StudioOS Privacy Policy

1. Overview

Picsora StudioOS is the business app for photography studios and photographers. You use it to manage your studio profile, create events and client photo galleries, run your CRM (leads, quotations, bookings), track finances, and publish a portfolio.

This Privacy Policy applies only to the StudioOS app and the studio dashboard at picsora.in. It is separate from the consumer Picsora guest app that wedding and event guests use to find their own photos.

We keep it minimal. StudioOS collects only the data needed to run your studio account and the business records you choose to enter. It does not collect your own biometric data as a studio user, and it does not read your device's contacts, location, or existing photo library beyond the files you explicitly pick or capture. It does process the faces of your event guests as part of the photo-matching feature you upload event photos for - see Section 2.4 and our guest app's Biometric Data section for full details.

By creating a StudioOS account or using the app, you agree to the collection and use of information as described here.

2. Information We Collect

2.1 Account Information

Name and email address - used to create and sign in to your account and for account communications.
Password - stored only as a salted hash, never in plain text. Not collected if you sign in with Google.
Mobile number - verified with a one-time code (OTP) sent by WhatsApp or SMS, so we can reach you about your account and bookings.
Google sign-in (optional): if you choose "Continue with Google", we receive your Google account's email address, name and a Google user ID to create or match your account. We do not receive your Google password or access any other Google data.

2.2 Studio Profile

Information you add to set up your studio:

Studio / business name and contact details.
Logo and watermark image.
GST number and billing details (optional).

2.3 Business Content You Create

Records you enter while using the app - events, client galleries, CRM leads, quotations, bookings, team members, payments, expenses, portfolio posts and notes. See Section 4 for how client personal data you enter is handled.

2.4 Photos You Upload & Face Data

Event photos you upload for a client gallery are stored on our secure cloud storage and processed by our face-detection system so that guests can privately find their own photos in the Picsora guest app. To generate a face embedding, a photo is sent to Modal Labs, Inc., a third-party cloud computing provider, which runs our own model on our behalf and does not retain, use, or access the data for its own purposes. The resulting face embeddings and any guest selfie photos are stored on Picsora's own servers.

The Event → Members screen in this app lets you view a guest's selfie(s) and the photos matched to them, so you can organize and deliver the right photos to the right guest. Guests upload their own selfie voluntarily, through their own account in the Picsora guest app, and can delete it at any time; it is retained only while their guest account is active. See our guest app's Biometric Data section for the full detail on collection, retention, and deletion.

You are responsible for having the right to upload these photos, and for your own lawful basis (such as your event contract with your clients) to have this processing performed on photos of your guests.

2.5 Device Permissions

Camera - used only when you choose to capture a logo, watermark or cover image. The app never uses the camera at any other time.
Photos / Gallery - used only when you pick an image to upload (logo, watermark, cover or event photos). We do not scan or read your existing library.
Notifications - used to send you booking, payment and account alerts. You can turn these off in your device settings.

2.6 Payments

Subscription purchases are processed by our payment gateway (Razorpay). We store the transaction reference, amount, plan and date for invoicing and tax records. We do not store your card or bank details - those are handled entirely by the payment gateway.

2.7 Technical & Diagnostic Data

App version, device model and operating-system version, and crash / error logs (via Sentry). This is used only to keep the app stable and is not used to identify you personally.

3. How We Use Your Data

Create and secure your studio account and keep you signed in.
Provide the dashboard features: events, galleries, CRM, finance and portfolio.
Send OTPs and verify your mobile number.
Process subscription payments and issue invoices / tax records.
Send transactional messages and notifications about your account, bookings and payments.
Respond to your support requests.
Detect and prevent fraud, abuse and security incidents.
Comply with applicable laws and legal obligations.

We do not sell your data and we do not use it for third-party advertising.

4. Client Data You Enter

You are the data controller for your clients. When you add a client's name, phone number, email or event details to your CRM, quotations or bookings, Picsora processes that data on your behalf as a processor.

You are responsible for having a lawful basis (such as your client's consent or your contract with them) to store their information in StudioOS, and for responding to any request your client makes about their own data. On your instruction, or on deletion of your account, we delete the client records you entered.

6. Data Retention

Account & studio data: retained while your account is active. Deleted within 30 days of an account-deletion request.
Events, galleries and uploaded photos: retained while your account (or that event) is active; removed within 30 days of account deletion.
Transaction & tax records: retained for up to 7 years as required by financial and GST law, even after account deletion.
Backups: purged on a rolling cycle within 30-90 days.

7. Data Security

TLS 1.2+ encryption for all data in transit.
Encryption at rest for stored files and databases.
Passwords stored only as salted hashes.
OTP-based verification with short expiry windows.
Role-based access controls on our systems.

No system is completely secure. If a breach affects your personal information, we will notify you as required by applicable law.

8. Your Rights & Deletion

8.1 Access & Correction

You can view and update your name, email, phone and studio profile at any time from Profile → Account Settings in the app.

8.2 Account Deletion

To permanently delete your studio account and all associated data, use Profile → Delete Account in the app or visit our StudioOS Account Deletion page. Deletion is completed within 30 days (subject to the retention rules in Section 6).

8.3 Grievance Redressal (India)

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you may raise a grievance by contacting us:

Grievance Officer: Picsora Legal Team
Email: [email protected]
Address: Surat, India
We will respond within 30 days of receipt.

9. Age Requirement

StudioOS is a business tool intended for users aged 18 or older. It is not directed to children, and we do not knowingly collect data from anyone under 18.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above. Continued use of StudioOS after an update constitutes your acceptance.

11. Contact Us

For any questions or requests regarding this policy:

Picsora
Email: [email protected]
Phone: +91 8866959524, +91 8866959550
Website: picsora.in