Skip to content
Photomitra

Security & privacy

Guests' photos, handled with care

A face is personal data. Photomitra was built for India's Digital Personal Data Protection Act from the start: guests agree first, keep control, and their data doesn't outlive the event.

For guests

What happens to a selfie

  • Consent first

    A clear screen explains the photo search before any selfie; a parent or guardian agrees for a child.

  • The selfie isn't saved

    It is turned into a numeric face template to find the guest's photos; the image itself is discarded.

  • Deleted with the event

    Face templates are deleted together with the event's photos: 24 hours after the event by default, 30 days at most.

  • Only their photos

    A guest sees the photos they're in; the full gallery opens only if the studio chooses.

  • Delete my data

    Guests can delete their own data from the photo page at any time.

  • Never used for training

    We don't use guests' photos or faces to train AI models, and never sell data.

For studios

How your work is protected

  • Encrypted connections

    HTTPS on every page and download, encrypted storage at our providers. Cameras send over FTP, which most cameras can't encrypt: each camera has its own login you can change.

  • Private links and PINs

    Photo links that expire, optional 4-digit PINs on client links, and limits on wrong guesses.

  • Studios kept apart

    Each studio sees only its own events, photos and clients.

  • Hidden from search

    Client galleries, albums and photos are never indexed by search engines.

  • Every admin action logged

    Our own team's actions on any account are recorded in an audit log.

  • Daily backups

    The database is backed up every day to a separate place.

Where data is kept

Servers in Mumbai, photos on a fast global network

We say exactly where each kind of data lives.

Where each kind of data is kept
Our servers and databaseAWS, Mumbai (India)
Archive vault (your originals)AWS, Mumbai (India)
Event photos and previews for guestsCloudflare R2, a global network
Daily database backupsAWS S3, kept apart from the server

Privacy requests

To access, correct or delete personal data, write to privacy@photomitra.com. Read the full privacy policy.

Found a security issue?

Please tell us privately at security@photomitra.com. We read every report and fix confirmed issues quickly.

Make your next event live

Book a 20-minute demo on a call or WhatsApp. We set up your studio with you, and your first event is free.