Privacy Policy

InstantPix is operated by InstantPix Technology Private Limited (CIN: U62011KA2026PTC221385), a company incorporated in India with its registered office at C/o Kowshik Ashirwad Apts, 2nd Flr, New Extension Road, Dharmaram College, Bangalore South, Karnataka 560029. References in this Privacy Policy to "InstantPix", "we", "us" or "our" mean InstantPix Technology Private Limited.

Under the Digital Personal Data Protection Act, 2023 (DPDPA), InstantPix Technology Private Limited is the Data Fiduciary for personal data processed through our website, mobile app, and services.

This Privacy Policy explains how we collect, process, store, and protect your personal information. By using InstantPix, you agree to this Privacy Policy. If you do not agree, please discontinue use of the platform.

Account data: Full name, email address, mobile number, password (stored as bcrypt hash — never in plain text).

Photographer profile data: Business name, city, GPS coordinates and service radius (when provided), experience, specializations, portfolio URLs, social links. For KYC verification (photographers only) we also collect a photo of your government ID (Aadhaar or PAN), a verification selfie, and a masked reference (last 4 digits). Your ID photo and selfie are access-restricted to you and our admins.

Location data: When you use location-based photographer discovery, we request your device's GPS coordinates. This data is used only to compute proximity and is not stored permanently on our servers — it is transmitted over HTTPS and used in real time to query nearby photographers.

Face data: To find your photos we need a face to match against. There are three separate cases, and they are treated differently:

• Your profile photo — stored. When you add a profile photo (or when a photographer's KYC selfie is verified and you have no profile photo yet), we keep two things on your account: the photo itself, in our storage, and a face template computed from it — a long list of numbers that represents your face. Both stay until you remove them or delete your account. We keep the template so that "find my photos" works across every event you join without you re-uploading a selfie each time, and so we can tell you when new photos of you are added. Replacing your profile photo deletes the old photo and rebuilds the template.
• A one-off search selfie — not stored. If you search an event gallery by uploading a selfie there and then, that image is written to a temporary file on the server, used for that one search, and deleted as soon as the search finishes. It is not added to your account.
• Faces in event photos — stored. When photos are uploaded to an event, we compute a face template for each face in them so the gallery is searchable. These are tied to the event's photos and are deleted with them.

A face template is biometric data. We use it only to match you to photos on InstantPix. We do not sell it, and we do not use it to identify you anywhere outside the platform. Your face data is stored in India, in Amazon Web Services' Mumbai region.

You can delete it — see Deletion policy below.

Event media: Photos and videos uploaded to event galleries are stored in encrypted AWS S3 buckets. Access is restricted to event participants and authorised editors.

Payment data: We use Razorpay as our payment processor. We do not store raw card numbers, UPI credentials, or bank account details. Razorpay stores this data under their PCI-DSS compliant environment. We store only Razorpay order IDs, payment IDs, and transaction status.

Push notification token (Device ID): When you enable notifications, we receive an opaque Firebase Cloud Messaging (FCM) token tied to your device. We use it only to deliver notifications to your device and remove it on logout. The token does not identify you outside our system.

Diagnostic & performance data: When the app or web crashes or behaves abnormally, we send anonymised crash logs, performance metrics, and breadcrumb traces to Sentry. We scrub identifiers (email, phone, OTP, tokens) before transmission. These are used only to diagnose bugs and improve reliability.

Usage data: IP address, browser/device type, pages visited, feature interactions (used for analytics and fraud prevention).

We use your data to:

• Create and manage your account
• Match clients with nearby photographers using GPS proximity
• Process bookings and payments via Razorpay
• Search event photo galleries using face recognition
• Let the event's photographer see, in aggregate, whether enough photos of guests were captured — as counts only, never identifying you by name
• Send transactional SMS/email (OTP, booking confirmation, payment receipt)
• Detect fraud and enforce platform rules
• Comply with applicable Indian law (IT Act 2000, DPDPA 2023)

We do not use your photos or your face data to train AI models.

We do not sell your personal data.

We share data with:

• Razorpay (payment processing) — governed by Razorpay's Privacy Policy
• AWS (cloud storage and infrastructure) — encrypted at rest and in transit
• Firebase (authentication, social sign-in, push notifications) — handles Google/Apple sign-in tokens and delivers FCM push to your device
• MSG91 (transactional SMS for phone OTP, India only) — phone number passed for delivery, not retained beyond the OTP session
• Sentry (error and performance monitoring) — anonymised stack traces and breadcrumbs; PII keys are scrubbed client-side before transmission
• Law enforcement — if required by a valid court order under Indian law

• Account data: Retained while your account is active. Deleted after a 30-day grace period following an account deletion request.
• Your profile photo and its face template: Retained while your account is active. Removed when you remove your profile photo, and deleted when your account is deleted.
• A selfie you upload for a one-off gallery search: Deleted as soon as that search finishes.
• Face templates for faces in event photos: Retained as long as the photo is, and deleted with it.
• Event media: Retained for as long as the event organiser keeps the event. Deleted when the organiser deletes it.
• KYC verification selfie (photographers): It is face data, so it is deleted with the rest of your face data when you delete your account.
• KYC government ID (photographers): Kept separately from your face data. If you received payouts, we are required to keep verification records for a period after our relationship ends (anti-money-laundering record-keeping), so we retain your ID for as long as the law requires and then delete it.
• Payment records: Retained for 7 years as required by Indian tax law.
• Location data: Not stored — used in real time only.

