Privacy
Mashaal Studio Privacy PolicyYour project information and communications are handled carefully.
This privacy policy is the studio's current operating commitment: what we collect, why we keep it, and how you can have it removed.
Data
What information is collected?
Contact information, project descriptions, submitted files and data required for review and execution may be collected.Contact information
Name, email, phone number and messenger handle used to communicate about your project.
Project information
Brief, submitted files, budget, timeline and technical/execution requirements.
Login and session data
One-time SMS codes (OTP) for authentication, and session cookies to keep you signed in to the portal.
Visit data
For a visitor who is not signed in, only page-view counts are kept, with a hashed (irreversible) IP address and the device and browser type; the raw IP is used only for security and rate limiting.
Activity in your account
While you are signed in, the pages you open, the time and scroll on each, the buttons and links you press, your IP address, device, browser, and your browser's language and time zone are recorded so the Mashaal team can help you better and watch over your account. Nothing you type into forms is recorded, nothing is recorded when your browser sends Do Not Track, and these records are kept for at most 120 days.
Use
How is this information used?
Data is used only to deliver your project correctly, communicate with you, improve the site itself and keep the service secure — never sold or used for third-party advertising.Project delivery
Reviewing your brief, estimating, building and delivering the work you commissioned.
Communication and support
Responding to messages, sharing project status and providing post-delivery support.
Platform security
Detecting unauthorized access, preventing OTP abuse and protecting accounts.
Sharing
Who is information shared with?
Your information is never sold. Sharing is limited to what is required to deliver the service or to meet a legal obligation.SMS/email providers
Used only to deliver OTP codes, project notifications or transactional email — with no access to your project content.
Payment processors
For online payments, transactions are processed by the payment gateway; card details are never stored by us.
Legal requirements
The minimum necessary information may be disclosed in response to a valid, lawful request from a competent authority.
Retention
How long is information kept?
Project data is retained as long as needed for support, financial records or legal requirements, then deleted or anonymized.Active accounts
Information is retained for as long as your account or project remains active.
Deletion requests
You may request deletion of your data; items with a legal/financial retention requirement are kept as required by law.
Your rights
Your rights over your data
You can ask what information we hold about you, or request correction or deletion, at any time.Access and correction
Request a copy of your data, or ask us to correct anything inaccurate.
Deletion
Request deletion of data that is no longer needed for an active project or legal obligation.
Contact for these requests
Send the request from the start-project page or email studio@mashaalstudio.com.