Privacy
Your data, in plain words
LensPilot Gallery is a delivery and proofing tool for photographers. It is run by [Company legal name], [Registered office address]. This page covers three kinds of people: the photographers who use it, their clients, and the guests at their events.
If you are a photographer
- To sign in you give us your phone number, and we send a one-time code to it on WhatsApp. If you sign in with Google instead, Google shares your name and email address with us.
- Your studio details: your name, studio name, logo and the settings you choose.
- Your photographs and videos. The file you upload is stored exactly as you sent it. The previews your clients see have location and camera details removed.
- Your clients’ details that you type in: names, phone numbers, email addresses and your notes.
- Your team: the names and phone numbers of people you add to your team, such as a second shooter.
- Payments go through Razorpay’s own checkout. Your card or UPI details go to Razorpay, not to us; we keep the record of what was paid.
If you are a photographer’s client
- You do not need an account. Your photographer sends you a private link, and they can add a PIN to it.
- When you pick favourites or leave comments, we store them so your photographer can see them.
- If you or your photographer name people in your photos (“the bride’s mother”), we keep that name, a small face crop and a face signature so the photos they appear in can be grouped. The photo used to name them is not kept. This is only ever compared against your own events, never another client’s, and it is deleted 365 days after the last activity for you as a client — or straight away if the photographer removes you.
- If you booked through the LensPilot marketplace, your name and phone number come across with the booking.
If you are a guest at an event
Some photographers put a QR code at their events so guests can find their own photos. Nothing happens until you agree.
- You see what happens before the camera opens, and you tick a box yourself. It is never pre-ticked.
- Your selfie is not stored. It is turned into a face signature — a row of numbers that cannot be turned back into a face — and the picture is thrown away in the same moment. The signature is compared only against that photographer’s photos from the event you chose. To do that, the faces in that event’s photos are turned into signatures too.
- We keep your phone number so we can send your personal photo link on WhatsApp, and tell you when new photos of you are added.
- Reply STOP on WhatsApp and the messages stop — from that photographer and from every other photographer on LensPilot. We also pass the STOP to the LensPilot marketplace, which sends from the same WhatsApp number, so it stops too.
- Family members are optional. You can add a child or parent with their photo, only as their parent or guardian or with their agreement, and you tick a box to say so. We do not ask for their phone number. Their photo is handled like your selfie, and you can remove them at any time.
- One optional question: whether you have an occasion coming up. If you answer yes, your name and number go to that one photographer as a contact, and they may follow up. If you say no, we record nothing.
- We limit marketing messages: a number is sent at most one marketing message every 30 days, counted across every photographer on LensPilot, not per photographer.
- When it is deleted: your face signature, your family members, your phone number, the name you typed, the list of photos you were found in and the face signatures from the event’s photos are deleted when the event’s guest window closes — 45 days after the event ends by default. If an event never had a window set, its face data is deleted 12 months after its last activity.
- What stays after that: a short record of the messages we sent to your number and of any STOP, so you are never messaged by mistake; the contact you gave the photographer, if you answered yes; and the photographs themselves, which belong to the photographer’s client.
Where it is kept
- Our server and its database run on Amazon Web Services in Mumbai, India.
- Photographs and videos are stored with Cloudflare R2.
- Making previews runs on Amazon Web Services computing we rent for the job, and finding faces may too. Nothing is kept there.
- Backups are encrypted and copied to a separate storage company on another continent.
- The full-size files in a photographer’s archive — deleted photos and videos after Recently deleted, and locked galleries — are kept with Amazon Web Services in Mumbai, India, for the time described below.
Who else handles it
- Meta (WhatsApp) delivers our WhatsApp messages, including sign-in codes and guests’ photo links.
- Razorpay handles payments.
- Google, only if you choose to sign in with Google.
- Anthropic may be used to reword captions for our own Instagram account. Those captions are written from our own product notes; no photographer, client or guest data is sent.
- A few LensPilot staff can open an account to help with support.
What we do not do
- We do not sell your data, or anyone’s.
- No advertising, no ad trackers and no analytics scripts on this site. Cookies are used only to keep you signed in, remember a gallery PIN and recognise a returning guest’s device.
- Your photographs never appear in our own marketing.
How long we keep things
- A deleted photograph or video waits in Recently deleted for 30 days, where the photographer can restore it.
- After that it moves to the photographer’s archive, where they can bring it back. 180 days after it was deleted, it is permanently deleted automatically and is non-recoverable; the photographer is reminded 15, 7 and 1 day before.
- A gallery the photographer moves to their archive is locked, and is permanently deleted 180 days after it was locked unless they unlock it first. Galleries locked because a photographer’s plan ended follow the renewal rules shown to that photographer instead.
- A gallery has an expiry date — 12 months after the shoot unless the photographer changes it. After it, the client link stops working; the photographs stay in the photographer’s account until they delete them.
- Guest face data: see “If you are a guest” above.
- To close a photographer account and delete its data, write to us at [Privacy contact email]. This is done by our team on request.
Your choices
- You can ask to see, correct or delete what we hold about you.
- If something has to be permanently deleted before its date — including photos or videos already in a photographer’s archive, which cannot be deleted from there by hand — write to us and we delete it.
- Guests and clients: the quickest way is to ask the photographer, who can remove you. You can also write to us.
- Photographers: write to us.
- We aim to reply within [response time, e.g. N days].
Contact and grievances
- Privacy questions: [Privacy contact email]
- Grievance Officer: [Grievance Officer name], [Grievance Officer email], [Registered office address]
Changes
If this page changes, the date at the top changes with it. See also our Terms.