Privacy policy

Who this covers

CamSetu is operated by [Registered entity name]. This policy covers two different kinds of people, and it matters which one you are.

Studios are our customers: photography studios, wedding planners and event teams who hold an account with us.

Guests are the people who receive a gallery link from a studio. Guests do not have an account with us, and the studio — not CamSetu — decides which photos are in a gallery and who may see it.

What we collect from studios

When you sign up we collect your studio name, your name, your email address and your mobile number. If you sign up with Google we receive your name, email address and profile picture from Google — nothing else, and we never receive your Google password.

We record which plan you are on, when you subscribed, and a record of each payment (amount, date, and the payment reference from our gateway). We never see or store your card details — those go directly to Razorpay, our payment gateway.

While you use the panel we keep operational records: uploads you make, storage used against your plan, and diagnostic logs from the desktop uploader when something fails. These exist so we can tell you why an upload did not finish.

Photos you upload

Photos you upload stay yours. We store them so we can serve them to the guests you share them with, and we generate smaller versions for previews and downloads.

We do not sell your photos, use them to advertise CamSetu, or show them to anyone you have not shared them with. If we ever wanted to feature a studio’s work we would ask first.

Deleting an event deletes its photos and their generated versions from our storage. Backups may lag behind by a short period before they age out.

Face matching, explained plainly

CamSetu’s main feature is that a guest can take a selfie and get only their own photos. That works by computing a numeric representation (an “embedding”) of each face in the event’s photos, and comparing it with an embedding of the guest’s selfie.

Two things worth being clear about. First, these embeddings are derived from photographs the studio uploaded, and are used only to group and match faces within that studio’s own events — never across studios, and never to identify anyone against any outside database. Second, a guest’s selfie is used to run the match and is not published in the gallery.

Face data is deleted when the photos it came from are deleted. A guest who wants their selfie and match removed can ask the studio, or contact us directly using the details below.

What we collect from guests

To open a gallery a guest may need to confirm a mobile number, and to use face matching they submit a selfie. We keep a record of which gallery they joined so the studio can see who has access.

We do not build advertising profiles of guests, and a guest’s details are visible to the studio whose event they joined — not to other studios.

Who else touches your data

We use a small number of service providers, and only for the job named: Razorpay for payments, Resend for sending email, Cloudflare for hosting and storing files, and a self-hosted analytics service for anonymous usage statistics about the website.

We do not sell personal data, and we do not share it for anyone else’s advertising.

How long we keep things

Event photos and their face data are kept while the event exists, and are deleted when you delete it.

Account and payment records are kept while your account is active and for as long afterwards as tax and accounting rules require.

Diagnostic logs are short-lived and are removed automatically.

Your choices

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Studios can delete most of it themselves from the panel; for anything else, write to us.

If you are a guest and want your selfie, your face match or your access record removed, you can ask us directly — you do not have to go through the studio.

Contact us

Email [email protected] with any privacy question, or to exercise any of the choices above. We aim to reply within a few working days.

Grievance officer: [Name and address to be added before launch, as required under Indian data-protection rules.]

Changes to this policy

If we change how we handle personal data we will update this page and change the date at the top. If a change is significant we will tell studios by email rather than relying on you to notice.