This Privacy Policy explains how MyPhotoStudio collects, uses, stores and protects information when studios and customers use our website and platform. MyPhotoStudio is a technology platform that enables independent photo studios and photographers to host galleries and accept orders. By using our website or platform, you agree to this Privacy Policy and acknowledge that it is governed by the laws of India.
1 Information We Collect
This Policy applies to information collected when:
- Studios register and use MyPhotoStudio as a platform; or
- Customers access galleries, view photos or place orders through links or QR codes shared by studios using MyPhotoStudio.
A. Account & Contact Information
- Studio name, contact person and business details
- Customer name and mobile number - collected by the studio admin as part of order and event management. Studios act as independent data controllers for this information. MyPhotoStudio processes it on their behalf within their tenant space and does not use it independently.
- Login credentials or access tokens (where applicable)
B. Payment & Transaction Information
- Transaction IDs, payment status and timestamps
- Basic billing information shared by the payment gateway
- Order value, products ordered and related metadata
C. Photo & Gallery Data
- Event and group photos uploaded by studios
- Photo selections or favourites marked by customers
- Gallery access logs and view activity for security and audit
Security Assurance: MyPhotoStudio does not store card numbers, CVV, UPI PIN, netbanking passwords or other highly sensitive financial data. All payments are processed securely by the respective studio’s payment gateway provider (such as Razorpay), and such information is handled in accordance with that provider’s policies.
2 How We Use Your Information
MyPhotoStudio uses information collected for the following purposes:
- To operate, maintain and improve the MyPhotoStudio platform and its features.
- To enable studios to create and manage online galleries for their events.
- To provide customers with access to view, select and order photos.
- To facilitate secure payment redirection to the studio’s chosen payment gateway.
- To provide customer support to studios regarding platform usage.
- To monitor platform performance, security and prevent misuse or fraud.
- To comply with legal and regulatory requirements, where applicable.
Important: MyPhotoStudio does not sell or rent personal data to advertisers or unrelated third-party marketing companies. Information is used only for operating and improving the platform and for studio/customer support as intended.
3 Role of MyPhotoStudio and Studios in Data Handling
MyPhotoStudio is primarily a technology provider. Each studio using the platform is an independent business and acts as the primary controller of the customer data associated with its events and orders.
- Studios upload and manage their own photos, galleries and event information.
- Studios decide which customers can access each gallery and how long galleries remain accessible.
- Studios are responsible for the accuracy of customer data they enter or collect through the platform.
- MyPhotoStudio processes data on behalf of studios to provide hosting, gallery functions, ordering workflows and administrative tools.
4 Photo Storage & Security
- Photos uploaded to MyPhotoStudio are stored on secure servers with restricted access.
- Access to galleries is controlled through secure links, QR codes and studio-defined settings.
- We implement reasonable technical and organisational measures to protect photos and associated data from unauthorised access or disclosure.
- Studios may request removal of galleries after completion of their service period; MyPhotoStudio may also apply platform-wide retention rules.
4A Face Recognition - How We Handle Search Data
MyPhotoStudio provides AI-powered face recognition that allows event guests to find their photos instantly. Guests can use either of two search modes - neither stores any image or biometric data from the guest:
- Mode 1 - Live Scan: The guest points their device camera at their face. Basic face detection runs locally in the browser (using a JavaScript library) to identify the face region. A single frame is then submitted to the AI matching system. The camera frame is used only in real-time, then discarded immediately. No image or biometric data is saved.
- Mode 2 - Upload Photo: The guest voluntarily uploads a selfie or photo from their device. This image is submitted to the AI matching system solely to return matching photos from that event, then discarded immediately. No image or biometric data is saved.
- No guest search data is stored: MyPhotoStudio does not store the guest's camera frame, uploaded selfie, or any facial vector, biometric template, or face identifier derived from a guest's search image. Each search is a one-time, in-session operation with no persistent record.
- Event photo face indexing: Photos uploaded by studios to event galleries are processed for AI face indexing - this is what enables the search feature to work. Face matching data is stored in AWS Rekognition within event-specific collections, and face record references are maintained in the platform database linked to each studio photo. This indexing applies only to studio-uploaded event photos, not to any guest search image.
