Legal
Privacy Policy
Last updated 3 October 2026
Draft prepared for Pix Proof — to be reviewed by a qualified lawyer and completed with registered business details before launch.
Photographs are personal. This page explains what we collect, why we need it, and how you stay in control.
1. Scope
This policy explains how [Registered company name] Pvt. Ltd. (“Pix Proof”) handles personal data when you use pixproof.in, our portals and apps. We process personal data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
2. What we collect
- Account details — name, email, mobile number, password (stored only as a secure hash).
- Photographer business details — studio name, address, GSTIN/PAN (optional), bank account / IFSC / UPI for payouts, and verification status.
- Content — photos, videos and files uploaded by photographers or transfer senders, plus generated previews and thumbnails.
- Face-search data — numerical “face embeddings” computed from gallery photos so clients can find photos of themselves (see section 4).
- Payments — amounts, references and status from Cashfree Payments. We never receive or store full card numbers or UPI PINs.
- Usage and device data — log-ins, IP address, actions such as downloads and messages, for security and support.
- Messages — chats between photographers and clients, and notes you send us.
3. How we use it
- To run the service: host galleries, generate watermarked previews, deliver files, process payments and payouts, and send account emails (invites, receipts, reminders).
- To keep Pix Proof secure: prevent fraud, abuse and unauthorised access; enforce our Terms.
- To support you and improve the product, using aggregated or de-identified data where possible.
- To meet legal, tax and accounting obligations.
4. Face search
Face search is optional and works only inside a gallery shared with a client. We detect faces in that gallery’s photos and store numerical embeddings (not separate face images). When a client searches with a selfie, the selfie is processed in memory to compare against that gallery only and is not stored.
Photographers enabling face search confirm they have consent from the people photographed, where required. Embeddings are deleted when the photo or event is deleted. To ask for your face data to be removed from a gallery, contact the photographer or [email protected].
6. How long we keep it
- Galleries: while the photographer’s account is active, and up to 30 days after a subscription ends.
- File transfers: until the expiry chosen by the sender (maximum 14 days); unconfirmed transfers after 2 days.
- Payment and payout records: as long as required by tax and accounting law (generally 8 years).
- Security logs: up to 12 months.
7. Security
We use encrypted connections, private storage with short-lived signed links, hashed passwords, role-based access and audit logs. No system is perfectly secure; if we become aware of a breach affecting you, we will notify you and the authorities as required by law.
8. Your rights
You can access and correct your details in your account settings, and ask us to erase your data, withdraw consent, or nominate someone to exercise your rights. Write to [email protected]. Some data (such as payment records) must be kept for legal reasons. You may also complain to the Data Protection Board of India.
10. Children
Pix Proof isn’t intended for children to use on their own. Photos of children are uploaded by photographers, who are responsible for having a guardian’s consent where required.
11. Grievance Officer
[Name of Grievance Officer] · [email protected] · [Registered office address], [City], [State] – [PIN], India. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
