Terms
What happens to your photographs
Deleting and recovering
- Delete a photograph or video and it waits in Recently deleted for 30 days. You restore it yourself, instantly and at no cost, and your client’s picks and comments come back with it.
- After that it moves to your studio’s archive. You can still see it there and bring it back yourself until 180 days after you deleted it. Each month the first 10 GB you bring back is free; beyond that it costs ₹50 per GB, and you see the price before you confirm.
- 180 days after you deleted it, it is permanently deleted automatically and is non-recoverable. We remind you 15, 7 and 1 day before.
- A gallery you move to your archive is Locked: you and your client can still browse it in preview quality, and full-size downloads pause until you unlock it. It is permanently deleted 180 days after it was locked unless you unlock it before then, and we remind you 15, 7 and 1 day before. Galleries locked because your plan ended are not covered by this: they follow the renewal rules shown to you while your studio is locked.
- Your archive is 50% of your plan’s storage, shared by locked galleries and deleted photos and videos. When it is full, deleting needs a bigger plan, or you can delete permanently instead.
- Delete permanently deletes at once, is non-recoverable, and skips Recently deleted and the archive. It is offered when you delete, in Recently deleted and when your archive is full — not inside the archive, where things are permanently deleted on their date. If you need something deleted sooner for a legal or privacy reason, write to us and we delete it.
- Deleting a whole gallery, or your account, removes what it contained on the same footing — the free window first, and no recovery we have not described above.
Where the copies sit
- Every hour the database is copied off this server, encrypted before it leaves to a key we do not keep here. It can write a backup it cannot itself read.
- Your photographs go to another company's storage, on another continent. Nobody — us included — can delete them for 44 days.
- That copy only ever adds: the thing a backup has to survive is exactly the thing that deletes.
- And we have taken that encrypted copy back out, restored it, and checked that what came back matched.
Keep your cards until you’ve delivered
We are a delivery and proofing tool, not your archive. Those copies are our insurance against losing your work, not a restore button we hand you. Your as-shot file stays yours to download, untouched. But nothing on the internet replaces the copy in your own hands.
What we do with the photographs & client privacy
- Original files remain untouched: What came off your camera card is stored byte-for-byte with original EXIF intact. Nothing in our pipeline alters or overwrites your master files.
- Previews stripped of sensitive metadata: Client preview images have EXIF, GPS coordinates, and device tags stripped before display, protecting client privacy while keeping photos upright.
- Watermarks burned into pixels: Proofs carry watermarks baked directly into the pixel data, not rendered as CSS overlays. Saving the preview preserves the watermark.
- Guest selfies are never retained: When a guest takes a selfie for event matching, the image is converted to a vector representation, matched in real time, and discarded in the exact same request. The selfie itself is never stored on disk or database.
- Matching tuned for precision over recall: Matching prioritizes precision so guests only receive their own photos. If uncertain, a guest sees “nothing yet”, which is recoverable, while sending someone a stranger's photos is not.
- Controlled master downloads: Full-resolution files stay locked until you release them. If released by mistake, locking the gallery immediately invalidates the download link.
What we do not promise
No uptime figure, no durability percentage and no service-level agreement. We have not published one because we have not measured one, and a number we cannot stand behind is worth less to you than its absence.