Trust & Security

Privacy Policy

We value your privacy and are committed to protecting your personal data with transparency.

Document Version

Last Updated: May 29, 2026

Contact DPO

Notice Scope & Identity

At PicsDrop ('PicsDrop' or 'we' or 'us' or 'our'), one of our main priorities is the privacy of our visitors and customers. This Privacy Notice ('this Notice') documents the personal data processed by us (and our third parties), purposes for which it is used, your data privacy rights and how you can exercise those rights, where we store your data, and when we delete or retain your data.

This Notice applies and is relevant for anyone whose personal data is processed by us through our website (https://picsdrop.in) and website-based services. This Notice is not applicable to any personal data processed by third parties independent of services provided by us.

User Definitions & Roles

For the purpose of this Notice:

  • 'User' (Account User): Anyone who creates an account on our platform to create an event, upload galleries, and use our hosting services directly (typically event organizers or photographers).
  • 'Guest User': Anyone who accesses the service through the event link created by the User (e.g., event guests seeking to view or retrieve their photographs) and does not directly register an administrator account with us.
  • 'user': A generic term representing both Account Users and Guest Users, as well as general website visitors.

We act as data processors (and service providers) in respect of the Guest Users of our platform who retrieve their photos via event links created by Account Users. This processing takes place solely on the instructions and behalf of the Account User, and we do not carry out independent processing of event photographs.

1. Information We Collect

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message, attachments, or any other information you choose to provide. For the services provided on our platform, we collect:

Account Users

  • Full Name & Company Name
  • Billing & Email Address
  • Contact Phone Number
  • Tax / GST Number (where applicable)
  • Event metadata (name, location, and date of events)

Guest Users

  • Full Name & Email Address
  • Contact Number
  • Scanned Selfie Image: Used specifically to generate face-matching vectors to filter event photographs and return your specific pictures.

Additionally, we collect standard Log Files (IP addresses, browser type, ISP, date/time stamps, page hits) and Cookies automatically when you navigate or interact with our system.

Important: If you submit information relating to other individuals, you represent that you possess the necessary authorization and permit us to use it. You must ensure all submitted data is accurate and current.

2. Purpose Behind Collecting Your Information

We utilize the collected information in various ways to support the core photo sharing experience, including:

  • Account registration and management
  • Creation and hosting of events and photo links
  • Yielding guest-specific pictures using AI face scans
  • Operating, maintaining, and rendering the web platform
  • Customizing, updating, and personalizing client galleries
  • Analyzing website performance and user patterns
  • Developing new products, features, and capabilities
  • Communicating support updates, notifications, and promotions
  • Detecting, investigating, and preventing fraud or abuse

3. Legal Basis of Processing Your Personal Data

We process your personal data under the following legal frameworks:

  • Contractual Obligation: For Account Users to create and deliver event services according to our platform terms.
  • Explicit Consent: For Guest Users uploading selfies or inputting emails via unique event links to find their photographs. Refer to Section 11 below to review or manage your consent.
  • Legitimate Interests: To optimize security, perform analytics, manage promotions, and protect against fraudulent use.

4. Storing Your Personal Data

PicsDrop partners with industry-leading, secure infrastructure providers to process and host images. We store and deliver media files using:

Amazon Web Services (AWS), Cloudflare R2, and Firebase.

Selfie & Biometric Data: Please note that we do not permanently store Guest selfie files. Selfies are processed in-memory to generate anonymous facial structural vectors for matching against the event's photos, and are discarded after verification or processing.

Google Drive Permissions: If you grant PicsDrop access to Google Drive (for photographer imports), we use this access only to browse and copy selected media. We do not store tokens or track independent directories outside of your chosen import list.

5. Data Retention and Deletion

We retain personal data only for as long as is necessary to deliver our services. We strictly follow records management procedures to purge data:

  • We retain Account User data during the active relationship (account existence) or to resolve billing queries.
  • We retain event photographs and metadata for a duration specified by the photographer/event organizer, or until the event hosting period expires.
  • We retain security records and logs to comply with legal, statutory, and contractual requirements.

6. Third Parties & Partnerships

We integrate with external services to support authentication, payments, storage, and visitor analytics. You can view their individual privacy practices below:

Firebase (Google Auth & DB)Privacy Policy
Google Accounts & APIsPrivacy Policy
Microsoft Clarity (Analytics)Privacy Policy
Meta Business SDK / PixelPrivacy Policy
Amazon Web Services (AWS)Privacy Policy
Cloudflare (R2 & CDN)Privacy Policy
Razorpay (Payment Gateway)Privacy Policy

Note that we do not control cookie preferences on third-party domains. Ad servers and analytics pixels automatically capture IP addresses and use web beacons. We recommend consulting their respective privacy terms to manage tracking options.

7. Cookies and Cookie Management

You can choose to disable cookies through your browser options. Complete guides on cookie management are available on your specific browser's documentation website. Disabling cookies may limit the access to some personalized settings, user dashboards, and verification pipelines on PicsDrop.

8. Security of Your Personal Data

We prioritize data protection by maintaining state-of-the-art organizational, physical, and technical security arrangements. We employ SSL/TLS encryption for all data in transit, strict access control policies, regular firewall maintenance, and encrypted databases. While we carry out every reasonable precaution, no electronic network or cloud transmission is 100% secure, and we cannot guarantee absolute immunity from malicious third-party activities.

9. Your Data Protection Rights

Every user is entitled to exercise specific data protection rights under international regulations (GDPR, CPRA, DPDPA):

Global Core Rights

  • Right to Access: Request copies of your personal records processed by PicsDrop.
  • Right to Rectification: Request correction of inaccurate or incomplete credentials or profile details.
  • Right to Object: Object to processing of data under specific condition flags.
  • Right to Data Portability: Request migration of collected data to another vendor or organization.

California Privacy Rights Act (CPRA)

California residents have the right to request disclosure of categories of personal information collected, request deletion of personal information, and opt-out of the sharing or sale of personal data.

Digital Personal Data Protection Act (DPDPA - India)

Indian residents are entitled to access data details, correction, and erasure of personal data. Users also retain the right to nominate other individuals to exercise rights in the event of death/incapacity, and the right to access a grievance redressal mechanism.

If you wish to make a request or exercise any rights, we respond within one month. Please contact us at contact@picsdrop.in.

10. Children's Information

Our services do not target minors, and we do not knowingly collect personal data of minors. We encourage parents and guardians to participate in and monitor online activities. If you think that your child or a minor has provided information on our website, please contact us immediately, and we will promptly purge such records.

11. Acknowledgement and Consent

By using our platform, accessing an event link, or uploading a selfie to find event photographs, you or your authorized legal representative confirm that you:

Acknowledge that you have read, understood, and agreed to this consent notice.

Acknowledge that your information, photographs, and facial images may be processed to identify and grant you access to your specific event photos.

Confirm that you are over 16 years of age (or have explicit consent from a parent or guardian if under 16).

Understand that you are under no obligation to consent and that you can withdraw your consent at any time by written request to contact@picsdrop.in.