Trust · Security · Privacy
How we handle your data.
This page is maintained by Metaphore Designs Studio to answer common security and privacy questions about the Metaphore Designs website and client portal. It describes the controls currently in place and is editable content — not an independent certification or audit report.
Last reviewed: June 2026
Access & authentication
The client portal uses email-based authentication with sessions managed by our hosting provider. Each signed-in user can only view payment records associated with their own account. Administrative actions on payments are restricted to server-side roles and cannot be performed from the browser.
Data we collect
We collect the information you submit through enquiry, onboarding, calculator and checkout forms — typically your name, email, phone number and project preferences. For paid services, we additionally record the payment order reference, amount, currency and payment status. We do not store card numbers, CVVs or UPI PINs; those are handled by the payment processor.
Payments
Payments are processed by Razorpay. We verify each transaction's signature on our server before marking it successful. Write access to the payments table is restricted to server-side roles; the browser can only read records that belong to the signed-in user.
Hosting & infrastructure
The website and backend are hosted on Lovable Cloud, which provides the underlying database, authentication and serverless runtime. Network traffic to and from the site is served over HTTPS. This describes platform capabilities Lovable provides — it is not a Lovable-issued security certification.
Retention & deletion
Enquiry and onboarding data is retained for the duration of an active client relationship plus a reasonable period for financial and tax records. Payment records are retained as required by applicable Indian tax and accounting regulations. You can request deletion of personal data that is not subject to a legal retention requirement by contacting us.
Privacy requests & security contact
To access, correct or delete personal data we hold about you, or to report a suspected security issue, write to studio@metaphoredesigns.com. We aim to acknowledge security reports within two working days.