explains how we collect, store, process, and protect your information across operations in both the United States and India. We do not sell personal data, display behavioral advertisements, or monetize client profiles.
2. Information We Collect & Retention Periods
- Host Profile Information: Full name, verified email address, studio bio, certifications, social handles, and designated payout credentials (such as verified PayPal Client ID and email). Retained for the lifetime of your active host account.
- Guest Ticketing Information: Full name, email address, workshop pass selections, and digital ticket codes required for admission. Retained for event fulfillment and accounting compliance (up to 7 years for financial records).
- Payment & Financial Information: All card processing and digital wallet checkouts are executed directly through authorized payment processors (PayPal). Avelune Studio never processes, stores, or transmits credit/debit card numbers, CVVs, or bank account credentials.
- Technical & Session Data: Secure HTTP session tokens (
avelune_host_session) and aggregate visitor analytics (views, link clicks) without cross-site tracking.
3. Legal Basis & Purpose of Processing
Under both the US FTC guidelines and the Indian Digital Personal Data Protection Act, 2023 (DPDP Act), we process data strictly for lawful purposes with your consent:
- Issuing secure 6-digit one-time passcodes (OTP) for passwordless host authentication.
- Generating and validating unique workshop ticket passes (
TKT-XXXX-XXXX). - Delivering automated booking confirmations and attendee rosters.
- Detecting fraudulent registrations, brute-force OTP attempts, and unauthorized account access.
4. International Data Transfers (US & India)
Avelune Studio infrastructure utilizes Google Cloud / Firebase Firestore multi-region clusters hosted in the United States and authenticated email delivery networks (Zoho Mail / SMTP). By using our services from India or elsewhere internationally, you acknowledge that your data may be stored and processed on secure cloud servers in the United States in accordance with international data transfer standards.
Under the California Consumer Privacy Act (CCPA/CPRA) and applicable US state laws:
- Right to Know & Access: You may request copies of personal data collected in the preceding 12 months.
- Right to Delete & Correct: You may request deletion or correction of inaccurate personal records.
- No Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising.
- Opt-Out Preference Signals & GPC: We honor Global Privacy Control (GPC) browser signals. We do not engage in cross-site tracking.
- Non-Discrimination: We will never discriminate against you for exercising your privacy rights.
In compliance with the DPDP Act 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:
- Data Principal Rights: You have the right to access summaries of personal data processed, correct inaccuracies, and request complete erasure.
- Right to Nominate: Under Section 14 of the DPDP Act 2023, you have the right to nominate another individual to exercise your privacy rights in the event of death or incapacity.
- Consent Withdrawal: You may withdraw consent for data processing at any time by contacting our Grievance Officer.
7. Statutory Grievance Redressal & Escalation to DPBI (India)
In accordance with Rule 5(9) of the Information Technology Rules, 2011 and Section 12 of the DPDP Act 2023, the contact details of our designated Grievance Officer are:
Designation: Data Grievance Redressal Officer
Platform: Avelune Studio
Email: hello@avelunestudio.com
Acknowledgment Time: Within 48 hours of ticket receipt
Resolution Window: Within 30 days as prescribed by law
Statutory Right of Appeal: If you are not satisfied with the resolution provided by our Grievance Officer, you retain the legal right under the DPDP Act 2023 to register a complaint directly with the Data Protection Board of India (DPBI).
8. Children’s Privacy (COPPA & Indian DPDP)
Our services are not directed to individuals under 18 years of age without parental/guardian consent. We do not knowingly collect personal data from children under 13 (under US COPPA) or minors without verifiable parental authorization.
9. Contact Our Global Privacy Desk
For privacy inquiries, data exports, or account deletion requests, reach our global team at hello@avelunestudio.com.