Privacy Policy

ApnaPixlo is operated by WebMS Consultancy (proprietor: Mohammad Sajid Ansari), based in Surat, Gujarat, India. For the purposes of the DPDP Act, we are the Data Fiduciary that decides how and why your personal data is processed. If you are a photographer who uploads event photos, you act as a Data Fiduciary for your guests and warrant that you have their consent (see our Terms of Service).

We collect only what the service needs:

• Photographers: name, email, password (stored hashed by our auth provider), and optionally phone number and studio name.
• Guests: name and email, captured when you sign in to search for your photos at an event.
• Biometric data (facial features): when you take a selfie to find your photos, and when a photographer uploads event photos, faces are analysed to enable matching. See section 3.
• Event content: photos uploaded by photographers (and guests, where enabled), and basic event details.
• Technical data: a one-way hash of the IP address used for a download (we do not store raw IP addresses for downloads), and basic, privacy-friendly usage analytics.

ApnaPixlo's core feature uses facial recognition (Amazon Rekognition) to match a guest's selfie to the photos they appear in. We want to be completely clear about this:

• Your selfie is never stored.It is processed in memory only, compared against the event's faces, and discarded immediately. It is never written to disk or to our storage.
• Faces in uploaded event photos are indexed as numeric face templates inside a per-event collection so that matching can work. This collection is permanently deleted when the event expires or is deleted (see section 6).
• We use facial data only to show you your own photos. We never use it for advertising, profiling, surveillance, or sell it to anyone.
• We ask for your explicit consent before any facial recognition takes place. You can decline and simply not use the selfie search.

• To let photographers create events and manage their photos.
• To let guests find and download the photos they appear in.
• To operate, secure, and improve the service.
• To respond to custom-plan enquiries and support requests.
• To meet legal and regulatory obligations.

We do not use your data for any purpose beyond these without asking you first.

We process personal data on the basis of your consent, which we take at the point of collection — when you create an account, and again, specifically, before facial recognition runs on your selfie. You may withdraw consent at any time (section 8); withdrawing it means we can no longer provide the parts of the service that depend on that data.

• Event photos and their face index exist only for the event's lifespan (Free: 3 days, Basic: 10 days, Pro: 30 days), after which they are automatically and permanently deleted, including from facial-recognition storage.
• A photographer can delete an event at any time, which removes its photos, face index and storage.
• Selfies are never retained (section 3).
• Account data is kept while your account is active and deleted when you delete your account.

We do not sell your data. We use the following processors strictly to run the service, under their respective data-protection terms:

• Supabase — Authentication & database hosting.
• Amazon Web Services (AWS) — Photo storage (S3) & facial recognition (Rekognition).
• Vercel — Application hosting.
• Resend — Transactional email.

Photo storage and facial recognition run in AWS Mumbai (ap-south-1), India. Some processors (e.g. authentication, hosting, email) may process limited data on servers outside India. The DPDP Act permits such transfers except to countries specifically restricted by the Government of India; we transfer only to permitted destinations and apply appropriate safeguards.

Under the DPDP Act you have the right to:

• Access the personal data we hold about you.
• Correct or update inaccurate data.
• Erase your data. Photographers can delete their account (and all associated data) from Profile → Danger zone. Guests can request deletion by emailing us.
• Withdraw consent at any time.
• Grievance redressal — raise a complaint with our Grievance Officer (section 12).
• Nominate another person to exercise your rights in the event of death or incapacity.

To exercise any of these, email privacy@apnapixlo.com. We respond within the timelines required by law.

ApnaPixlo is intended for users aged 18 and above. We do not knowingly create accounts for children. Event photos may contain children; photographers must obtain verifiable parental consent before uploading and processing a child's images, as required by the DPDP Act.

We apply reasonable security practices: access controls and row-level security on the database, encrypted connections (HTTPS), storage with public access blocked and short-lived signed links, least-privilege cloud credentials, and selfies that are never persisted. No system is perfectly secure; if a breach affecting your data occurs, we will notify the Data Protection Board and affected users as required by law.

We use only essential cookies needed to keep you signed in and to operate the site securely. We do not use advertising or cross-site-tracking cookies.

In line with the IT Act, 2000 and the DPDP Act, 2023, you can contact our Grievance Officer for any privacy concern or complaint:

We may update this policy as the service or the law evolves. Material changes will be reflected here with a new effective date; please check back periodically.