Privacy Policy

Meteoric Boost is a personal brand acceleration studio, operating from Mumbai, India. Meteoric Boost is responsible for this site and is the Data Fiduciary for personal information collected through it — the party that decides why and how your information is used, and the one answerable for it.

For any question about this notice, or to exercise any of the rights described below, contact privacy@meteoricboost.com. A person reads that address; it is not a ticket queue.

One form on this site asks for personal information: the application. It has five questions — your name, your email address, your phone number with its country code, your business or role, and your Instagram handle. Only the Instagram handle is optional.

Nothing else on this site asks who you are. You can read every word of it without identifying yourself, and you choose whether to apply.

Please do not send us information about anyone else, or any special category information — health, beliefs, and so on. We do not ask for it and we have no use for it.

When an application is submitted, our server records two technical details alongside it: the browser's user-agent string, and the page you came from. Both exist so we can tell a genuine application from an automated one, and so we can tell which campaign a real enquiry came from.

Our hosting provider separately processes the ordinary technical data any web server receives when a page is requested — including your IP address and the time of the request — to serve the site and to protect it from abuse. We do not store your IP address in our own records.

The application form carries a hidden field that a person never sees and never fills in. Automated submissions fill it, and we discard those. It collects nothing about you.

To stop the form being flooded, our server counts how many applications have recently come from a given internet connection. It does that by storing a one-way scrambled fingerprint of the address rather than the address itself — the fingerprint cannot be turned back into your IP, it is not linked to your application, and it is deleted within a day.

This site sets no cookies of its own. It carries one third-party tag: the Meta advertising pixel, described below.

We do not sell personal information, and we do not share your application with advertisers.

Typefaces are served from our own domain rather than from a font service, so reading this page contacts no one but our host.

We use what you submit for one purpose: to assess your application and to contact you about working with Meteoric Boost. That includes replying, arranging a call, and following up if the timing was not right the first time.

Our basis under the Digital Personal Data Protection Act, 2023 is that you gave us this information voluntarily, for this purpose, and did not ask us not to use it for it — you filled in an application so that we would read it. Submitting the form is your consent, and you can withdraw it at any time by contacting us. Withdrawing it does not undo what we did while it stood, and it does not oblige us to forget that we spoke.

We do not use your information to make any automated decision about you. Every application is read and answered by a person.

Applications are written to a Postgres database hosted by Supabase, in Mumbai, India (ap-south-1). That record is the original.

From there each application is copied into a Google Sheet, which is where the team reads and works on it. The sheet holds a copy; the database holds the record.

Both are private. The database has row-level security enabled with no public access policy, which means it cannot be read by this website or by anyone visiting it — only by our server, using a credential that never reaches your browser. The sheet is not published and is shared only with the Meteoric Boost team.

We use a small number of service providers, each of which processes personal information on our instructions and for no purpose of its own.

Vercel — hosting. Serves this website and processes the technical request data described above.

Supabase — database. Stores each application as described above.

Google — the studio's working record. Each application is appended to a private Google Sheet so the team can act on it.

Meta — advertising measurement. This site runs the Meta pixel, which tells us how many people who arrived from an advertisement went on to apply. It reports two things: that a page was opened, and that an application was completed. It is not sent your name, your email address, your phone number or anything you typed into the form. Unlike the providers above, Meta is not acting only on our instructions — it also uses what it receives for its own purposes, and Meta's own privacy policy governs that.

YouTube, in privacy-enhanced mode — video. It is not contacted at all unless you press play on the studio film. If you do, YouTube receives that request and its own privacy policy applies to it.

Links to Instagram profiles are ordinary outbound links. Following one takes you to Instagram, where Instagram's privacy policy applies. We receive nothing back from those links, and we are not told that you followed one.

Our providers are international, and personal information may be stored or accessed in a country other than your own — including the region named above and, in Google's and Vercel's case, the United States.

The record itself stays in India: the database is in the Mumbai region, and applications are written there first. The copies are what travel — Google and Vercel are United States companies, and information reaches them there.

Under the Digital Personal Data Protection Act, 2023, transferring personal data outside India is permitted except to countries the Central Government has restricted by notification. No such restriction applies to the countries our providers operate in. Each of them handles this information on our written instructions and for no purpose of its own.

We keep applications for 24 months from the day you send them, so we can pick a conversation back up if the timing was not right the first time. After that we delete them from both the database and the sheet.

If you would rather we deleted yours sooner, ask us and we will.

Everything you send travels over an encrypted connection, and it is stored on infrastructure that encrypts data at rest. The credential that can read the applications table exists only on our server; it is never sent to a browser and never appears in this site's code.

No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your information and the law requires us to tell you, we will tell you.

Under the Digital Personal Data Protection Act, 2023 you can ask us for a summary of the personal information we hold about you and what we have done with it; ask us to correct, complete or update anything inaccurate; ask us to erase it; and nominate someone to exercise these rights on your behalf if you die or become incapable of exercising them yourself.

We have written what the Act actually gives you, rather than the longer list that appears under European law. There is no right to data portability, to restrict our processing, or to object to it under the Act, and we are not going to imply otherwise. If you want your information gone, ask us to erase it — that is the request that does the work.

To do any of these, contact privacy@meteoricboost.com. We will not charge you for it, and we will answer within 30 days. We may need to confirm who you are first, so that we do not hand your information to someone else.

The Act also asks something of you in return: that the information you give us is accurate, and that you do not impersonate anyone or file a frivolous or false complaint. That is the Act's requirement, not ours, and we mention it only so this page is a complete account.

If you think we have handled your information badly, tell us first — privacy@meteoricboost.com — and we will try to put it right.

If we do not resolve it, you can take the matter to the Data Protection Board of India, which is the authority established under the Digital Personal Data Protection Act, 2023 to hear complaints of this kind. The Act expects you to raise it with us first, so please do — and if we have got something wrong, we would rather hear it from you.

This site and this studio's services are for people running businesses. They are not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has sent us information, contact us and we will delete it.

We update this page when the site changes in a way that affects it, and the date below changes with it. When a change is significant, we will say what changed rather than quietly reissuing the page.

16 September 2026: two changes. The copy of each application that the team works from now goes to a private Google Sheet instead of a Notion workspace — the same information, the same retention, a different destination. And this site now carries the Meta advertising pixel, so that we can tell which advertisements lead to applications; it is described under "Who else is involved", and it is not given anything you type into the form.

Last updated: 16 September 2026.