01.Introduction
This Privacy Policy explains what personal data PhotoLancer collects when you use our marketplace, how we use it, who we share it with, and the rights you have over it. PhotoLancer is based in India and operates under Indian data-protection law, including the Digital Personal Data Protection Act, 2023.
02.Data we collect
We collect the following categories of personal data:
- Account data — name, email, password (hashed), phone number, role (client or photographer).
- Profile and listing data — display name, bio, base city, genres, packages, pricing, portfolio images, social handles.
- Booking data — event details, dates, locations, messages and contracts exchanged between users.
- Payment metadata — booking amount, payment status, gateway references and payout details. We do not store full card numbers, UPI VPAs or bank credentials — these are processed by our payment gateway (Razorpay).
- Usage data — pages viewed, profile views, search queries, device type, IP address, approximate location, and cookies (see our Cookie Policy).
- Communications — messages sent through PhotoLancer, support tickets, and contact-form submissions.
03.How we use your data
We use your data to:
- Create and manage your account, profile and listings.
- Connect clients and photographers, process bookings, and hold funds in escrow.
- Show relevant photographers in search, on category pages and on the homepage.
- Send transactional emails (booking confirmations, payouts, contracts) and important service updates.
- Detect, prevent and respond to fraud, abuse and platform misuse.
- Improve the product through aggregated, de-identified analytics.
- Comply with legal obligations (tax, accounting, lawful requests).
04.Third parties we share data with
We share the minimum data needed with carefully selected service providers:
- Razorpay — payment processing and payouts.
- Lovable Cloud / Supabase — secure database, authentication and file storage.
- Email and notification providers — to deliver transactional emails and alerts.
- Analytics providers — to understand aggregated usage patterns (only when you consent to non-essential cookies).
- Meta / Instagram — only if you choose to connect your Instagram account to import portfolio content.
We do not sell your personal data. We may disclose data when required by law or to protect users and the platform from harm.
06.Your rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or outdated data from your profile and account settings.
- Withdraw consent for optional processing (e.g. analytics cookies).
- Request deletion of your account and personal data (see below).
- Lodge a complaint with the Data Protection Board of India.
07.Data retention and deletion
We keep your data for as long as your account is active. Booking records, invoices and payment metadata may be retained for up to 8 years after the transaction, as required by Indian tax and accounting laws. Aggregated, de-identified analytics may be retained indefinitely.
To request deletion of your account and personal data, email privacy@photolancers.in from the address on file, or use the "Delete account" option in your settings. We will action verified requests within 30 days, except for records we are legally required to retain. If you connected your Instagram / Meta account, the same request also revokes our access and deletes the data we received from Meta.
08.Security
We use industry-standard measures including encryption in transit (TLS), row-level security on our database, hashed passwords and least-privilege access controls. No system is perfectly secure — please use a strong, unique password and report any suspicious activity to us immediately.
09.Children
PhotoLancer is not intended for users under the age of 18. We do not knowingly collect personal data from children. If you believe a minor has provided us data, please contact us so we can remove it.
10.Changes and contact
We may update this Privacy Policy from time to time. Material changes will be highlighted in-app or by email. For privacy questions, contact our grievance officer at privacy@photolancers.in.
This is a template document for PhotoLancer and must be reviewed by a qualified lawyer before launch.