Privacy policy
Who we are
NVX Studio is run by NVX Technologies ("NVX", "we"). Photographers, studios, venues and event hosts ("studios") use NVX Studio to deliver event photos and videos to their guests.
For photos in a studio's gallery, the studio decides what is collected and why. Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") the studio is the Data Fiduciary for that gallery and NVX processes the data on the studio's behalf. For studio accounts, billing and this website, NVX is the Data Fiduciary.
What we collect
- Studio accounts: name, email, phone, studio name, business and GST details, team members' names and emails, and records of payments. Card, UPI and bank details are handled by Razorpay; we never see or store them.
- Event photos and videos uploaded by a studio, its team, its cameras, or by guests when the studio allows guest uploads.
- Details guests choose to give us: your name and WhatsApp number when you ask for photo updates; your name, phone, reply and note when you RSVP to an invitation; your name, email and phone when you buy photos; your name and photos when you add photos to a gallery; your name, contact and message when you ask for a photo to be removed.
- On your device only: favourites, your RSVP and similar preferences are kept in your browser's local storage, not on our servers.
- Technical data: IP address and browser details in server logs, used to keep the service secure and to stop abuse.
- Analytics, only if you agree: a studio can add Google Analytics or a Meta Pixel to its galleries. They load only after you tap "Allow". NVX itself uses no advertising cookies.
Selfie search and faces
Selfie search helps you find the photos you appear in. It works only after you tick the box to agree.
- Your selfie is analysed in your own browser. It is never uploaded.
- Only a face signature (a list of 128 numbers) is sent to find matching photos. It is used once for that search and is not stored.
- To make search possible, face signatures of the people in the event photos are made in the studio's browser and kept with those photos. They are deleted when the photos are deleted.
- In private galleries, guests see only the photos that match their own selfie.
Why we use it
- To run galleries, find your photos, and deliver what you bought.
- To send the WhatsApp updates you asked for, and to pass RSVPs and removal requests to the studio.
- To bill studios, issue tax invoices and meet our legal duties.
- To keep NVX Studio secure, fix problems and answer support requests.
We use data only with your consent or for these purposes, as the DPDP Act allows. We don't sell personal data, and we don't use your photos to train AI models or for advertising.
Who we share it with
- The studio that ran your event, and its team.
- Razorpay, to take payments and run subscriptions.
- Meta (WhatsApp Business), only to send the WhatsApp messages you asked for.
- Our hosting and storage providers, which keep the service running under contract with us.
- Authorities, when Indian law requires it.
How long we keep it
- Photos and guest details stay while the studio keeps the gallery. Studios can delete photos and events at any time; deleted files are removed from our storage and backups within 30 days.
- Selfies are never kept. Search face signatures are discarded after each search.
- Invoices and payment records are kept as long as tax law requires.
- Studio account data is deleted on request once any legally required records have been kept.
Your rights
Under the DPDP Act you can ask for a summary of the personal data we hold about you, ask us to correct or erase it, withdraw your consent at any time, nominate someone to act for you, and raise a grievance with us.
- To take down a photo of you, open the gallery and tap Ask to remove a photo of me. The studio is told straight away.
- To stop WhatsApp updates, reply STOP to the message.
- For anything else, contact our Grievance Officer below. If you're not satisfied with our reply, you can complain to the Data Protection Board of India.
Children
Events often include children, photographed by the event's photographer at the request of their families or hosts. Selfie search, RSVPs and other guest forms are not meant for anyone under 18 without a parent's or guardian's agreement. Parents can ask for a photo of their child to be removed using Ask to remove a photo of me or by contacting us.
Security
Everything is sent over encrypted connections. Passwords are stored only as salted hashes. Studios control who can see each gallery, and private galleries show each guest only their own photos. No system is perfectly secure; if a breach affects your data, we will tell you and the Data Protection Board as the law requires.
Grievance Officer
Grievance Officer, NVX Technologies, India. Write to us through our contact page. We reply within 30 days.
Changes
If we change this policy, we'll update the date at the top and, for important changes, tell studios in the app before the change takes effect.