Under the Digital Personal Data Protection Act 2023 (DPDPA), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your account and associated data
• Withdraw consent to data processing (which may affect your ability to use the platform)
• Nominate a representative in the event of death or incapacity

To exercise any right, email support@instantpixapp.com with subject "Data Rights Request". We will respond within 30 days.

We use httpOnly cookies to keep you signed in. They are secure and not readable by JavaScript. The session cookie lasts up to 7 days and the renewal cookie up to 30 days; logging out clears both. We do not use third-party tracking or advertising cookies.

• All data is transmitted over TLS 1.2+
• Passwords are hashed using bcrypt (cost factor 12)
• Session tokens are signed with HS256 and expire after 30 minutes; your browser session is renewed silently while you keep using InstantPix, and stops being renewed when you log out
• Gallery photos and videos are delivered over our content delivery network (CDN); original-quality and other gated downloads use time-limited signed links (presigned S3 URLs) that expire shortly after they are issued
• Rate limiting and CSRF protection on all auth endpoints
• Your face template is stored on your account row in our database. It is never returned by our API and is never shown to anyone. It is deleted when you delete your account (see Deletion policy)

InstantPix is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has provided data, contact support@instantpixapp.com and we will delete it promptly.

Ownership. You retain full ownership of every photo or video you upload to InstantPix. We never sell your media, never license it to third parties, and never use it to train AI models.

Visibility. Media uploaded to an event gallery is visible only to the event owner, invited editors, and users who have access via event code, link, or QR. Galleries are not publicly indexable and are excluded from search engines.

AI face search inputs. When you search a gallery by uploading a selfie on the spot, that selfie is turned into a face template, used for the search, and the image is deleted as soon as the search finishes. If instead you have a profile photo on your account, we match using the face template we already stored from it (see Data we collect) — that one is kept until you remove it. Either way, only the event organiser's uploaded gallery is searched — never the public internet.

Watermarks & previews. Free previews may be served at reduced resolution with a watermark. Original-quality downloads are gated to authorised users only.

Account deletion. Request account deletion in-app under Account → Settings, or by emailing support@instantpixapp.com. Your account is deactivated immediately, and your account and associated personal data are permanently deleted after a 30-day grace period, except the few records the law requires us to keep — payment records (retained for 7 years under Indian tax law) and, for photographers who received payouts, the government ID you submitted for KYC (see Identity documents below).

Event & media deletion. Event owners can delete an event or any individual photo from the event dashboard. Deletions are immediate from active galleries and propagated to backups within 30 days. Once deleted, photos are unrecoverable.

Face data. You have three ways to get rid of it:

• Remove your profile photo (Account → Edit profile). This deletes the stored photo and the face template built from it. Face search then stops working for you until you add a new one.
• Remove yourself from one event ("Remove me from this event"). Your face stops being findable in that event's photos, for everyone, straight away — and it stays that way even after we re-scan the event. This one is reversible: you can add yourself back at any time. Your account and your photos elsewhere are untouched.
• Delete your account. After the 30-day grace period, an automatic job finds your face in every event you joined, makes those faces unsearchable, and removes those detected faces from our search index. It also erases your stored face template and profile photo, unlinks you from participant records, and deletes your account.

If you'd rather not do it yourself, write to support@instantpixapp.com and we'll do any of the above for you.

Two honest limits. First, we identify your face in event photos by matching the template from your profile photo — so if you never added one, we can't find your face in other people's photos to remove it; your stored face template, profile photo and account are still deleted. Second, once your template is erased we no longer have any way to recognise you. That means if a new photo of you is uploaded to an event later we cannot detect it to keep it out — and if we ever re-scan an event you were in, a face of you already present in someone else's photo can be detected again, with no stored signature left for us to suppress it against. Write to support@instantpixapp.com if either of these affects you.

Face templates for faces in event photos are deleted when the photo is deleted. A selfie used for a one-off search is deleted within seconds.

Identity documents (photographers). Deleting your account erases your face data — your profile photo, the face template built from it, and your KYC verification selfie. The government ID you uploaded for KYC (your Aadhaar or PAN) is treated differently: if you received payouts, the law requires us to keep verification records for a period after our relationship ends (anti-money-laundering record-keeping), so we retain that ID for as long as we are legally required to and delete it after. It stays access-restricted to you and our admins the whole time, and is never used for anything except proving we verified you. So account deletion removes everything about you except the payment and KYC records the law requires us to hold.

Withdrawn consent. If you withdraw consent for processing, we will stop processing within 7 days and delete data unless retention is legally required.

InstantPix respects intellectual property rights. If you believe content on our platform infringes your copyright, send a written notice to support@instantpixapp.com including:

• Identification of the copyrighted work
• The exact URL or event code containing the infringing content
• Your contact details (name, email, address)
• A statement, under penalty of perjury, that you are the rights holder or authorised to act on their behalf
• Your physical or electronic signature

We will review and, where appropriate, remove the content within 7 business days and notify the uploader. Repeat infringers will have their accounts terminated.

For counter-notice procedures, write to the same address with your justification.

We may update this Privacy Policy. Material changes will be notified via email to registered users at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

For privacy concerns, data requests, or to reach our Grievance Officer:

Data Fiduciary: InstantPix Technology Private Limited

CIN: U62011KA2026PTC221385

Email: support@instantpixapp.com

Registered office: C/o Kowshik Ashirwad Apts, 2nd Flr, New Extension Road, Dharmaram College, Bangalore South, Karnataka 560029, India

Mark data-rights requests with the subject line "Data Rights Request" and grievances with "Grievance Officer". We will acknowledge within 7 days and respond within 30 days as required under the DPDPA 2023.