Privacy Policy
Last Updated: September 2026 · Compliant with India's DPDP Act, 2023
1. Overview & Data Roles
PicFetch AI ("we", "our", "us", operated by Ayush Shailesh Ghodke, Sole Proprietor, 1260 Tekdi, Above Ghodke Clinic, Saliwada road, Paithan, Aurangabad (Chhatrapati Sambhajinagar), Maharashtra - 431107, India) operates a privacy-centric AI platform for event photo delivery. We are deeply committed to safeguarding personal data in strict adherence with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
Under the DPDP Act:
- The Studio / Photographer is the Data Fiduciary who determines the purpose and lawful basis for collecting event photos and guest participation.
- PicFetch AI acts as the Data Processor, processing photographs and facial embeddings exclusively on behalf and under the direction of the Data Fiduciary.
2. How Biometric & Face Data is Processed
Core Biometric Principles:
- Selfies are Never Stored: When a guest takes a selfie to search for their photos, the image is processed in temporary memory to match event photos and immediately purged. We do not write selfies to disk or storage buckets.
- Mathematical Vectors, Not Reversible Images: Face embeddings are purely non-reversible mathematical numbers representing facial feature distances. It is mathematically impossible to recreate a human face or photograph from an embedding.
- Strict Event Scoping: Every facial search is filtered strictly to the specific event (`WHERE event_id = X`). We never create a cross-event face database, never track individuals across multiple weddings, and never train AI models on customer or guest photos.
3. Information We Collect
| Data Type | Subject | Purpose & Storage |
|---|---|---|
| Account Details (Email, Studio Name) | Studios | Authentication, billing, and account management via Supabase Auth (Mumbai Region). |
| Event Photos & Thumbnails | Event Attendees | Stored securely in encrypted cloud object storage (AES-256 encrypted at rest) for guest viewing and download. |
| Face Embeddings (512-d) | Event Attendees | Stored in PostgreSQL (`pgvector`) strictly tagged with `event_id` for instant guest matching. |
| Search Selfies | Guests | Transient memory only. Immediately deleted after matching. |
| Lead Data (Name & Phone) | Consenting Guests | Captured only with explicit checkbox consent via Magic Sync for studio follow-up. |
Infrastructure Providers & Processing Locations
PicFetch AI uses trusted infrastructure providers under strict contractual confidentiality and data protection terms:
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase | Authentication & PostgreSQL Database | Account info, face vectors, event metadata | ap-south-1 (Mumbai, India) |
| Microsoft Azure | Application compute & AI worker queues | Transient in-memory processing, encrypted API traffic | India South Central (India) |
| Cloudflare (R2) | Photo storage & CDN edge delivery | Original photos, thumbnails, previews (AES-256 encrypted) | Global Edge Network |
| Expo | Push notifications & OTA app updates | Device push token, runtime app version | Global |
| Resend | Transactional email notifications | Email addresses, delivery logs | Global |
Cross-border processing: Core database and compute infrastructure reside in India. Under Section 16 of the DPDP Act, 2023, data transfers to technical supporting edge providers outside India are safeguarded using industry-standard access controls, TLS 1.3 encryption in transit, and AES-256 encryption at rest.
4. Data Retention & Automated Purge
By default, all event photos, generated thumbnails, previews, and face vectors are retained for 60 days from event creation.
After this period, an automated daily maintenance job executes a permanent, irreversible purge across the database and cloud object storage.
5. Your Data Rights & Right to Erasure
Under the DPDP Act, every data principal has the right to access, correct, and erase their personal data.
- Right to Erasure: Any guest can request immediate deletion of their face embeddings from an event gallery via our online Right-to-Erasure workflow or by submitting a request to our Grievance Officer.
- Right to Withdraw Consent: Guests may decline to submit a selfie or exit the gallery search at any time without penalty.
5.1 Studio Account & Data Deletion (Google Play Compliance)
Studio account holders can delete their account and associated data directly in-app via Account → Account Management → Delete Account & Data, or on our website at picfetch.in/delete-account without having the mobile app installed.
When deletion is initiated, all active galleries immediately go offline. Accounts enter a 7-day soft-delete grace period before permanent, irreversible purging of all photos, biometric vectors, and database records from Cloudflare R2 and PostgreSQL. Statutory tax invoices and transaction records are retained for legal audit compliance under the Indian Income Tax Act and GST regulations.
6. Children's Data (DPDP Act, 2023 §9)
PicFetch AI is not directed at children, and we do not knowingly create accounts for anyone under 18 years of age. In accordance with Section 9 of the Digital Personal Data Protection Act, 2023, processing personal or biometric data of minors requires verifiable consent from a parent or lawful guardian.
- When an event gallery contains photographs of minors, the Studio (as Data Fiduciary) is responsible for ensuring appropriate parental/guardian authorization is obtained prior to uploading.
- In the guest search flow, guests must confirm they are 18 or older, or that they are a parent/lawful guardian providing consent on behalf of a minor.
- We strictly prohibit tracking, behavioral monitoring, or targeted advertising directed at children.
- Parents or lawful guardians may request immediate, permanent deletion of their child's photos or face embeddings at any time by contacting grievance@picfetch.in. Such requests are processed with expedited priority (within 24 hours).
7. Grievance Redressal Officer & Inquiries
In accordance with Section 19 of the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, the contact details of our designated Grievance Officer are published below:
Name: Ayush Shailesh Ghodke
Designation: Grievance Redressal Officer
Entity: PicFetch AI (Operated by Ayush Shailesh Ghodke, Sole Proprietor)
Email: grievance@picfetch.in
Address: 1260 Tekdi, Above Ghodke Clinic, Saliwada road, Paithan, Aurangabad (Chhatrapati Sambhajinagar), Maharashtra - 431107, India
Response Timeline: All legitimate grievances are acknowledged within 24 hours and resolved within 7–15 business days. You may also escalate grievances to the Data Protection Board of India.