ExtoArts Privacy Policy
Effective Date: June 8, 2026 | Version 4.0
ExtoArts (extoarts.in) is a YouTube-focused creative agency. This Privacy Policy explains how ExtoArts collects, uses, stores, and protects personal information provided by users of our website and client portal.
We collect: Contact information (name, email) when you submit a support ticket or editor application; Analytics data (page views, session duration, browser type, approximate location) collected through Google Analytics 4; Technical data (IP address, cookies, browser fingerprint) collected automatically.
We use collected information to: provide and improve our services; process orders and communicate about projects; send service-related notifications; analyze website traffic and user behavior to improve the experience; comply with legal obligations; and prevent fraud and abuse.
We process personal data under the following legal bases: Performance of a contract (to fulfill your service order); Legitimate interests (to operate and improve our business); Consent (for analytics cookies and marketing, which you can withdraw at any time); and Legal obligation (to comply with applicable laws).
We use Google Analytics 4 for traffic analysis (anonymized, with IP masking). You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout. We do not use persistent cookies or localStorage to track preferences or store identifiers.
We share data with: Discord (project communication, order tickets); Google Analytics (anonymized traffic analytics); Payment processors (PayPal, UPI, crypto processors - see their respective privacy policies); iili.io/freeimage.host (image hosting for portfolio and OG images); File transfer services (WeTransfer, Google Drive for footage delivery).
ExtoArts operates globally. Your data may be processed in countries outside your country of residence, including India, the United States, and the European Union. Where we transfer data internationally, we ensure appropriate safeguards are in place consistent with applicable privacy laws.
We retain your personal data as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time by emailing us. Billing records may be retained for up to 7 years for accounting compliance. Anonymized analytics data is retained as per Google Analytics's retention settings.
Depending on your location, you may have the right to: access your personal data; correct inaccurate data; request deletion of your data; object to or restrict processing; and data portability. To exercise these rights, contact us below. We will respond within 30 days.
California residents have the right to know what personal information is collected, used, shared, or sold. ExtoArts does not sell personal information. You may request disclosure, deletion, or correction of your personal data by contacting us below. We will not discriminate against you for exercising your privacy rights.
ExtoArts services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected data from a child under 13, we will delete it promptly. Users between 13-18 should have parental consent before using our services.
We implement appropriate technical and organizational security measures including bcrypt password hashing, CSRF token protection, rate limiting, Cloudflare bot protection, and encrypted HTTPS connections. However, no system is perfectly secure, and we cannot guarantee absolute security of your data.
We may update this Privacy Policy periodically. Material changes will be announced in the ExtoArts Discord server and via the client portal notification system at least 7 days before taking effect. The effective date at the top of this page will always reflect the most recent update.
For privacy questions, data requests, or complaints, contact us at support [at] extoarts.in. We aim to respond within 30 days.
Privacy questions? support [at] extoarts.in