Privacy Policy
Effective date: 9 October 2026
1. Who we are
Optra Studio (studio.optracloud.com) is provided by Globussoft Technologies Pvt. Ltd. (CIN U72300CT2012PTC000452), whose registered office is at Globussoft Tower Behind Bank of Baroda, Hi-Tek Hospital Road, Smriti Nagar, Junwani, Bhilai, Dist, Durg, Chhattisgarh 490020, India ("we"). This policy explains:
- what personal data we collect when you use the Studio;
- why we collect it;
- who receives it;
- how long we keep it;
- the rights you have.
Questions and requests: support@optracloud.com. Grievance officer: Sumit Ghosh, support@optracloud.com, Globussoft Tower Behind Bank of Baroda, Hi-Tek Hospital Road, Smriti Nagar, Junwani, Bhilai, Dist, Durg, Chhattisgarh 490020, India.
2. What we collect
2.1 Your account. The Studio has its own sign-in, run for us by Google's Firebase Authentication. You sign in with Google or with a link sent to your email address, and we hold:
- your name, if you give it or Google sends it;
- your email address, verified by Google's sign-in or by the link we send;
- the account identifier the sign-in assigns you;
- if you claim the free tier, your phone number, verified by a one-time code sent to it.
To give the free tier only once per person, the Studio keeps a one-way hash of your phone number, not the number itself. We also keep which version of the terms you accepted, and when.
2.2 Payments. If you subscribe, Stripe or Razorpay takes the payment. We receive and keep your plan, its status, the amounts and the invoices. We never receive your full card or bank details.
2.3 What you put into the Studio. Briefs, scripts, story notes, edits, choices between versions, and photos you upload of cast and places. A photo of a person is personal data about that person. Upload one only with their consent, and with a parent's or guardian's consent for anyone under 18.
2.4 What the Studio makes for you. Pictures, clips, voices, scripts and films, and the findings of our automated checks about them.
2.5 How you use the Studio. For security, support and to keep a record of what happened in each project, we log:
- every request your browser makes to the Studio's server: time, address (without its query string), result, duration, your browser's description and your IP address;
- each page you open, each button you press and each form you send in the Studio;
- each sign-in session: when it began and was last used, your IP address and your browser's description.
2.6 Support. What you write to us, and our replies.
2.7 Cookies. The Studio uses only cookies it needs to work:
- the session cookie that keeps you signed in, which cannot be read by scripts and is sent only over secure connections to the Studio itself;
While you sign in, the sign-in service and the Studio's sign-in page may keep a little in your browser's own storage (for example the email address you typed, so that the link you open can finish signing you in). It stays on your device.
We use no advertising cookies, no analytics cookies, and no third-party trackers.
2.8 Our marketing page. When you visit the Studio's home page, we count the visit for that day under the campaign that brought you (for example a newsletter's link). We keep nothing about you: no IP address, no cookie, no browser details.
3. Why we use it
| Purpose | Data | Basis |
|---|---|---|
| To make your films: plan, write, draw, animate, voice, check and edit | 2.3, 2.4 | the contract with you; your consent where the DPDP Act requires it |
| To run your account, plan and payments | 2.1, 2.2 | the contract; legal duties for tax records |
| To give the free tier once per person | the hash of your phone number | our legitimate interest in preventing abuse; your consent |
| To screen every picture and frame for content the Studio will not make | 2.3, 2.4 | our legal duties and legitimate interests (section 5) |
| To keep the Studio secure and investigate misuse | 2.5 | our legitimate interest; legal duties |
| To answer you | 2.6 | the contract |
| To improve our automated checks, using a case you chose to share | the case: the picture and the check's finding | your consent, which you can withdraw |
| To tell you about the service (changes, billing, safety) | your email | the contract |
| To send you news or offers | your email | only with your consent; you can unsubscribe at any time |
We do not sell your personal data, we do not use it for advertising, and we do not train AI models on your content.
4. Automated decisions
The Studio decides automatically whether a picture or clip goes ahead: its checks read every picture and every frame. They also decide whether the safety screen withholds a picture. These decisions concern your content, not you. If you think a check got it wrong, use "This finding is wrong" or "Ask us", and a person will look at it. A picture withheld under section 10.3 of the Terms (sexual content involving minors) is never shown to you.
