This Privacy Policy is issued by Designoo Media Pvt Ltd(“Designoo”, “we”, “us”), registered office 47P, Sector 40, Near Ryan International School, Gurugram, Haryana - 122001, India, contactable at accounts@designoo.in. It covers the Studio CRM web application at app.dskkr.com, the StudioCRM Android app (package com.designoo.studiocrm), and the CrewKit Android app (package com.thecamkit.crewkit) — together, “the Service”. It applies wherever you use the Service, not only in India.
The table below lists every category of personal data we collect and, for each, why we collect it and whether it is shared.
| Data type | Why we collect it | Whether it is shared |
|---|---|---|
| Name, email, phone, studio details | To create and operate your account, and to communicate with you about the Service. | Not shared, except with the infrastructure processors listed in Section 8. |
| Photos, videos and files uploaded by the studio | To store and deliver the studio’s own client galleries and business records through the Service. | Not shared by us. Visible only to the uploading studio and whoever that studio chooses to share it with (e.g. its own clients or crew). |
| Attendance selfies (CrewKit) | To confirm a crew member’s attendance when they check in at a shoot. | Not shared. Visible only to the crew member’s own studio. |
| Precise location, captured only at the moment of check-in (CrewKit, optional) | To help the studio confirm the crew member was on-site for a shoot. | Not shared. Visible only to the crew member’s own studio; never sold or used for advertising. |
| App activity and diagnostics | To keep the Service reliable and secure, and to improve it over time. | With the infrastructure processors listed in Section 8, solely to operate the Service. |
| Payment information | To process subscription payments. | Processed by Razorpay. We never receive or store your card, UPI, or bank account details ourselves. |
We use this information to provide and operate the Service, process payments, communicate with you about your account, maintain security, and improve the product over time.
We retain account and Studio Data for as long as your subscription is active, plus the post-cancellation windows described in our Terms of Service (a grace period on non-payment, followed by a data-export window after cancellation). After deletion, we retain gallery thumbnails, face-tagging data, AI-derived insights, and archived call recordings indefinitely, so a returning studio’s galleries and trained AI assistants restore intact, until erasure of these is requested under Section 4 below.
You can request deletion of your account and personal data at any time, whether or not you are able to sign in, in either of these ways:
Once we receive your request:
The Service is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have done so, we will delete that data promptly. If you believe a minor’s data has been collected through the Service, contact us at accounts@designoo.in.
Separately, wedding and event galleries uploaded by a studio may contain images of minors (for example, children attending a family event). That image data is Studio Data, uploaded and controlled by the studio itself — the studio, not Designoo, is responsible for obtaining any consent needed to photograph and share images of minors in its galleries.
As a data principal under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to:
If you are in the European Union or United Kingdom, GDPR gives you the right to: access your personal data; request rectification; request erasure; receive your data in a portable format; request restriction of processing; object to processing; withdraw consent at any time where processing is based on consent; and lodge a complaint with your local data protection supervisory authority.
If you are in another jurisdiction, you may have similar rights under your local data protection law; contact us and we will do our best to honour them.
We process personal data on these legal bases: performance of a contract(providing the Service you’ve signed up for), legitimate interests (security, reliability, and improving the Service), and consent for location data and face-recognition/matching, which you may withdraw at any time.
To exercise any of these rights, contact us at accounts@designoo.in.
For Studio Data— the leads, clients, and media a studio uploads to run its own business — the studio is the data controller and Designoo is the data processor, acting only on the studio’s instructions.
For account databelonging to studio owners and crew members (the data we collect to create and operate their own login and profile — see Section 1), Designoo is the data controller.
We share data with the following categories of processors, solely to operate the Service:
Your data is stored and processed using Microsoft cloud storage, Vercel, Supabase, and Hetzner infrastructure. Depending on the provider and region, this may mean your data is transferred to, and stored in, a country other than the one you’re in. Where that happens, we take steps intended to ensure your data continues to receive an appropriate level of protection, including through contractual safeguards with our processors.
Data is encrypted in transit using industry-standard protocols (TLS). Access to Studio Data and account data is restricted to authorized personnel who need it to operate or support the Service. If we become aware of a data breach affecting your personal data, we will notify you and any relevant authority without undue delay, as required by applicable law.
Where a studio enables face-recognition features (for example, to help guests find their own photos in a gallery), face data is derived only for that studio’s galleries, and only where the studio has switched the feature on. These features are operated on behalf of, and under the instruction of, the studio using the Service (see Section 7, Controller vs Processor). Guest consent for face-matching is collected through opt-in tooling before any guest photo is matched. Face-matching data is retained for as long as the gallery it belongs to is retained (see Section 3). We do not currently apply an automatic expiry to this data; it is deleted when erasure is requested under Section 4, or when the studio that created the gallery requests deletion of the gallery. A guest who withdraws consent has their face-matching data deleted within 30 days regardless of the above. A guest can withdraw consent and request deletion of their face-matching data at any time by contacting accounts@designoo.in or the studio that created the gallery. These features are not directed at, and must not knowingly be used to process the personal data of, minors.
CrewKit is our mobile application for photography crew members. In addition to the terms above, the following applies to CrewKit:
We may update this Privacy Policy from time to time. If we make a material change, we will notify you by email and/or an in-app notice before the change takes effect, and update the “Last updated” date at the top of this page. Continued use of the Service after a change takes effect means you accept the updated policy.
For any question, complaint, or grievance regarding this Privacy Policy or how your personal data is handled, contact our Grievance Officer:
[PLACEHOLDER: Grievance Officer name and title]
Designoo Media Pvt Ltd
47P, Sector 40, Near Ryan International School, Gurugram, Haryana - 122001, India
accounts@designoo.in