1. Information We Collect
Account Information
When you create an account, we collect your name, business name, email address, username, and password (stored securely using PBKDF2/argon2 password hashing). You may optionally configure custom logos, favicons, and studio branding.
Content You Upload
We store original high-resolution photos, videos, and media files you upload to your client collections, along with category metadata and collection settings. All assets are stored securely on Cloudflare R2 storage.
Usage & Analytics Data
We utilize Cloudflare Web Analytics, a privacy-first, cookie-less analytics platform to aggregate page views and performance metrics without tracking individual visitors or setting persistent tracking cookies.
Client & Visitor Data
When your clients access a shared collection or register to view photos, we collect their name, email address, and optional phone number. You, as the photographer, are the primary Data Controller for your client's information.
2. How We Use Your Information
We do not sell, rent, or monetize your personal information or uploaded client photos to third parties.
- Provide, operate, and deliver high-speed client proofing galleries
- Authenticate photographer identity and maintain secure HTTP-only sessions
- Process subscription payments securely via Razorpay payment gateway
- Send essential transactional emails (login verification codes, subscription notices)
- Apply custom PNG watermarks and enforce 4-digit gallery PIN access controls
- Comply with global legal obligations, including India DPDP Act 2023 and EU GDPR
We do not sell, rent, or monetize your personal information or uploaded client photos to third parties.
4. Data Storage, Watermarking & Security
Your data and uploaded photos are stored in high-security data centers with Cloudflare R2. We enforce HTTPS/TLS 1.3 encryption in transit, strict Row-Level Security (RLS) database isolation, signed delivery URLs, custom PNG watermarking, and 4-digit PIN verification to safeguard your work against unauthorized access.
6. Your Rights (GDPR & DPDP Act 2023)
To exercise any of these rights, email us at privacy@kairosstudia.com.
- Right to Access: Request a digital copy of all personal data held in your account
- Right to Rectification: Correct or update inaccurate profile or billing information
- Right to Erasure (Data Purge): Delete your account, collections, and stored photos permanently
- Right to Data Portability: Export your client lists and gallery selections
- Right to Grievance Redressal: Contact our Privacy Officer regarding data concerns
To exercise any of these rights, email us at privacy@kairosstudia.com.
7. Children's Privacy
Our Service is intended for professional photographers and adult clients. We do not knowingly collect personal information from individuals under the age of 16.
8. Changes to This Policy
We may update this Privacy Policy to reflect platform updates or legal regulations. We will notify registered photographers by email or platform notifications 7 days prior to material updates.
9. Contact Us
For privacy queries or data protection requests, email privacy@kairosstudia.com or write to Kairos Studia, kairosstudia.com.