Government Compliance & Regulatory Policies (India)
Compliant with India's Digital Personal Data Protection Act (DPDPA), 2023 & Information Technology Act, 2000
Privacy Commitment: Fotographiya Ventures is committed to protecting the privacy, identity, and raw media assets of studios, wedding clients, and freelance creators. We do not sell, rent, or trade your personal or financial data to any third-party brokers.
Fotographiya Ventures Pvt. Ltd. acts as the Data Fiduciary under the Digital Personal Data Protection Act, 2023. We collect the following categories of information:
We process personal data strictly under specified lawful grounds, including performance of contracts and explicit user consent:
Matching studio crew vacancies with nearby qualified creators based on verified gear and city radius.
Releasing milestone advance deposits to creators upon verified check-in and wrap card checksum verification.
Facilitating private, password-protected photo selection portals and wedding film streaming for couples.
Issuing GST tax invoices, maintaining digital transaction logs, and fulfilling statutory audits.
The Company maintains encrypted cloud backups of all delivered client gallery media for 6 months from the date of final project handover. After 6 months, archived media may be permanently deleted from primary hot servers. Clients and studios are instructed to download and archive all masters onto offline hard disks upon receipt.
4.1 All sensitive communications and financial transactions are encrypted in transit via TLS 1.3 / HTTPS and at rest using AES-256 encryption.
4.2 All primary database records are hosted within certified Tier-4 data centers located in India (Mumbai / Hyderabad regions) adhering to Indian data localization mandates.
4.3 Sub-processors utilized include authorized RBI payment aggregators (Razorpay / Cashfree), cloud infrastructure providers (AWS / Cloudflare), and transactional SMS/WhatsApp gateways.
Under the Digital Personal Data Protection Act, 2023, you have the following enforceable rights:
The Fotographiya mobile application (Identifier / Package: crm.fotographiya.com) requests the following device permissions solely to provide core field management and CRM services:
Fotographiya collects location data (both approximate and precise, including in the foreground and background when the app is closed or minimized) strictly when a photography crew member or freelancer is on an Active Event / Operation Assignment.
Why it is needed: This data allows Studio Operation Heads (OPM/OPH) to view the live radar of assigned crew, coordinate emergency arrival times at event venues, and verify check-in at client muhurat locations. Location tracking is active only during active operation sessions, is never shared with third-party advertising brokers, and can be disabled by checking out of the active event.
Used to capture and upload profile pictures, equipment serial stickers, shoot wrap summaries, and deliverable previews.
Used to deliver time-critical assignment alerts, lead notifications, customer contract updates, and payout confirmations.
We respect your right to be forgotten. Users and freelance creators can request the complete and permanent deletion of their account and associated data through two methods:
Send an email from your registered account to privacy@fotographiya.com with the subject line "Request Account Deletion".
Our Data Protection Officer will verify and completely purge your authentication credentials, device tokens, and personal profile from active servers within 30 days.