Privacy Policy
Last updated: January 21, 2026
1. Introduction
Welcome to PhotoSelector ("we," "our," or "us"). We are committed to protecting your privacy and ensuring your personal data is handled responsibly.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our suite of tools, including the PhotoSelector Studio Dashboard, PhotoSelector Client Gallery, Guest Cam, White-Labeled Portfolio Websites, and other associated services (collectively, the "Service" or "Platform").
Core Privacy Promise: We process your photos primarily on your local device. We only upload data to our servers when you explicitly use cloud features like sharing, face recognition, or guest uploads.
2. GDPR Compliance & Legal Basis
If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the Personal Data concerned and the specific context in which we collect it.
- Contractual Necessity: To provide the Services you have purchased or subscribed to (e.g., processing payments, managing your account).
- Legitimate Interests: To improve our Services, ensure security (fraud prevention), and for analytics.
- Consent: For specific features like Face Recognition processing or marketing communications. You may withdraw your consent at any time.
3. Information We Collect
A. Information You Provide
- Account Data: Name, email address, phone number, and profile picture (via Google Sign-In or email registration).
- Studio Data: Studio/business name, logo, branding preferences, and custom domain settings for white-labeled websites.
- Client CRM Data: If you are a photographer, you may store client names, emails, phone numbers, and event details in our CRM.
- Guest Data: For Guest Cam features, we collect guest names, emails (optional), phone numbers, and selfie images for identity verification.
B. Biometric Data (Face Recognition)
When you use our AI Face Recognition features:
- We process facial geometry data (biometric templates) from uploaded photos to group similar faces.
- Storage: Biometric data is stored securely on AWS servers.
- Purpose: This data is used SOLELY for grouping photos within your specific project or event.
- No Training: We DO NOT use your face data to train public AI models.
- Retention: Face data is deleted when you delete the corresponding project, person, or your account.
C. Usage Data
We automatically collect certain information when you visit, use, or navigate the Service. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Service, and other technical information.
4. Third-Party Services & Integrations
PhotoSelector integrates with various third-party services to provide our platform features. This section describes how we handle data with each integration.
A. Google Services
- Google Sign-In: Your name, email address, and profile picture for account creation and authentication.
- Google Drive (Read-Only): When you connect your Google Drive, we access your files and folders in read-only mode to allow you to select and organize photos directly from your Drive.
- Google Calendar: For photographers using our Studio features, we access your calendar to sync bookings and events with your Google Calendar.
B. Payment Processing (Razorpay)
- We use Razorpay for processing payments for subscriptions, credit packs, and add-ons.
- Razorpay collects payment information directly; we only store transaction IDs and payment status.
- Your full payment card details are never stored on our servers.
C. WhatsApp Messaging (Gupshup)
- We use Gupshup as our WhatsApp Business API provider for sending gallery links, client invites, and lead notifications.
- Phone numbers are shared with Gupshup solely for message delivery purposes.
- Message content and delivery status are logged for your communication history.
D. Cloud Storage (AWS)
- Photos and files are stored securely on Amazon Web Services (AWS) S3.
- Data is encrypted at rest and in transit.
- Servers are located in regions including India and the United States.
E. Revoking Access
You can revoke PhotoSelector's access to your Google account at any time by visiting your Google Account Connections page or disconnecting the integration from your PhotoSelector settings. Upon disconnection, we will delete the associated OAuth tokens.
5. How We Use Your Information
We use the information we collect or receive:
- To facilitate account creation and logon process.
- To send you administrative information and notifications.
- To fulfill and manage your orders and subscription.
- To enable user-to-user communications (e.g., photographer to client via WhatsApp).
- To protect our Services (fraud monitoring).
- To provide the specific AI features you request (like sorting photos by face).
- To provide white-labeled websites and custom domain functionality.
6. Sharing Your Information
We may process or share your data that we hold based on the following legal basis:
- Vendors and Service Providers: We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us (e.g., AWS for computing/storage, Razorpay for payments, Gupshup for WhatsApp, Google Analytics).
- Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- Legal Obligations: We may disclose your information where we are legally required to do so to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
7. International Data Transfers
Our servers are located in regions including the United States and India. If you are accessing our Services from outside either country, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information.
If you are a resident in the European Economic Area (EEA) or United Kingdom (UK), then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. We will however take all necessary measures to protect your personal information in accordance with this privacy notice and applicable law.
8. Your Privacy Rights
In some regions (like the EEA and UK), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information.
To make such a request, please contact us at privacy@photoselector.app. We will consider and act upon any request in accordance with applicable data protection laws.
Account Deletion: You can delete your account and all associated data directly from your Profile settings within the application.
Contact Us
If you have questions or comments about this policy, you may email us at:
privacy@photoselector.app