5. The safety screen
Every picture the Studio draws is screened by our own models, on our own servers, for content the Studio will not make. A refused picture is never shown to you. We keep it 30 days so that we can review a complaint about the refusal, and then delete it, except where the law requires otherwise. If a picture is withheld because it may involve sexual content and a minor, we keep the record the law requires and may report it to the authorities.
6. Who receives your data
We share personal data only as this policy describes. The providers below process it for us, under contracts that limit their use of it to providing their service.
| Who | What they receive | Why | Where |
|---|---|---|---|
| Anthropic | the text of your brief, script and notes when you use AI writing | to write and improve your script with Claude | United States |
| Stripe | your payment details, plan and amounts (USD subscriptions) | to take payments | United States or India |
| Razorpay | your payment details, plan and amounts (INR subscriptions) | to take payments | India |
| your Google account's name, email and identifier, if you choose Google | to sign you in | United States | |
| Google (Firebase Authentication) | your email address and, if you claim the free tier, your phone number | to sign you in and to verify your phone | United States |
| Cloudflare | requests to the Studio and its media | to deliver the Studio quickly and protect it from attacks | worldwide |
| OptraCloud, a service of Globussoft Technologies Pvt. Ltd. | everything stored on our application server | to host the Studio | India and the United Arab Emirates |
We do not use outside AI services to make or check your pictures, clips or voices: our own models do that on our own servers.
We may also disclose data:
- when the law requires it, or to answer a lawful request from the authorities;
- to protect people from harm;
- to a company that takes over the Studio, which would remain bound by this policy.
7. Where your data is processed
On our servers in India and the United Arab Emirates, on our application server in India and the United Arab Emirates, and by the providers above in the countries shown. When data leaves the country you are in, we protect it as the law requires .
8. How long we keep it
| Data | How long |
|---|---|
| Your account | while it is open, then 90 days after you close it |
| Your projects, uploads and films | until you delete them; 90 days after your account closes |
| A picture refused by the safety screen | 30 days, except as section 5 says |
| Logs of requests, page activity and sign-in sessions | 30 days |
| Payment records and invoices | as tax and company law require 8 years |
| A check case you agreed to share | until you withdraw your consent |
| Support messages | 2 years |
Backups are overwritten within 90 days of a deletion.
9. How we protect it
- A customer's media files are delivered only through links that expire, never at a public address.
- Session tokens and access keys are stored only as one-way hashes.
- Every action on the Studio's server is logged.
- Access to customers' projects inside Optra is limited to what is needed to run the Studio, to answer a request or complaint from you, and to meet a legal duty.
No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.
10. Your rights
You can ask us to:
- give you a summary of your personal data and how we process it;
- correct or complete it;
- delete it;
- withdraw a consent you gave (this does not undo what was done before);
- name someone to exercise your rights if you die or cannot act.
Write to support@optracloud.com. We will answer within 30 days. You can delete projects and close your account yourself in the Studio. If you are not satisfied with our answer, you can contact our grievance officer Sumit Ghosh, support@optracloud.com, Globussoft Tower Behind Bank of Baroda, Hi-Tek Hospital Road, Smriti Nagar, Junwani, Bhilai, Dist, Durg, Chhattisgarh 490020, India, who acknowledges a complaint within 24 hours and resolves it within 15 days, and then the Data Protection Board of India. If the GDPR or UK GDPR applies to you, you also have the rights to object, to restrict processing and to data portability, and to complain to your data protection authority.
11. Children
The Studio is for adults: you must be 18 or over. We do not knowingly collect personal data from children. Photos you upload may show children only if you have their parent's or guardian's consent (section 2.3).
12. Changes to this policy
We will post any change here with its effective date. If a change matters to how we use your data, we will tell you before it takes effect and, where the law requires it, ask for your consent.
13. Contact
Globussoft Technologies Pvt. Ltd. (CIN U72300CT2012PTC000452), whose registered office is at Globussoft Tower Behind Bank of Baroda, Hi-Tek Hospital Road, Smriti Nagar, Junwani, Bhilai, Dist, Durg, Chhattisgarh 490020, India. Privacy: support@optracloud.com. Grievance officer: Sumit Ghosh, support@optracloud.com, Globussoft Tower Behind Bank of Baroda, Hi-Tek Hospital Road, Smriti Nagar, Junwani, Bhilai, Dist, Durg, Chhattisgarh 490020, India.