- Third-party AI processing: Face matching is performed using AWS Rekognition (Amazon Web Services). Both the guest's search image and studio event photos are processed by this service solely for face matching within the specific event gallery. AWS processes data in accordance with their own security and privacy standards.
- Voluntary use: Face recognition search is an optional feature. Guests can browse the full event gallery without using either search mode.
- Studio responsibility: Studios are responsible for obtaining appropriate consent for uploading and sharing photos of individuals through the platform.
Summary: Whether you use Live Scan or Upload Photo, your search image is used only to find your photos in real-time. It is never stored, never added to a database, and never used for any purpose beyond that single search. No biometric data from your search is retained on MyPhotoStudio's platform after your results are delivered.
5 Cookies, Logs & Analytics
Our website and platform may use cookies, server logs and analytics tools to understand how the platform is used and to improve performance.
- Cookies may store basic session information to keep you logged in and to remember preferences.
- Log files may record IP address, browser type, device information and access times.
- Analytics tools may be used to understand aggregate usage patterns, not to track individual users in a personally identifiable manner.
6 Sharing of Information
MyPhotoStudio may share information in the following limited circumstances:
- With Studios: Customer and order details are shared with the studio responsible for that gallery or event, so they can process and fulfil orders.
- With Service Providers: We may rely on third-party providers for hosting (Amazon S3 and AWS), email notifications, WhatsApp Business Platform (Meta Cloud API) notifications and similar services, who process data on our behalf under appropriate safeguards.
- With Payment Gateways: When a customer initiates a payment, relevant transaction information is passed to the studio’s chosen payment gateway (such as Razorpay) for processing.
- For Legal Reasons: We may disclose information if required by law, regulation, legal process or governmental request, or to protect our rights, safety or the rights and safety of our users.
Privacy Guarantee: MyPhotoStudio will never sell your personal information to third parties for independent marketing or advertising purposes.
7 Your Rights & Choices
Depending on your relationship with a studio and with MyPhotoStudio, you may have the following rights:
Access & Correction
Request access to or correction of your personal information held in connection with your orders or account.
Gallery Removal Requests
Ask the studio to remove or limit access to specific photos from a gallery, subject to their policies and commitments.
Data Deletion (Where Applicable)
Request deletion of certain personal details, subject to legal and accounting record requirements.
Customers are encouraged to first contact the respective studio for any changes or deletion related to a specific event or order. For platform-level privacy concerns related to MyPhotoStudio itself, you can reach us using the contact details below.
8 Data Retention
- Event photos and gallery data are retained throughout the studio's active plan period. The retention duration is determined by the studio's subscription plan and is not configurable per event by the studio.
- When a studio's plan expires, event creation is paused. Studios must renew their plan to continue accessing platform features and retain their data.
- MyPhotoStudio may apply platform-level retention rules for logs and inactive accounts to manage storage and security.
- Basic transaction and billing records may be retained for a longer period as required by applicable tax, accounting or legal regulations.
9 External Links & Third-Party Services
Our website or platform may include links to external websites or services (for example: social media pages, map services, payment gateways). MyPhotoStudio is not responsible for the privacy practices or content of those external sites. Users are encouraged to review the privacy policies of any third-party services they access.
10 Security Commitment
We implement reasonable security measures to protect personal data and photos stored on the MyPhotoStudio platform. However, no online system can be guaranteed as 100% secure. Users are advised to keep their login information, gallery links and QR codes confidential and not share them publicly.
11 Service Scope, Age Limit & Changes to This Policy
MyPhotoStudio is intended for use by studios and adult users (18 years and older). In the case of school and college events, access may be provided to parents/guardians or students as directed by the institution and the studio.
Our services are currently focused on users in India, and your personal data will primarily be stored and processed in India in accordance with applicable Indian laws.
We may update or modify this Privacy Policy from time to time to reflect changes in our platform, technology or legal requirements. The latest version will always be available on this page. Your continued use of our website or platform after any changes are posted will constitute your acceptance of those changes.