Privacy Policy — Cloudflare R2 Encryption & DPDP Act 2023 Compliance

1. Core Principles & DPDP Act 2023 Compliance

This Privacy Policy details the privacy practices of PicXL Visuals ("picy.in", "we", "us", or "our") in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable global data protection standards.

Wedding and event photographs contain deeply personal and emotional moments. Our architecture is deliberately designed around minimal data collection, client-side privacy compression, and zero third-party data monetization.

2. Zero Data Monetization & No AI Model Training GuaranteeGuaranteed

We do NOT sell, rent, broker, or monetize your personal data or your client photographs.

Your wedding photos, couple portraits, family moments, names, phone numbers, and selection choices will never be traded to advertising networks, data brokers, or utilized to train generative artificial intelligence (AI) models.

3. Information We Collect & Why

Photographer & Studio Account Information: Studio name, contact email, phone/WhatsApp number, billing address, and optional GSTIN for tax invoice generation.
Gallery Client Interaction Data: When clients access proofing galleries (via password/PIN), we store selection favorites (photo IDs shortlisted for album print), burst shot tags, and client notes exclusively to deliver proofing reports to the hosting photographer.
Transaction & Billing Records: Subscription payments (e.g. ₹2 trial mandate setup, ₹399/mo standard plan, or ₹499/mo upgrade) are processed securely through certified PCI-DSS compliant Indian payment gateways (Razorpay). Picy does not store credit/debit card numbers or net banking credentials.

4. Cloudflare R2 Encrypted Storage & Zero-Retention Transit

Our visual media pipeline is built on world-class cloud infrastructure:

AES-256 Storage EncryptionAll full-resolution photos, optimized thumbnails, and watermarked proofing assets are encrypted at rest using industry-standard AES-256 keys on Cloudflare R2.

TLS 1.3 Transit SecurityAll data transfers between client mobile devices, photographer workstations, and our servers are protected over TLS 1.3 with automated SSL certificates.

5. Cookies, Local Caching & Client-Side Privacy

We use strictly necessary cookies and browser LocalStorage solely to:

Preserve photographer dashboard authentication sessions.
Enable offline client proofing persistence (so a bride or groom does not lose their 100 shortlisted wedding favorites if their internet drops).
Remember gallery dark/light UI mode preferences.

We do not inject cross-site tracking cookies or third-party behavioral pixels into private client galleries.

6. Your Rights & Data Erasure Workflow

Under the DPDP Act 2023, you have the right to access, rectify, or request complete erasure of your personal data and uploaded photo archives.

To request permanent deletion of a gallery or your entire studio profile, email our team at contact@picy.in. Deletion requests are completed within forty-eight (48) business hours, purging all active records and CDN caches.