Legal
Privacy Policy
We collect only what is needed to run Photo Sathi — your demo request, and the booking details a studio adds for its clients. We never sell your data. You can ask us to see, correct or delete it any time at thephotosathi@gmail.com.
Hum sirf utni jaankari lete hain jitni service chalane ke liye zaroori hai. Aapka data kabhi becha nahi jaata. Dekhne, sudharne ya delete karwane ke liye upar diye email pe likhein.
This policy explains how Photo Sathi (“Photo Sathi”, “we”, “us”), operated by Nilesh Sabhadya from Surat, Gujarat, India, collects, uses and protects personal information when you use photosathi.com, the client portal and the studio app at app.photosathi.com (together, the “Service”).
1. Information we collect
a) When you request a demo
- Your name, studio or company name, mobile number, city, and the type of business you select.
- The language you were viewing the website in.
b) When a studio adds a booking
Studios using Photo Sathi enter details about their clients so the client portal can show them. This can include:
- Client name, email address and phone number.
- Event type, dates, times, venues and the names of the team covering the event.
- Payment amounts, due dates and payment status (we do not collect card or bank details).
- Album and gallery status and gallery links.
- The agreement text shared with the client.
c) When a studio sends a quotation or adds an enquiry
- For an enquiry (lead): name, phone number, email, city, event details, budget and where the enquiry came from.
- For a quotation: the client’s name, email and phone number, the event details and the prices listed.
- If the client accepts a quotation online: the name they type and the date and time of acceptance.
- The studio’s own business details shown on quotations — address, GST number, and the logo and signature image it uploads.
d) When a client signs an agreement
- The name typed by the client and the email address the one-time code was sent to.
- The date and time of signing, basic browser/device information, and a digital fingerprint (SHA-256 hash) of the agreement text, kept as a record of what was signed.
e) Studio admin accounts
- Your name, email address and a securely stored password when you create a studio account. For team member logins created by a studio: the member’s name, username and a securely stored password.
- Your studio’s details: studio name, business type, WhatsApp number, email and city.
- Which studios you belong to and your role in each (Owner, Admin, Sales, Editor or Photographer), and who created each team member login.
f) Technical information
- Like most websites, our hosting and database providers keep standard logs such as IP address, browser type and request time, for security and troubleshooting.
2. How we use information
- To contact you about a demo you requested.
- To show clients their booking details, schedule, payments and albums in the client portal.
- To send one-time codes by email and record agreement signatures.
- To keep the Service secure, prevent misuse and fix problems.
- To meet legal obligations.
We do not sell or rent personal information, and we do not use it for third-party advertising.
3. Studios and clients
When a studio adds its clients’ details, the studio decides what information is entered and why. The studio is responsible for having its clients’ permission to share those details with Photo Sathi. Clients who want their booking information changed or removed can contact their studio or write to us.
Who can see a studio’s data
- Each studio’s data is kept separate. Members of one studio cannot see another studio’s bookings, clients or team.
- Inside a studio, access depends on role — for example, editors and photographers see only client names and event dates, not payments or contact details.
- To run, support and protect the Service, the Photo Sathi team can view studio data in a read-only way. Every such view is recorded in an access log with the date and time.
4. Service providers we use
We rely on a few trusted providers to run the Service. They process data only to provide their service to us:
- Supabase — database and sign-in (one-time codes, admin login).
- Vercel — website hosting.
- Google (Gmail) — sending one-time code emails.
- Vercel Web Analytics — counts page views on our public website pages. It uses no cookies, does not follow you across websites, and does not store your IP address.
- Google Fonts and jsDelivr — loading fonts and website code. These services receive your IP address when the page loads.
Some of these providers may store or process data outside India.
5. Keeping data safe
- All connections use HTTPS encryption.
- Database access is restricted: only signed-in studio admins can manage bookings, and clients can see only their own booking through a private link.
- Signing an agreement requires a one-time code sent to the client’s email, and a signed agreement cannot be edited.
No system is completely secure, but we take reasonable steps to protect your information. Please keep your client portal link private — anyone with the link can view that booking’s portal.
6. How long we keep data
- Demo requests: until they are no longer needed, and generally not longer than 12 months.
- Booking details and signed agreement records: for as long as the studio uses the Service, and afterwards as long as needed for legal, tax or dispute-resolution purposes.
7. Cookies and local storage
We do not use advertising or tracking cookies. Our public website pages count visits with Vercel Web Analytics, which works without cookies; the studio app, the client portal and the gallery, quotation and invoice links are not measured at all. The website remembers your language choice in your browser’s local storage, and the studio app keeps you signed in and remembers which studio you last opened using browser storage. You can clear these from your browser settings at any time.
8. Your rights
Subject to applicable Indian law, including the Digital Personal Data Protection Act, 2023, you can ask us to:
- Tell you what personal information we hold about you.
- Correct or update inaccurate information.
- Delete your information when it is no longer needed.
- Withdraw consent you have given, where applicable.
We may need to keep some records (for example, signed agreement records) where the law requires or allows it.
9. Children
The Service is meant for studios and adult clients. We do not knowingly collect personal information directly from children.
10. Changes to this policy
We may update this policy from time to time. The effective date at the top will show when it last changed.
11. Contact and grievances
For any question, request or complaint about your personal information, contact:
We aim to respond within 30 days.