What we hold about you.

What we collect

Only what a booking or an enquiry actually needs. We buy no data from anyone, and we sell none to anyone.

• Your name, and the phone number you book with. The number is your identity here — it is why the website and the WhatsApp bot know you are the same person.
• Your email address, if you give one. It is optional, and it is where the confirmation and the GST invoice go.
• The booking itself: the day, the start time, how long, whether you took the equipment package or a camera operator, what you told us you are shooting, roughly how many people are coming, and any notes you added.
• The messages you send our WhatsApp number, and any photos or files you send with them. Those conversations are stored so a half-finished booking can be picked up where it stopped, and so a human can take over from the bot.
• Payment references from Razorpay — the order, payment and refund ids. Your card number, UPI ID and bank details never reach us; they stay with Razorpay.
• A one-time sign-in code — and only its scrambled fingerprint, never the code itself — when you sign in to look at your bookings.

Why we need it

• To show honest availability, and to hold your slot while you pay.
• To take the payment and raise a GST invoice.
• To put the booking into the studio's own working calendar, so the room really is free when you arrive.
• To send you the confirmation, the calendar file, and a message if anything about your booking changes.
• To answer enquiries that arrive by WhatsApp, phone or email.
• To keep the accounts — the invoices and payment records a business is required to keep.

None of this is used to build an advertising profile of you. If we ever want to send you something that is not about a booking you made, we will ask you first.

Who else handles it

Running a booking system means a handful of companies process a part of this for us. Each one only gets the part it needs to do its job.

Razorpay

Takes the payment and sends refunds back. Your card or UPI details go to them and never to us — we keep only the reference ids they hand back.

Meta — WhatsApp Cloud API

Carries the chat in both directions. Anything you send our WhatsApp number passes through Meta's platform, under Meta's own terms as well as this page.

Google Calendar

Every confirmed booking is written into the studio owner's own working calendar, with your name, phone number and booking details on it. That is the calendar the room is genuinely run from, which is why the booking has to be in it.

Supabase

The database everything above is stored in. Hosted in Mumbai (ap-south-1), so your details stay in India.

Vercel

Hosts and serves this website.

Resend

Sends the email confirmations, and the alerts that tell the studio a booking came in.

Meta Pixel

Being added. When it is switched on it measures which ads bring people to this site — see Cookies and measurement below. Until then its script is not loaded at all.

That is the whole list. We do not sell your details, and we do not pass them to anyone else — except where a law or a court order left us no choice, which has never happened.

Cookies and measurement

• A sign-in cookie. When you sign in to see your bookings we set one cookie holding your phone number, signed so it cannot be edited and marked so scripts cannot read it. It lasts 30 days, or until you sign out. It is the only cookie this site sets today.
• The Meta Pixel, once it is switched on. It records that a page was viewed, that someone tapped the WhatsApp button, and that a booking was paid for along with the amount — so Endura can tell which ads actually work. It is off until a pixel ID is configured, and while it is off nothing loads.
• Our own count of what happens in the booking flow — slot chosen, payment link sent, slot unavailable — kept in our own database. That is how the studio sees the demand it is losing. No third party is involved in it.
• There is no Google Analytics here, no advertising cookie of our own, and no session recording.

Block the pixel in your browser, or turn ad personalisation off in Meta's own settings, and this site works exactly the same. Nothing on it is gated behind being measured.

How long we keep it

Invoices and payment records

As long as Indian tax and accounting law requires a business to keep them. This is the one thing a deletion request cannot clear.

Your customer record

Your name, number and email stay until you ask us to delete them.

WhatsApp conversations

Kept while they are useful for support, and deleted on request.

Sign-in codes

Ten minutes. After that they are dead whether they were used or not.

The sign-in cookie

30 days, or the moment you sign out.

Your rights

India's Digital Personal Data Protection Act, 2023 sets out what you can ask of anyone holding your details. We are not going to pretend this page is a legal summary of it — but these are things we will actually do when you ask:

• Tell you what we hold about you, and who we have passed it to.
• Correct anything wrong — a misspelt name, an old number, the wrong email.
• Delete what we hold, apart from the records we are legally required to keep.
• Stop using your details for anything you did not ask for.
• Take a complaint seriously. Write to info@endura.studio first and a human will answer. If we do not put it right, the Act gives you the right to escalate to the Data Protection Board of India.

The honest shape of it: your details sit in one database in Mumbai, reachable by the people who run Endura and by the services listed above. There is no fourth party you have not been told about.

Delete your data

Message us on WhatsApp from the number you booked with, or email info@endura.studio, and say you want your data deleted. It is done within 30 days, usually far sooner. Invoices and payment records we are legally required to keep stay; everything else goes.

Changes to this page

If we add something that handles your details — another payment provider, a measurement tool — this page changes before that thing goes live, and the date at the top moves with it.