Legal

Privacy Policy

Last Updated: October 22, 2026 | Version 4.0

1. Introduction

My Chitram ("we", "our", "us") is committed to protecting the privacy and security of our users. This Privacy Policy explains how we collect, use, store, and protect personal information when you use the My Chitram platform. By using our services, you consent to the practices described in this policy.

2. Information We Collect

2.1 Account Information

Full name, email address, and mobile number
Company name and business details (for admin accounts)
Login credentials and authentication tokens

2.2 Biometric / Facial Data

Facial photographs captured via selfie for face recognition registration
Processed face signature data used solely for photo matching and verification
This data is stored in a non-reversible format and cannot be reconstructed into images

2.3 Usage & Technical Data

Device information, browser type, and IP address
Session activity, login timestamps, and interaction logs
Photos uploaded to events and galleries (including metadata)
Photo quality scores, expression data, and AI processing results
Watermark/branding preferences and gallery design settings

2.4 Payment Information

Bank account details when provided for payment processing
Transaction history, invoice records, and subscription details

3. How We Use Your Information

Face Recognition: To identify and match users across event photos instantly
Authentication: To verify user identity during login via OTP or face verification
Service Delivery: To provide photo galleries, event management, and AI-powered features
Design & Branding: To apply gallery layouts, watermarks, and custom branding per event
Account Management: To manage subscriptions, billing, and user profiles
Communication: To send OTP codes, service notifications, and important updates
Analytics: To generate usage reports and improve platform performance
Security: To detect unauthorized access and maintain comprehensive audit trails

4. Data Storage & Retention

All data is stored on secure servers with industry-standard encryption and access controls. Photos are stored in dedicated secure storage with strict access policies. Facial data is stored in a secure, non-reversible format.

We retain your data for as long as your account is active. When you delete your account, all personal data including facial data is deleted instantly. Audit logs are retained for 60 days for compliance purposes.

IMPORTANT: Subscription Expiry & Data Deletion

Deleted photos and data are permanently removed and cannot be recovered. When your subscription expires, you will be notified within 48 hours. Please inform us whether you wish to retain your data. If we do not hear from you within 48 hours of that notification, your data will be permanently deleted.

5. Data Sharing & Third Parties

We do NOT sell, rent, or trade your personal information or facial data to third parties. Data may only be shared in limited circumstances:

With the event organizer managing your event (limited to event-related data)
When required by law, court order, or government regulation
To protect the rights, property, or safety of My Chitram, our users, or the public
With service providers assisting in operating our platform (under strict data processing agreements)

6. Biometric Data Protection

We apply enhanced protections to all facial/biometric data:

Facial data is processed using proprietary technology and stored in a non-reversible format
Face signatures are never shared with third parties for marketing or advertising
Users can request deletion of all biometric data at any time

7. Your Rights

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your account and all associated data
Portability: Request export of your data in a machine-readable format
Objection: Object to specific data processing activities
Consent Withdrawal: Withdraw consent for facial recognition at any time

8. Cookies & Tracking

We use session cookies essential for platform functionality (login sessions, event access validation). We do not use third-party advertising cookies or cross-site tracking technologies. Google Analytics is used for anonymized page-level traffic analysis.

9. Children's Privacy

My Chitram is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware of such data, it will be deleted promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on the platform with an updated revision date. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related inquiries, data requests, or complaints, please contact us at info@mychitram.com or visit mychitram.com