Privacy Policy - Chakratones

1. Introduction

This policy explains how chakratones.com collects and handles your personal information when you use our contact form. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

When you message us through our contact form, we collect:

Name: To address you personally in our response.
Email Address: To reply to your inquiry.
Subject: To categorize and prioritize your inquiry.
Message Content: To understand and address your request.
IP Address: For security purposes and rate limiting to prevent abuse of our contact form.

We also automatically collect timestamps (date and time of submission) and may track the status of your inquiry (e.g., new, read, in progress, resolved) for customer service management purposes.

3. How We Use Your Data

We use your information solely to:

Respond to your specific inquiries or support requests.
Provide the services or information you have requested.
Maintain a record of our communication for customer service purposes.
Prevent abuse and spam through rate limiting based on IP address.
Manage and track customer service inquiries for quality assurance.

4. Data Sharing and Third Parties

We do not sell your personal data. However, we use the following third-party services to process and store your information:

Resend (Plus Five Five, Inc.)

Provider: Resend
Purpose: To transmit your contact form message to our inbox and send our replies back to you.
Data Shared: Your name, email address, subject, and message content.
Location: United States
Compliance: Resend maintains its own privacy standards to ensure data security during transmission. You can review Resend's privacy policy at https://resend.com/legal/privacy-policy.

Supabase (Supabase, Inc.)

Provider: Supabase
Purpose: To securely store your contact form submissions in our database for customer service, record-keeping, and quality assurance purposes.
Data Shared: Your name, email address, subject, message content, IP address, submission timestamps, and inquiry status.
Location: United States / European Union (depending on your Supabase project region)
Compliance: Supabase is GDPR compliant and maintains industry-standard security measures including encryption at rest and in transit. You can review Supabase's privacy policy at https://supabase.com/privacy.

5. Legal Basis for Processing

Under GDPR, we process your data based on:

Consent: By submitting the form and checking the privacy policy consent checkbox, you explicitly agree to us using your data to contact you and respond to your inquiry.
Legitimate Interests: To provide customer support, respond to inquiries, prevent abuse, and maintain records for quality assurance purposes.

6. Data Retention

We retain your contact information for a period of 2 years from the date of submission, or until you request deletion, whichever comes first. We may retain data longer if required by law or for legitimate business purposes (e.g., ongoing customer support or legal obligations). After the retention period expires, we will securely delete your personal data from both our database (Supabase) and email records.

You can request deletion at any time by contacting us at hello@chakratones.com. We will process deletion requests within 30 days, subject to any legal obligations to retain certain information.

7. Your Rights

Under GDPR, depending on your location, you have the following rights:

Right of Access: Request a copy of the data we hold about you.
Right to Rectification: Request that we correct or update your personal information.
Right to Erasure ("Right to be Forgotten"): Request that we delete your personal information.
Right to Restrict Processing: Request that we limit how we use your data.
Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
Right to Object: Object to processing of your personal data.
Right to Withdraw Consent: You can withdraw your consent at any time by contacting us.

To exercise any of these rights, please contact us at hello@chakratones.com with:

Your name and email address
The specific right you wish to exercise
Any relevant details or context

We will respond to your request within 30 days. For data deletion requests, we will remove your data from both our database (Supabase) and email records, subject to any legal obligations to retain certain information. If we cannot fulfill your request, we will explain why.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit (HTTPS/TLS)
Encryption of data at rest in our database
Access controls and authentication for database access
Regular security assessments and updates
Secure hosting infrastructure through Supabase

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

9. Contact Us

For any privacy-related questions, concerns, or to exercise your rights under GDPR, please contact us at:

Email: hello@chakratones.com

We are committed to addressing your privacy concerns promptly and transparently.