Legal
Privacy Policy
We collect only what is needed to run Photo Sathi — your demo request, and the booking details a studio adds for its clients. We never sell your data. You can ask us to see, correct or delete it any time at thephotosathi@gmail.com.
Hum sirf utni jaankari lete hain jitni service chalane ke liye zaroori hai. Aapka data kabhi becha nahi jaata. Dekhne, sudharne ya delete karwane ke liye upar diye email pe likhein.
This policy explains how Photo Sathi (“Photo Sathi”, “we”, “us”), operated by Nilesh Sabhadya from Surat, Gujarat, India, collects, uses and protects personal information when you use photosathi.com, the client portal and the studio admin panel (together, the “Service”).
1. Information we collect
a) When you request a demo
- Your name, studio or company name, mobile number, city, and the type of business you select.
- The language you were viewing the website in.
b) When a studio adds a booking
Studios using Photo Sathi enter details about their clients so the client portal can show them. This can include:
- Client name, email address and phone number.
- Event type, dates, times, venues and the names of the team covering the event.
- Payment amounts, due dates and payment status (we do not collect card or bank details).
- Album and gallery status and gallery links.
- The agreement text shared with the client.
c) When a client signs an agreement
- The name typed by the client and the email address the one-time code was sent to.
- The date and time of signing, basic browser/device information, and a digital fingerprint (SHA-256 hash) of the agreement text, kept as a record of what was signed.
d) Studio admin accounts
- Email address and a securely stored password for people who sign in to the admin panel.
e) Technical information
- Like most websites, our hosting and database providers keep standard logs such as IP address, browser type and request time, for security and troubleshooting.
2. How we use information
- To contact you about a demo you requested.
- To show clients their booking details, schedule, payments and albums in the client portal.
- To send one-time codes by email and record agreement signatures.
- To keep the Service secure, prevent misuse and fix problems.
- To meet legal obligations.
We do not sell or rent personal information, and we do not use it for third-party advertising.
3. Studios and clients
When a studio adds its clients’ details, the studio decides what information is entered and why. The studio is responsible for having its clients’ permission to share those details with Photo Sathi. Clients who want their booking information changed or removed can contact their studio or write to us.
4. Service providers we use
We rely on a few trusted providers to run the Service. They process data only to provide their service to us:
- Supabase — database and sign-in (one-time codes, admin login).
- Vercel — website hosting.
- Google (Gmail) — sending one-time code emails.
- Google Fonts and jsDelivr — loading fonts and website code. These services receive your IP address when the page loads.
Some of these providers may store or process data outside India.
5. Keeping data safe
- All connections use HTTPS encryption.
- Database access is restricted: only signed-in studio admins can manage bookings, and clients can see only their own booking through a private link.
- Signing an agreement requires a one-time code sent to the client’s email, and a signed agreement cannot be edited.
No system is completely secure, but we take reasonable steps to protect your information. Please keep your client portal link private — anyone with the link can view that booking’s portal.
6. How long we keep data
- Demo requests: until they are no longer needed, and generally not longer than 12 months.
- Booking details and signed agreement records: for as long as the studio uses the Service, and afterwards as long as needed for legal, tax or dispute-resolution purposes.
7. Cookies and local storage
We do not use advertising or tracking cookies. The website remembers your language choice in your browser’s local storage, and the admin panel keeps you signed in using browser storage. You can clear these from your browser settings at any time.
8. Your rights
Subject to applicable Indian law, including the Digital Personal Data Protection Act, 2023, you can ask us to:
- Tell you what personal information we hold about you.
- Correct or update inaccurate information.
- Delete your information when it is no longer needed.
- Withdraw consent you have given, where applicable.
We may need to keep some records (for example, signed agreement records) where the law requires or allows it.
9. Children
The Service is meant for studios and adult clients. We do not knowingly collect personal information directly from children.
10. Changes to this policy
We may update this policy from time to time. The effective date at the top will show when it last changed.
11. Contact and grievances
For any question, request or complaint about your personal information, contact:
We aim to respond within 30 days.