Privacy Policy

1. Introduction

Studiora (“Studiora”, “we”, “us”) is a photo-studio platform operated by Webrex Studio, A-806 Money Plant High Street, Jagatpur Road, Sarkhej–Gandhinagar Highway, near BSNL Office, Gota, Ahmedabad, Gujarat 382470, India. It lets studio owners, crew members, clients and event guests capture, upload, manage and view event photographs in real time. This policy explains what we collect through the Studiora mobile app and studiora.webrexstudio.com, why we collect it, and what control you have over it. Contact: [email protected].

2. Who this policy covers

Studio owners, photographers and crew members, studio clients, and gallery guests who open a shared gallery link.

3. Our role

For account holders we are the data controller. For content a studio uploads — event photos, client records, staff records — we act as a processor on that studio's behalf: the studio decides what is uploaded and for how long it is kept, and is responsible for obtaining consent from the people appearing in those photos.

4. Information we collect

• Account information. Name, email address, mobile number, role (Owner / Crew / Client), profile photo, and a securely hashed password. A mobile number is required so it can be used as a login identifier.
• Studio and business records. Studio name and address, bookings (client name, email, phone, venue, dates, package and payment amounts), invoices, tasks, and staff records (name, contact details, role, salary). This information is entered by the studio owner, not by us.
• Photos and event content. Photographs captured in-app or transferred from a connected camera, along with event name, timestamps, image metadata and the camera or device used.
• Guest details. If a guest registers for a face-match gallery we store the name, and optionally the mobile number and email, that they provide, plus an access token saved in their browser.
• Technical logs. When the app or website talks to our servers, those servers record standard request logs — IP address, timestamp and error details — which we use to keep the service running and secure. The app does not include any crash-reporting, analytics or advertising SDK, and it does not send us a device identifier.

5. Permissions the app requests and why

• Camera. To take photos in-app and to scan QR codes for joining an event.
• Photos / media (READ_MEDIA_IMAGES). To read the images you choose to upload and images downloaded from a connected camera. We access only the images required for the upload you start — we do not scan your gallery.
• Wi-Fi / local network, nearby devices, and location. Required to discover and connect to your DSLR or camera on the same Wi-Fi network. Android requires the location permission for Wi-Fi network scanning; Studiora does not collect, store, or transmit your location, and does not use it for advertising.
• Foreground service / background data sync. So photo uploads continue while a shoot is in progress. A persistent notification is shown whenever this runs.
• Notifications. To alert you about upload status, tasks and event reminders.
• Biometric unlock (fingerprint / face unlock). Handled entirely by your device's operating system to unlock the app. Studiora never receives, sees, or stores your fingerprint or device face-unlock data. This is unrelated to the face-match feature described above.

6. How we use information

• To provide the core service — uploading, storing, organizing and sharing event photos.
• To authenticate users and protect galleries.
• To match a guest's selfie to their own photos when they request it.
• To manage bookings, invoices, staff and tasks for the studio.
• To send account, security and support communications.
• To maintain, troubleshoot and improve the service.

7. What we do not do

• We do not sell or rent personal information.
• We do not show ads or use advertising identifiers.
• We do not use third-party analytics or tracking SDKs.
• We do not use your photos or face data to train any AI model, or for any purpose other than delivering the service.

8. How we share information

• Photos and event data are visible only to the people authorized for that event — the studio owner, assigned crew, and clients or guests holding a valid gallery link.
• We use cloud hosting and storage providers who process data on our behalf under confidentiality obligations.
• Face recognition is performed on our own servers, not by any third-party face-recognition service.
• We disclose information when required by law, or to protect the rights, safety and security of our users and the service.

9. Data retention and deletion

We keep information while your account is active. You can request deletion of your account and associated data at any time at studiora.webrexstudio.com/delete-account or by emailing [email protected].

• We complete verified deletion requests within 30 days; residual copies in encrypted backups are removed within a further 90 days.
• Guests can ask to have their face template and matched-photo record deleted. Doing so does not delete the event photos themselves, which belong to the studio.
• We may retain limited records where the law requires it.

10. Security

• All traffic between the app and our servers uses HTTPS/TLS.
• Passwords are stored only as salted hashes.
• Sessions use bearer tokens, and accounts lock temporarily after repeated failed login attempts.
• Gallery access requires a unique event code.

No system is perfectly secure, but we apply reasonable technical and organizational measures.

11. Your rights

You may access, correct, export or delete your personal information, withdraw consent for face matching, and object to processing, by contacting [email protected]. Depending on where you live, you may also have rights under India's DPDP Act 2023, the GDPR or similar laws, including the right to complain to your data protection authority.

Grievance contact: Angel Ubhadiya — [email protected]

12. Children

Studiora is intended for professional photo studios and their clients and is not directed to children under 13; we do not knowingly create accounts for them. Event photographs may include minors — the studio and the event organizer are responsible for obtaining guardian consent, and we will remove such images or face templates on request.

13. International transfers

Data is stored on servers located in India. If we transfer data across borders, we apply appropriate safeguards.

14. Changes to this policy

We may update this policy. When we do, the “Last updated” date above will change, and significant changes will be announced in the app or on the website.