Privacy Policy

Organize (“we,” “our,” or “us”) operates the Organize platform — a post-production studio operations and billing system. This Privacy Policy describes what personal data we collect, why, who receives it, how long we keep it and what rights you have. It applies to studio owners and team members who use the platform, to visitors of our website, and to people whose details a studio enters into the platform (such as a studio's clients and artists).

Where a studio enters information about its own clients, artists and contacts, the studio is the data controller for that information and Organize processes it on the studio's behalf. We aim to process personal data in line with applicable privacy law, including the GDPR where it applies.

Account data. Your name, email address, phone number, role within the studio and a hashed version of your password. We never store passwords in plain text.

Studio data.Your studio's name, currency, billing country and subscription status. Subscription payment records hold the amount, plan, date and the payment provider's transaction reference. Card details are entered directly with the payment provider (Razorpay or Stripe) and never reach Organize.

Operational data you enter. Clients and agencies (names, contact names, email addresses, phone numbers, addresses and tax identification numbers such as GSTIN); artists (names, contact details, WhatsApp numbers, rates, working hours and leave); rooms and rates; projects, bookings, quotations, challans, invoices and recorded payments; and any output files you upload. The studio decides what to enter and is responsible for having a lawful basis to share it with us.

Activity records. Organize keeps an audit trail of sign-ins and of actions taken on bookings, challans, invoices and payments, recording which user acted and when. Our hosting provider also keeps standard request logs (IP address, browser type, requested URL and time) for operating and securing the service.

Communications. Anything you send us by email or through support channels.

We do not use analytics or advertising trackers in the platform or on this website, and we do not build profiles of how you use the product.

Contract. Most processing is needed to provide the service you signed up for: running your account, scheduling, invoicing and taking subscription payments.

Legitimate interests. Keeping the service secure, preventing abuse, responding to new sign-ups and fixing problems.

Legal obligation. Keeping records that tax, accounting or other laws require us to keep.

Consent. Where we ask for consent — for example, optional product updates by email — you can withdraw it at any time.

We use personal data to: (a) create and secure your account; (b) run the platform's features — scheduling, projects, clients, quotations, challans, invoices and payments; (c) take and record subscription payments; (d) send transactional messages such as booking confirmations, reminders and invoice notifications to the recipients a studio chooses; (e) diagnose and fix technical problems; (f) meet legal, tax and accounting obligations; and (g) detect and prevent abuse of the service.

Notifications to the Organize team.When a studio signs up and when a user signs in, the Organize team receives a notification containing the user's name, email address, role and studio name (and, at sign-up, phone number). These are sent by email and, where enabled, by WhatsApp through our messaging provider. We use them to welcome new studios and keep an eye on the service.

We do not make automated decisions about you that have legal or similarly significant effects.

We do not sell, rent or trade personal data. We share it only as follows:

Service providers. Companies that host or help us run Organize, each receiving only what its function needs: Vercel (application hosting and file storage), Neon (managed PostgreSQL database), Resend (transactional email), Razorpay and Stripe (subscription payments) and Twilio (WhatsApp messages, only where WhatsApp notifications are enabled). These providers act under their own terms and security programmes. We do not currently publish a formal contractual sub-processor register; contact us if you need details for your own compliance review.

Recipients your studio chooses. When a studio sends a booking confirmation, reminder, challan or invoice, that message goes to the client or artist email address or WhatsApp number the studio entered.

Legal requirements. We may disclose data when required by a valid legal order or applicable law. Where we are legally allowed to, we will tell you first.

Business transfers. If Organize is acquired or merged, personal data may be transferred to the new owner under the same protections described here.

We keep your data for as long as your studio account is active. If your studio account is closed, we delete the studio's data within thirty (30) days of closure, as set out in our Terms of Service, except for records we are legally required to keep (such as subscription payment records for tax and accounting purposes) and copies that remain in our providers' backups for a limited period before they are overwritten.

Deletion is carried out by the Organize team on request; it is not an automated self-service feature at this time. To request deletion or an export of your data, email us at the address below.

Subject to applicable law, you can ask us to:

Access the personal data we hold about you; correct inaccurate data; delete data where we have no continuing reason to keep it; export the data you have given us in a machine-readable form; object to processing based on legitimate interests; or restrict processing while a dispute is resolved.

Email us at the address below. We will respond within thirty (30) days and may ask you to verify your identity first. If the request concerns data a studio entered about you (for example, as a studio's client), we may refer you to that studio, which controls that data.

Organize sets one cookie: a session cookie that keeps you signed in. It is essential to the service and cannot be disabled without losing the ability to sign in. The app also stores your light/dark theme preference in your browser's local storage. We do not use third-party advertising cookies, cross-site tracking or analytics cookies.

Our service providers may store or process data in countries other than the one you are in, including the United States. We rely on those providers' own data protection terms. If you need specific transfer safeguards for your organisation, contact us and we will discuss what we can provide.

We protect personal data with the controls described on our Security page, including encrypted connections, studio-level data isolation, role-based access to financial information and an application audit trail. If we become aware of a breach that affects your personal data, we will notify affected studios without undue delay and within any timeframe required by applicable law.

We may update this Policy from time to time. For material changes we will notify you by email or with a notice in the platform at least fourteen (14) days before they take effect.

For questions, complaints or to exercise your rights, contact:

Organize
admin@organizeapp.org

If you are in the European Economic Area or the United Kingdom and believe we have not addressed your concern, you can complain to your local data protection authority.