We process personal data in line with the Digital Personal Data Protection Act, 2023. What is collected, why, where it is held and for how long is set out in full in our privacy policy, which forms part of these terms. The summary below is not a substitute for reading it.
The consent notice a guest is shown before their selfie is the notice for that processing, and it states in plain language what is sent, what is kept, where, and for how long.
A selfie is used to search and is not stored. What persists is a numeric face signature held by our face-recognition provider, which belongs to one wedding, is never shared with another event, is never sold, and is deleted on request or at the end of the retention period — whichever comes first.
These are the parties that process data on our behalf. The current list, with what each one does, is clause 8 of the privacy policy:
- Amazon Web Services — Face recognition (Mumbai, India)
- Supabase — Database and accounts (Mumbai, India)
- Cloudflare R2 — Photograph storage (Asia-Pacific)
- Vercel — Application hosting (Global edge network)
- Razorpay — Payments (India)
- Resend — Transactional email (Global)
To exercise a right over your data — access, correction, erasure, or a complaint — write to support@tasveer.online. A guest can also delete everything themselves from their own gallery, without writing to anyone.