SnapUp Studio (“SnapUp”, “we”, “us”) is a service photographers use to deliver event photos to their clients and guests. This policy explains what personal information we handle, why, and the choices you have. It covers snapupstudio.com, the studio app, guest galleries, and the portfolio and business websites published through SnapUp.
Who this policy is for
- Photographers and studios — people who create an account and upload events.
- Guests — people who open a gallery a photographer shared with them, with or without a selfie search.
- Visitors — people browsing this website.
For the photos and guest details inside a gallery, the photographer decides what is uploaded and who it is shared with. We store and process that content on the photographer’s behalf.
What we collect
From photographers
- Account details: name, email address, phone number, studio name, username and a password (stored only as a one-way hash).
- Content you upload: photos and videos, event names and dates, cover images, logos, and the text and images of your portfolio or business website.
- Billing records: the plan you chose, invoices, promo codes used, wallet and referral credit. Card, UPI and bank details are entered on Razorpay’s payment window and are never stored on our servers.
- Sign-in records: the time and the device/browser of your last sign-in, used to keep one active session per account.
From guests
- A selfie, when you choose to search. The selfie is sent to our servers and turned into a numerical face signature, which is compared with the faces in that one event to find your photos. The signature is kept only for your browsing session so you do not have to upload again on every page.
- Pre-registration details, when a photographer offers it. If you register before the photos are published, we keep your name, your email address or phone number, and the selfie you provided, so your photos can be matched and sent to you when the gallery goes live.
- Your selections, when a photographer asks you to pick favourites.
From everyone
- Technical data: IP address, browser type and pages requested, kept in server logs for security and troubleshooting.
- Cookies: a session cookie that keeps you signed in and protects forms, a preference for the light or dark theme, and a referral cookie if you arrived through an invite or partner link. We do not use advertising cookies.
Face matching
Search by Selfie works by computing face signatures for the photos in an event and for the selfie a guest provides. These signatures are used for one purpose only: finding a person’s photos inside the event they were invited to. We do not use them to identify people across different photographers’ events, we do not build profiles from them, and we do not sell or share them.
Face signatures for an event are deleted when the event is deleted, whether by the photographer, by the event’s retention setting, or after a plan has expired (see “How long we keep it”).
How we use information
- to run the service: store and deliver photos, match faces, build galleries and websites;
- to manage accounts and plans, take payments and issue invoices;
- to send service messages such as email confirmation, “your gallery is ready” and download links;
- to keep the service secure and to investigate misuse;
- to meet legal and tax obligations.
We do not sell personal information, and we do not use your photos to advertise SnapUp without your permission.
Who we share it with
Only the providers needed to run the service, and only what each one needs:
- Cloudflare — file storage and content delivery for photos and videos.
- Razorpay — payment processing.
- Our email provider — delivery of the service emails described above.
- Authorities — where the law requires it.
How long we keep it
- Event photos and videos: for as long as the photographer keeps the event, or until the retention period set on that event runs out.
- After a plan expires: originals are kept for 7 days, then deleted. Previews stay viewable for a further 30 days and are then deleted too. Renewing before these dates stops the deletion; files already deleted cannot be restored.
- Guest selfie signatures: for the browsing session only. Pre-registration selfies and contact details are kept until the event is deleted.
- Accounts: until the account is deleted. Invoices and payment records are kept for as long as tax law requires.
Your choices and rights
- Photographers can edit their profile, delete events, and ask us to delete their account and everything in it.
- Guests can ask for a photo of themselves to be hidden or removed, or for their pre-registration details to be deleted. You can ask the photographer directly, or write to us and we will pass the request on and make sure it is acted upon.
- Anyone can ask what personal information we hold about them, ask for it to be corrected, or withdraw a consent they gave.
To make a request, write to [email protected]. We reply within 30 days.
Security
Connections to SnapUp are encrypted. Passwords are hashed. Galleries are reached through unguessable links and, where the photographer turns it on, a PIN. Access to stored files is limited to the systems that need it. No online service can promise perfect security, so please use a strong password and keep your gallery links to the people they are meant for. More detail is on the Data & security page.
Children
Accounts are for adults. Event photos often include children; the photographer and the event host are responsible for having the right to share them. A parent or guardian can ask for a child’s photo to be removed at any time.
Changes to this policy
If we make a change that affects how your information is used, we will update this page and, for account holders, send an email before it takes effect.
Contact
Questions about privacy: [email protected] or the contact page.