Privacy policy

Kalanova gives artists a website that takes bookings. Vischari Solutions LLP, Kochi, India, runs Kalanova and is responsible for your personal data. This policy says what we collect, why, who else sees it, and how you can have it deleted.

What we collect from artists

• Account: your name, email address, and your password, stored only as a one-way hash. If you add a passkey, we store its public key, never your fingerprint or face.
• Your page: the text, prices, questions, photos, audio and video links you add.
• Instagram, if you connect it: your Instagram username and account ID, an access token (stored encrypted), and your latest 12 posts: a copy of each image, the caption (up to 500 characters), the post link and its date. We only read. We never post, comment or message on your behalf.

What we collect from people who contact an artist

• Booking requests: your name, email, phone number if you give it, your message, your answers to the artist's questions, and the dates you pick.
• Collaboration applications: your name, email, message and the links you send.
• Spam protection: a one-way hash of your IP address, so we can limit repeat sending. We do not store the IP address itself with your request.

Our web server also keeps standard access logs (IP address, page and time) for a short period, for security.

How we use it

• To run the artist's page, and show their Instagram posts on it when they connect Instagram.
• To send booking and collaboration details to the artist, and emails about a booking to the person who made it.
• To sign you in, keep your account secure and stop spam.

We do not sell personal data, show ads, or use advertising or analytics trackers.

Who else sees it

• The artist sees the booking requests and applications sent to their page.
• Service providers that run parts of Kalanova for us: DigitalOcean (hosting), Cloudflare (network, domain names and email routing), Brevo (sending email) and Meta (Instagram, only when an artist connects it).
• YouTube: artist pages can show YouTube videos. When you play one, YouTube (Google) may set cookies under its own privacy policy.
• Instagram posts: artist pages can show Instagram posts the artist picked. When you scroll to them, your browser loads Instagram's own code, and Instagram (Meta) may set cookies under its own privacy policy.

Cookies

We use only the cookies Kalanova needs to work: a session cookie that keeps you signed in, and a security cookie that protects forms. No advertising or tracking cookies.

How long we keep it

• Account and page data: until the artist closes their page or asks us to delete it.
• Booking requests and applications: as long as the artist's page exists, unless the artist or you ask us to delete them.
• Instagram data: until the artist disconnects Instagram or removes Kalanova from Instagram. Then we delete the posts, images and token straight away.

Delete your data

See how to delete your data, including your Instagram data.

Your rights

You can ask to see, correct or delete the personal data we hold about you, under applicable law, including India's Digital Personal Data Protection Act, 2023. Write to [email protected]. We reply within 30 days.

Security

Every page uses HTTPS. Passwords are hashed and Instagram tokens are encrypted. Each artist's data sits in its own separate database.

Children

Kalanova is not for people under 18.

Changes

If we change this policy, we update the date at the top. If a change affects you materially, we tell artists by email first.

Contact

Vischari Solutions LLP, Kochi, Kerala, India. [email protected]