Privacy policy

Who we are

Cry Me Art sells personalised star maps as digital prints, to individuals and to print businesses. We are the data controller (a “data fiduciary” under India’s Digital Personal Data Protection Act, 2023) for your account and order information, under that Act and, for people in the UK and EU, the UK GDPR and EU GDPR. For anything about your data, email [email protected].

Brand

Cry Me Art

Legal name

Tech Vinya

Business type

Sole proprietorship

Registered address

Kurla Kainthi, PO ghaighat, kasauli, Himachal Pradesh 173229, India

Email

[email protected]

If you are a business and enter your own customer’s details into a design — their names, a date, a place, a message — you decide what is collected and why, so you are the controller for that information and we process it on your behalf, only to produce and re-deliver the file you ordered.

What we collect

When you create an account

• Your email address and name — to sign you in by email link and to show your past orders. If you sign in with Google, we also receive your Google profile name and picture.
• A session cookie — keeps you signed in. It is strictly necessary and contains no tracking data.

When you order

• Your email address — to send your order confirmation and download link.
• The design details — the date, time, location, names, title and message entered for the order. These are what the file is rendered from, so we have to store them.
• Order and payment metadata — the amount, currency, and a payment reference. We never see or store your card number.

When you browse

• A region cookie. When you first visit, we detect your country to show prices in the right currency and store that choice in a cookie so you do not see the wrong currency on your next visit. It contains a region code such as us or uk and nothing else.
• A design draft. While you are using the editor, your in-progress design is saved in your own browser’s local storage so you do not lose it on a refresh. It never leaves your device unless you place an order.

• Google Analytics. We use Google Analytics to understand how the site is used — which pages are visited, roughly where visitors come from, and which device and browser they use — so we can improve it. It does not receive your name, email address or design details. If you are in the UK, the EEA or Switzerland, analytics cookies are off by default and Google receives only anonymous, cookie-free measurements. Elsewhere, Google sets analytics cookies (_ga, _ga_*) that remember a random identifier for your browser. You can block them in your browser settings or with Google’s opt-out add-on.

We do not use advertising cookies or advertising pixels, and we never share your information with advertisers.

Who processes your data

We use a small number of processors, each for one specific job:

• Dodo Payments — payment processing and sales-tax handling, as our reseller and Merchant of Record. Card details go directly to Dodo Payments and never reach our servers.
• Resend — transactional email. Receives your email address to deliver sign-in links, order confirmations and download links.
• Mapbox — place search in the editor. Receives the place names you type, to return coordinates.
• Google — website analytics (Google Analytics), and sign-in if you choose to sign in with Google.
• Cloudinary — image hosting for design artwork and any image you upload to a design.
• Our hosting and database providers — which store the order record itself.

We do not sell your data, and we do not share it with anyone for marketing purposes.

Why we are allowed to hold it

• Performance of a contract — your account, order details and design content. We cannot produce or deliver your file without them.
• Legal obligation — transaction records retained for tax and accounting purposes.
• Legitimate interests — fraud prevention, and keeping a record of orders so we can honour the 30-day guarantee on the refunds page.

How long we keep it

• Order records — retained for seven years, as required for tax records.
• Design content (date, location, names, title and message) — kept with the order so the file can be re-downloaded or corrected under the guarantee. Ask us to delete it sooner and we will.
• Your account — until you ask us to delete it.
• The region cookie — one year, or until you clear your browser data.
• Google Analytics data — analytics cookies last up to two years; Google keeps the analytics data for up to 14 months.
• Editor drafts — stored only in your browser; clearing site data removes them immediately.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, or restrict what we do with it. Email [email protected] and we will respond within 30 days. You can also nominate someone to exercise these rights on your behalf.

One limit worth stating plainly: we cannot delete the transaction records we are legally required to retain for tax purposes. We can delete everything else, including design content and your account, as soon as you ask.

If you are unhappy with how we have handled your data, contact our grievance officer, Suraj Kumar, at [email protected]. You also have the right to complain to your data protection regulator — in India, the Data Protection Board of India; in the UK, the Information Commissioner’s Office at ico.org.uk; in the EU, your national supervisory authority.

International transfers

We operate from India and our service providers run servers in other countries, including the United States and the European Union. Your data may be processed in those countries, with safeguards such as the providers’ standard contractual clauses.

Children

This site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided us with personal information, email us and we will delete it.

Changes to this policy

If we change how we handle data we will update this page and the date at the top. Material changes affecting existing orders will be emailed to the address on the order.