Privacy Policy & Biometric Shield
Effective Date: November 12, 2026 • Studio OS Technologies Pvt Ltd (Raipur, Chhattisgarh, India)
1. Institutional Role & Intermediary Scope
InstantGallery (operated by Studio OS Technologies Pvt Ltd) operates strictly as a cloud-based technical intermediary and Data Processor under the Information Technology Act, 2000 and the Digital Personal Data Protection (DPDP) Act, 2023.
Independent wedding photography studios and cinematographers acting as Data Fiduciaries upload media and invite guests. InstantGallery processes images and phone numbers strictly pursuant to the documented instructions of the host studio.
2. InstantFace™ Biometric Neural Shield (DPDP Act 2023)
To allow wedding guests to locate their photographs quickly via WhatsApp or web QR scan, InstantGallery utilizes proprietary facial indexing algorithms:
- One-Way Mathematical Vectors: When a guest uploads a reference selfie, our engine computes a 512-dimensional normalized unit vector. Raw facial photographs are never stored in a public biometric repository.
- Zero Public AI Model Training: Client photographs and guest biometric vectors are never used, licensed, or sold to train open-source or commercial generative foundation models.
- Strict Event Isolation: Facial vector search operates strictly within the boundary of the specific wedding gallery to which the guest was granted access.
3. Zero Third-Party Data Monetization
We maintain an absolute prohibition against data monetization:
- We never sell, rent, monetize, or trade client phone numbers, WhatsApp communications, or metadata.
- We do not deploy third-party advertising tracking pixels or behavioural retargeting brokers.
- Guest phone numbers captured during WhatsApp photo delivery are delivered solely to the hosting studio for direct client communications.
4. Self-Serve Erasure & Data Retention
Under Section 12 of the DPDP Act 2023, data principals hold the absolute right to correction and erasure.
Any wedding guest or couple may request immediate permanent deletion of their facial embeddings, contact records, or gallery assets by sending a written notice to grievance@business-online.in. Requests are validated and irreversibly purged across edge nodes within 72 hours.
5. Statutory Grievance Redressal & Jurisdiction
In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act 2023, the details of the Grievance Redressal Officer are as follows:
Exclusive jurisdiction for any legal proceeding arising under this policy shall rest solely in the competent courts situated in Raipur, Chhattisgarh, India.