Privacy Policy

Ganapati Aarti (ganapatiaarti.com) is operated by Inov8r Labs Inc.. This policy explains what we collect, why, and the choices you have. It is written to meet the GDPR (EU/UK), PIPEDA (Canada), the CCPA/CPRA (California) and India’s DPDPA. Questions: hello@inov8rlabs.com.

• Account: your email address, and if you sign in with Google, the name and profile picture Google shares. We never see your Google password.
• Collections: the names, descriptions, URLs and aarti order you create, and whether each collection is public.
• Usage: pages viewed, language chosen, approximate location (country/region from IP), device and browser type, via Google Analytics (if you allow analytics cookies) and Vercel Web Analytics (cookieless, no personal identifiers).
• Technical: IP address and request logs kept briefly by our hosting and authentication providers for security.

You can read every aarti without an account; we only collect account data if you sign in.

• To provide the Site (contract): sign you in, save and display your collections, show public collections to people you share them with.
• To improve the Site (legitimate interest / consent for analytics cookies): understand which aartis and features are used.
• Security and legal compliance (legitimate interest / legal obligation): prevent abuse, respond to lawful requests.

We do not send marketing email. Sign-in emails are transactional.

We do not sell or share personal data for advertising. We share data only with processors that run the Site:

• Supabase — authentication and database (hosted in the United States).
• Vercel — hosting, edge network and cookieless web analytics.
• Google — Google Analytics (with your consent) and Google Sign-In if you choose it.

What you make public on the Site (public collections, display name on a collection page) is visible to anyone with the link. We may disclose data if required by law or to protect rights and safety.

• Essential: your sign-in session and security (always on).
• Analytics: Google Analytics cookies, only if you allow them. Vercel Web Analytics sets no cookies.
• Preferences: your language choice and cookie choices, stored in your browser’s local storage.

Change your choices any time via Cookie settings or your browser.

• Account and collection data: until you delete your account, then removed from live systems immediately and from backups within 30 days.
• Analytics data: aggregated/anonymised; Google Analytics retention is set to 14 months.
• Provider request logs: typically 7–30 days.

Data is processed in the United States and Canada. Where the GDPR applies, transfers rely on the providers’ Standard Contractual Clauses and equivalent safeguards.

Depending on where you live (GDPR, UK GDPR, PIPEDA, CCPA/CPRA, DPDPA), you may have the right to access, correct, delete, export or restrict the use of your data, to object to processing, to withdraw consent, and to complain to your data-protection authority. Two of these are self-serve:

• Export: My Collections → Download my data gives you a JSON copy of your profile and collections.
• Delete: My Collections → Delete my account removes your account and all collections immediately.

For anything else, email hello@inov8rlabs.com from your account address. We respond within 30 days (45 days for CCPA requests, extendable once where permitted). We will not discriminate against you for exercising your rights.

California residents: we do not sell or share personal information as defined by the CPRA. You can still record a “Do Not Sell or Share” preference under Cookie settings, and it will be honoured if our practices ever change.

The Site is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will delete it.

Data is encrypted in transit (TLS) and at rest by our providers. Access to your collections is enforced in the database with row-level security so only you can change them. No method is perfectly secure; keep your email and Google accounts protected.

We will post any material changes here with a new effective date, and, for significant changes, notify signed-in users by email.

Inov8r Labs Inc. · hello@inov8rlabs.com