Privacy Policy

Studio OS ("we", "us", or "our", hosted at business-online.in) is committed to protecting your personal data and privacy. This Privacy Policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act, 2023) of India and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By accessing the Service, you consent to the collection, processing, and storage of your personal data as strictly outlined in this Policy.

Account Identity Data: Full Name, personal Gmail address, and 10-digit Indian mobile number (+91).

Studio Business Profile Data: Studio Brand Name, Subdomain handle, studio WhatsApp contact number, UPI ID (VPA), primary photography craft, and portfolio biography.

Telemetry & Security Logs: IP addresses, browser user-agent, session cookies, rate-limiting counters, and HTTP access timestamps required for intrusion detection and fraud prevention.

User-Uploaded Gallery Media: Event photographs, video previews, and associated EXIF camera metadata uploaded strictly for private gallery presentation.

Ephemeral Facial Landmark Geometric Vectors: Mathematical coordinate embeddings generated during FaceFind™ guest photo discovery. Raw biometric facial images are never stored or extracted as permanent biometric identifiers.

Authentication & Verification: Transmitting 6-digit OTP verification codes via Indian telecom gateways (Fast2SMS) to authenticate account ownership and prevent unauthorized access.

Service Delivery: Provisioning your customized white-label subdomain portfolio and client gallery presentation website.

Payment Software Utilities: Displaying studio-configured direct UPI QR codes and transmitting client-uploaded payment verification proofs directly to the studio owner dashboard via bank-grade UTR reference and dual-verification settlement protocol.

No Banking Credentials Collected: Studio OS NEVER collects, stores, or processes bank account login credentials, debit/credit card numbers, CVVs, or UPI PINs. All financial settlement occurs directly between bank accounts.

Platform Security: Enforcing multi-tier sliding-window rate limiting, DDoS mitigation, and anti-fraud protections.

Studio OS engages vetted, ISO-27001 and SOC 2 certified cloud infrastructure providers:

Cloudflare Inc.: Edge CDN delivery, DNS routing, and Cloudflare R2 encrypted object storage for media and verification receipts.

Supabase / Neon Inc.: Hosted PostgreSQL relational database with automated backups and AES-256 encryption at rest.

Fast2SMS: Indian DLT-registered telecom SMS gateway for transactional OTP delivery.

Vercel Inc.: Serverless edge computing runtime and Anycast global CDN.

Private Receipt Transmission: Client-uploaded payment verification proofs are encrypted in transit and at rest, accessible strictly by the verified studio owner via bank-grade UTR reference and dual-verification settlement protocol to approve high-res delivery. Studio OS never shares receipts with external entities.

ZERO DATA BROKERING: Studio OS does NOT sell, rent, monetize, trade, or share user or client personal data with third-party advertisers, data brokers, or marketing networks.

In strict compliance with India's Digital Personal Data Protection (DPDP) Act, 2023, facial landmark geometric vectors generated during FaceFind™ guest photo discovery are processed solely to facilitate event attendee self-discovery.

Biometric vector embeddings are ephemeral mathematical representations; raw facial biometrics are never extracted or stored as permanent identifiers.

Biometric vectors are never sold, rented, monetized, or shared with third parties, and are permanently purged within thirty (30) days of event gallery archival.

Event guests and attendees retain the statutory right to withdraw consent and request immediate expungement of their biometric index at any time via the Grievance Officer.

Data in Transit: All communications between your browser, Studio OS edge servers, and APIs are encrypted using TLS 1.3 encryption protocols.

Data at Rest: Database volumes, user records, and cloud storage buckets are encrypted using industry-standard AES-256 bit encryption.

Tenant Isolation: PostgreSQL schemas implement strict Row-Level Security (RLS) policies ensuring complete data isolation between different photography studios.

Right to Access & Summary: You may access and review your stored personal and studio profile data at any time via your Studio OS Dashboard.

Right to Correction: You may update or correct incomplete, inaccurate, or outdated profile details directly in your account settings.

Right to Erasure (Account Deletion): You have the right to request permanent account deletion. Upon verification, all your profile data, media files, and subdomain bindings will be permanently expunged within thirty (30) business days, subject to legally mandated financial audit retention.

Studio OS utilizes only strictly necessary functional and security session cookies required to keep you authenticated and protect against Cross-Site Request Forgery (CSRF).

We do not deploy third-party advertising tracking cookies, Facebook pixels, or cross-site tracking scripts.

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines) Rules, 2021, and the DPDP Act, 2023, the designated Grievance Officer details are:

Officer Name: Grievance & Compliance Officer (Parinay Technologies / Studio OS)

Designation: Grievance & Compliance Officer, Studio OS

Official Grievance Email: legal@business-online.in / support@business-online.in

Registered Physical Office: Parinay Technologies, Near Sun City, Raipur, Chhattisgarh – 492001, India

Response Time: Grievances are acknowledged within 24 hours and resolved within fifteen (15) business days in accordance with statutory guidelines.