Draft for review: have a lawyer check this page before ShotSync takes paying customers.
This policy explains what personal data ShotSync handles and why, in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act).
Two kinds of data
- Studio accounts: owners and staff who use ShotSync. For this data, ShotSync is the data fiduciary.
- Your clients and their photos: data a studio puts into ShotSync about its own clients. The studio decides why and how it is used; ShotSync processes it on the studio’s behalf.
What we collect
- Name, email, mobile number and role of the people in a studio.
- Billing details you give us: business name, GSTIN, address and payment references.
- What you add to run your studio: leads, clients, jobs, schedules, messages, contracts and photos.
- Technical data: sign-in times, IP address (also recorded on signed contracts), device type and app version, for security and support.
Why we use it
To provide the service, send sign-in codes and important notices, bill you, keep the service secure, and improve it. We don’t sell personal data and we don’t use your clients’ photos for anything other than showing them to you and your clients.
Who we share it with
Service providers that help us run ShotSync (hosting, storage, email delivery, payments), bound to protect the data, and authorities when the law requires it.
Where it is stored
On servers chosen for security and reliability. [Region to be confirmed before launch.]
How long we keep it
While your studio is active, and for 90 days after a plan ends so you can export it. Invoices are kept as long as tax law requires.
Your rights
You can ask to see, correct or delete your personal data, withdraw consent, and nominate someone to act for you. Clients of a studio should contact that studio first; we will help the studio respond.
Grievance officer
[Name], [email], [address]. We acknowledge complaints within 48 hours and resolve them within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.