Version 4.0

Privacy Policy

Effective Date: June 8, 2026 | Version 4.0

Note: This policy was written by ExtoArts for operational transparency purposes. It is not a substitute for legal advice. If you have complex privacy law questions, consult a qualified attorney.

1Who We Are

ExtoArts (extoarts.in) is a YouTube-focused creative agency. This Privacy Policy explains how ExtoArts collects, uses, stores, and protects personal information provided by users of our website and client portal.

2Information We Collect

We collect: Contact information (name, email) when you submit a support ticket or editor application; Analytics data (page views, session duration, browser type, approximate location) collected through Google Analytics 4; Technical data (IP address, cookies, browser fingerprint) collected automatically.

3How We Use Information

We use collected information to: provide and improve our services; process orders and communicate about projects; send service-related notifications; analyze website traffic and user behavior to improve the experience; comply with legal obligations; and prevent fraud and abuse.

4Legal Bases for Processing

We process personal data under the following legal bases: Performance of a contract (to fulfill your service order); Legitimate interests (to operate and improve our business); Consent (for analytics cookies and marketing, which you can withdraw at any time); and Legal obligation (to comply with applicable laws).

5Cookies, Local Storage & Analytics

We use: a localStorage key "ea-theme" (to remember your dark/light mode preference); and Google Analytics 4 for traffic analysis (anonymized, with IP masking). You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout. You can clear localStorage at any time through your browser settings.

6Third-Party Service Providers

We share data with: Discord (project communication, order tickets); Google Analytics (anonymized traffic analytics); Payment processors (PayPal, UPI, crypto processors - see their respective privacy policies); iili.io/freeimage.host (image hosting for portfolio and OG images); File transfer services (WeTransfer, Google Drive for footage delivery).

7International Transfers

ExtoArts operates globally. Your data may be processed in countries outside your country of residence, including India, the United States, and the European Union. Where we transfer data internationally, we ensure appropriate safeguards are in place consistent with applicable privacy laws.

8Data Retention & Deletion

We retain your personal data as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time by emailing us. Billing records may be retained for up to 7 years for accounting compliance. Anonymized analytics data is retained as per Google Analytics's retention settings.

9Your Privacy Rights

Depending on your location, you may have the right to: access your personal data; correct inaccurate data; request deletion of your data; object to or restrict processing; and data portability. To exercise these rights, contact us below. We will respond within 30 days.

10CCPA / CPRA Notice (California Residents)

California residents have the right to know what personal information is collected, used, shared, or sold. ExtoArts does not sell personal information. You may request disclosure, deletion, or correction of your personal data by contacting us below. We will not discriminate against you for exercising your privacy rights.

11Children & Minors

ExtoArts services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected data from a child under 13, we will delete it promptly. Users between 13-18 should have parental consent before using our services.

12Security

We implement appropriate technical and organizational security measures including bcrypt password hashing, CSRF token protection, rate limiting, Cloudflare bot protection, and encrypted HTTPS connections. However, no system is perfectly secure, and we cannot guarantee absolute security of your data.

13Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be announced in the ExtoArts Discord server and via the client portal notification system at least 7 days before taking effect. The effective date at the top of this page will always reflect the most recent update.

14Contact

For privacy questions, data requests, or complaints, contact us at support [at] extoarts.in. We aim to respond within 30 days.

Privacy questions? support [at] extoarts.in