Privacy Policy

[Lingsaa legal name] runs LINGSAA AMS. For your studio account and billing, Lingsaa decides how the data is used (Data Fiduciary under India's Digital Personal Data Protection Act, 2023).

For the photos, videos and client details a studio uploads, the studio decides why they are collected and Lingsaa processes them on the studio's behalf. Clients and guests should contact the studio first about their data; we help studios answer those requests.

Account details: name, email, phone, studio name, address, GSTIN, team members and their roles.

Studio content: photos, videos, audio, albums, films, galleries, and client details the studio enters (names, contact details, event dates, quotations, contracts, invoices).

Billing: plan, invoices and payment status. Card and UPI details are handled by the payment provider (Razorpay); we do not store them.

Usage and security: sign-in times, IP address, device and browser, actions in the app (audit log), and error reports, used to keep accounts safe and fix problems.

To group people and let guests find their photos, the app can make a face signature (a list of numbers, not a picture) for faces in a studio's photos. A guest's selfie for "Find my photos" is kept for at most 24 hours.

A studio can switch face recognition off, which deletes the stored face signatures. A client can also say no in their portal for their own projects. Culling's checks (eyes open, focus, smile) don't identify anyone.

To provide the service you asked for: storing and editing your work, running AI tools, delivering galleries, albums and films, sending emails and messages you trigger, and billing.

To keep the service secure, prevent misuse, meet legal and tax duties, and support you when you ask for help.

We do not sell personal data and do not use studio content to train AI models for others.

Only service providers that help run the service, under contract and only for that purpose: hosting and storage, email and SMS / WhatsApp delivery, payments (Razorpay), and an AI provider for some text features (only the text involved, not photos). Integrations a studio switches on itself (for example Google Calendar) receive what that integration needs.

Authorities, when the law requires it.

As long as the studio account is active. When a studio is deleted, its data is removed after the 7-day waiting period, except invoices and records we must keep by law (for example tax records). Backups are overwritten on their normal cycle.

You can see and correct your account details in Settings, export all studio data, and delete your studio or a single client's data (Settings → Privacy & data).

Under the DPDP Act you can ask for a summary of your data, correction, deletion, and to name someone to act for you. You can withdraw consent at any time; this does not affect what was done before.

Grievance Officer: [Grievance Officer name], [email], [postal address]. We reply within 30 days. If you are not satisfied you may complain to the Data Protection Board of India.

Encrypted connections, encrypted sign-in sessions, two-step sign-in for owners and admins, role-based access, encrypted payment keys, audit logs and regular backups. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.

We use only the cookies and browser storage needed for the app to work: your signed-in session, language, theme and similar settings. No advertising cookies.

The service is for businesses, not children. Studios that upload photos of children must have the consent of a parent or guardian.

We will post any change here with a new date and tell you about important changes in the app or by email. Questions: [support email].