Legal

Privacy Notice

Version 1.0 — Effective 1 January 2025 · DPDP Act 2023 + Rules 2025 compliant

Who we are

Think Source Create ("TSC", "we", "us") is an India-based design concierge operated by [Legal entity name TBD]. We connect founders and SMBs with independent designers for creative project work. Contact: privacy@thinksourcecreate.in

What personal data we collect

Purpose	Data collected	Legal basis
Waitlist / Contact form	Name, email address, message content	Consent (active opt-in)
Account registration (founders)	Email, password (hashed by Supabase), full name, company name	Contract performance
Project coordination	Brief content, project notes, status history	Contract performance
Billing & invoicing	Name, GST number (if applicable), transaction amounts	Legal obligation (GST Act, Income Tax Act)
Designer onboarding (admin-only)	Name, PAN, GSTIN (optional), bank details, turnover declaration	Legal obligation + contract
DPDP consent records	Purpose, timestamp, document version, user ID	Legal obligation (DPDP Act 2023)

How we use your data

We use personal data only for the purpose for which it was collected (listed above). We do not use your data for behavioural advertising, profiling, or any purpose not stated here. We do not sell your data.

Data processors (third parties)

We use the following processors who may handle your personal data:

• Supabase Inc. (USA) — database and authentication hosting • Vercel Inc. (USA) — web hosting and CDN • Razorpay Software Pvt. Ltd. (India) — payment processing (when enabled)

All processors are bound by data processing agreements. Personal data transferred outside India is subject to appropriate safeguards under applicable law.

Your rights under the DPDP Act 2023

→

Right to access: Request a summary of personal data we hold about you.

→

Right to correction: Request correction of inaccurate or incomplete data.

→

Right to erasure: Request deletion of your data, subject to legal retention obligations (e.g., tax records must be kept for 7 years).

→

Right to grievance redressal: Raise a complaint with our Data Protection Officer.

→

Right to nominate: Nominate another individual to exercise rights on your behalf in the event of death or incapacity.

→

Withdrawal of consent: Withdraw consent at any time for purposes based on consent. Withdrawal does not affect prior processing.

How to exercise your rights

Email privacy@thinksourcecreate.in with subject line "Data Rights Request". Include your full name and the email address associated with your account. We will respond within 30 days. You may also submit a request through the Settings → Privacy screen in the app.

Retention

Contact form submissions: 24 months. Account data: for the duration of the account and 12 months after closure. Tax and invoice records: 7 years (legal obligation). DPDP consent records: 7 years. Designer onboarding data (PAN, GSTIN): retained for the duration of the engagement and 7 years thereafter.

Grievance and escalation

Our Data Protection Officer can be reached at privacy@thinksourcecreate.in. If we do not resolve your complaint satisfactorily, you may approach the Data Protection Board of India once constituted under the DPDP Act 2023.

Children

TSC is a B2B product for business founders and SMBs. We do not knowingly collect personal data of individuals under 18. If you believe a minor has submitted data, contact us immediately.

Changes to this notice

We will notify registered users of material changes to this notice via email. The notice is versioned — the current version is v1.0, effective 1 January 2025. Prior versions are available on request.