VowPix Legal

Privacy Notice

Last updated: November 27, 2025

VowPix (operated by your studio) respects every guest and photographer. This privacy notice explains what we collect, how we process it across Supabase, Cloudflare R2, Modal, Vercel, and Razorpay, and the rights you maintain. We recommend sharing this page with your clients and consulting a legal professional for regional compliance (GDPR, CCPA, DPDPA, etc.).

Definitions

User / Photographer / Studio: Creates a VowPix account to host events and upload photos.
Guest: Opens an event gallery to view or download images.
The Platform: The VowPix web app plus all supporting services.
We act as Data Processor for guests; the event studio remains the Data Controller.

1. Information We Collect

We capture only what is needed to deliver AI-powered galleries securely.

From Photographers

Name, studio details, contact information, Razorpay billing data, and optional branding assets that appear inside the gallery.

From Guests

Selfies to perform the face search
Biometric templates (vectors) derived from selfies and event photos
Contact info if required by the studio (name, email, phone)
Technical logs (IP, browser, device) captured by Vercel + Supabase
Event media uploaded by the studio (stored in Cloudflare R2)

2. How We Use Data

Provision and authenticate event accounts
Index faces via Modal workers so guests instantly find their photos
Deliver images through secured Cloudflare CDN endpoints
Collect payments for premium downloads via Razorpay
Prevent fraud, detect abuse, and troubleshoot product performance
Communicate essential information (invoices, support, service updates)

3. Legal Basis

Contractual necessity for photographers using the SaaS.
Consent for guests sharing biometric data (captured before the scan).
Legitimate interest for analytics, product improvement, and security.

4. Storage & Tech Stack

Supabase for database + auth (encrypted at rest, RLS enforced)
Cloudflare R2 for event media storage and delivery
Modal for ephemeral AI compute (workers shut down after each job)
Vercel for hosting and edge security

5. Retention

Event photos stay online while the studio maintains an active subscription.
Guest selfies are discarded immediately after vectors are generated.
Biometric vectors live inside Supabase until the event or guest asks for deletion.

6. Third-Party Sub‑Processors

Provider	Purpose	Data
Supabase	Database & Authentication	User profiles, face vectors, metadata
Cloudflare R2	Media storage + CDN	Event photos, temporary selfies
Modal	AI face processing	Ephemeral access to photos/selfies
Vercel	Hosting + logs	IP, browser/device data
Razorpay	Payment gateway	Billing metadata (VowPix never stores card numbers)

7. Security

End-to-end TLS/SSL
Row Level Security per event
Ephemeral compute containers
Access logging and periodic audits

8. Your Rights

Depending on your jurisdiction, you can request data access, correction, deletion, or withdraw consent at any time. Contact support@vowpix.in with event details so we can verify you quickly.

9. Children

VowPix is not intended for guests under 13 without parental consent. If any minors are detected in our systems without proper consent we delete the related data immediately.