1. Overview & Commitment
[PLACEHOLDER: Studio & Client Trust Pledge] BBS Gallery is built from the ground up for professional photo studios and their clients. We believe client photos are sacred family memories. We do not sell client personal data, do not use client photographs to train public artificial intelligence models, and do not track client browsing outside of gallery selection activities.
This policy applies to both photo studio administrators who create accounts ("Studios") and clients or family members who view proofs and submit selections ("Clients").
2. Information We Collect
We collect only the minimum necessary data to provide fast, reliable proofing and selection workflows.
2.1 Studio Account Information
[PLACEHOLDER: Studio Account Data] When a photographer registers for BBS Gallery, we collect their studio name, business contact email, phone number, password hash, and optional branding assets (studio logo and brand accent color).
Billing information such as billing address and transaction identifiers are collected and processed securely by our certified payment gateways (Razorpay / Stripe). We never store raw credit card numbers on BBS servers.
2.2 Client Gallery Information
[PLACEHOLDER: Client Proofing Data] When clients access a gallery, they never create a formal password-protected user account. We collect only: (a) optional gallery PIN verification state, (b) self-reported first name or role tag (e.g., 'Bride', 'Rohan') used to distinguish selector colors, and (c) selection data including hearted photo IDs and retouching comments.
2.3 Uploaded Photographs & Metadata
[PLACEHOLDER: Photo Storage Policy] Studios upload web-optimized photo proofs (JPEGs/WebPs) to generate client galleries. We process and store image dimensions, aspect ratios, file names, and EXIF timestamp data to render responsive masonry grids. Original full-resolution RAW files remain solely on the photographer's local storage or backup drives.
3. How We Use Your Information
We use collected information strictly to deliver, maintain, and optimize gallery delivery services, including:
[PLACEHOLDER: Purpose of Processing] (1) Enabling real-time concurrent photo selections among multiple family members; (2) Generating downloadable CSVs and one-click Lightroom filter strings for photographers; (3) Sending automated gallery deadline and completion notifications via email and WhatsApp; (4) Monitoring platform reliability, upload speeds, and server health.
4. Data Sharing & Third Parties
[PLACEHOLDER: No Third-Party Selling] We do not sell, rent, or monetize personal information or photographs to advertisers, data brokers, or external marketers.
We share data exclusively with trusted infrastructure providers bound by strict confidentiality and data protection agreements:
• Cloud Hosting & Storage: AWS / Cloudflare (encrypted storage of proof thumbnails and static assets)
• Transactional Notifications: Twilio / Meta WhatsApp Business API (delivery alerts requested by the studio)
• Payment Processing: Razorpay / Stripe (PCI-DSS Level 1 compliant payment handling)
5. Data Retention & Deletion
[PLACEHOLDER: Automatic Gallery Expiry Policy] Galleries have strict, studio-configured lifespans (7 days on Free, up to 180 days on Starter, up to 365 days on Pro). When a gallery expires or is deleted by the studio administrator, all associated proof images and cached selection data are permanently purged from active servers within 30 days.
Studio owners can manually delete any gallery or entire studio account at any time with immediate effect via Studio Settings.
6. Client Rights & Data Access
[PLACEHOLDER: Privacy Rights under GDPR / DPDP] Depending on your jurisdiction (including the EU GDPR and Indian Digital Personal Data Protection Act), studios and clients have the right to request access to, correction of, or permanent deletion of their personal data.
Because client galleries are managed directly by photo studios, clients may contact their photographer or write directly to our privacy officer at privacy@bbsgallery.com to exercise their rights.
8. Contact & Data Protection Officer
If you have questions or concerns regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:
[PLACEHOLDER: Legal Contact Address] BBS Gallery Atelier Technologies Pvt. Ltd., Attn: Privacy Operations, Bangalore, Karnataka 560001, India. Email: privacy@bbsgallery.com.