Privacy Policy

1. Introduction & Overview

Welcome to Shutterflix ("we," "our," or "us"), provided by Arya Softech. We are dedicated to protecting the privacy, confidentiality, and integrity of the personal information and media content entrusted to us by photographers, event hosts, and attendees.

This Privacy Policy explains how we collect, use, process, store, and protect your information across our web portals, mobile and tablet applications (iOS, iPadOS, Android), and TV display software (Fire TV, Android TV, macOS).

2. Facial Recognition & Biometric Vector Notice

When you interact with our "Selfie Match" or "Memory Vault" features:

• What is generated: When you snap or submit an indexing selfie, our automated system calculates a mathematical numerical vector embedding representing facial geometry. We do not store raw geometric face templates or 3D biometric scans.
• How it is used: This mathematical representation is matched against photos uploaded by the authorized event photographer using similarity search within an encrypted database.
• Voluntary Participation: Using facial indexing is completely optional. If you choose not to provide a selfie, you can always explore event galleries through standard folder browsing or direct event access codes provided by the event host.
• Data Retention & Deletion: Reference selfies and mathematical vector embeddings remain linked strictly to your event session or user vault. You may permanently delete your indexing selfie and all associated mathematical vectors at any time directly through your account or by contacting us.

3. Information We Collect

Depending on your interaction with the platform (Photographer, Event Host, or Guest), we collect:

• Account & Verification Data: Name, email address, or phone number provided during authentication via Google Sign-In, Apple Authentication, or one-time verification codes (OTP).
• Event Media Content: High-resolution photographs, videos, watermark graphics, and studio logos uploaded by photographers and hosts for gallery proofing and delivery.
• Event Metadata: Event titles, dates, access codes, ceremony folders, and shortlisted photo selections.
• Billing & Payment Information: Payment status, transaction IDs, and invoice records. Payment transactions are processed securely through certified, PCI-DSS Level 1 compliant payment gateways. Shutterflix does not store or process raw credit card numbers on its servers.
• Device & Diagnostic Information: Operating system type, app version, screen resolution, and anonymized performance diagnostics to ensure smooth display across TV screens, tablets, and smartphones.

4. How We Use Your Information

We process personal data and event media exclusively for authorized service operations:

• To generate personalized, private photo vaults for guests through automated similarity matching.
• To empower photographers to securely store, watermark, deliver, and invoice event shoots.
• To enable event hosts to review proofs and select favorites for physical photo albums.
• To cast real-time event slideshows and QR codes onto venue TV screens and projectors.
• To safeguard platform security, prevent unauthorized access, and protect against fraudulent activity.

5. Cloud Infrastructure & Security Architecture

We partner with enterprise-tier cloud infrastructure providers adhering to global security standards:

• Encrypted Cloud Storage: All original and processed event media are stored in secure, geo-redundant, encrypted cloud object storage facilities.
• Secure Database Architecture: Account records, event metadata, and mathematical vectors are hosted in isolated, encrypted database clusters protected by strict Row-Level Security (RLS) policies.
• Certified Payment Gateways: Invoicing and client payments are fulfilled exclusively through PCI-DSS Level 1 certified processors.
• No Data Brokering: We maintain a strict zero-tolerance policy against selling or sharing personal records, photos, or facial representations with external commercial entities.

6. Security Safeguards

We employ multi-layered technical, administrative, and physical safeguards to protect all user data:

• Full encryption in transit utilizing modern Transport Layer Security (TLS 1.3) protocols.
• Robust AES-256 encryption at rest across all storage repositories and databases.
• Granular row-level access controls restricting media access strictly to authorized event participants.
• Time-limited, presigned secure URLs for media streaming and downloads.

7. Your Rights & Data Erasure (GDPR & Global Privacy)

In accordance with global privacy frameworks, you have full authority over your personal information:

• Right to Access: You can request a copy of all personal records and media associated with your account.
• Right to Rectification: You can modify or correct profile details at any time.
• Right to Erasure ("Right to Be Forgotten"): You have the absolute right to request the immediate, permanent deletion of your profile, reference selfies, mathematical vectors, and photo links.
• TV Broadcast Control: Attendees can easily disable big-screen casting for any image directly within their private vault interface.

8. Children's Privacy

Shutterflix is designed for photographers, event hosts, and general event attendees. We do not knowingly solicit or collect personal information directly from children under 13 without verifiable parental or guardian authorization. If you believe a child has submitted personal information without proper consent, please contact us for immediate erasure.

9. Contact Information & Data Protection

If you have any questions, concerns, feedback, or wish to exercise your data deletion rights, please contact our dedicated team: