Privacy Policy
Last updated: 31 October 2026
Chitrak AI is a photo-sharing service run by Radha Girdhar Lal Ji Technologies (“RGL Technologies”, “we”, “us”), C-5 EWS, Stadium Ground, Indore, Madhya Pradesh 452011, India. This policy explains what information we handle when photographers (“customers”) use Chitrak AI and when their event guests (“guests”) open a Chitrak AI gallery. We follow the Digital Personal Data Protection Act, 2023.
1. Who is responsible for what
The photographer who creates an event decides which photos are uploaded and who receives the links. For those photos, we act on the photographer's instructions. For customer accounts and billing, we are responsible for the data ourselves.
2. What we collect
- Customer account details: name, studio name, phone number, email, billing details and GSTIN (if provided).
- Event photos: the original photos are saved in the customer's own Google Drive. We keep smaller preview copies so galleries load quickly.
- Face data: when face search is on, we create face-match codes (numbers that describe a face) from event photos and from the guest's selfie. We never save the selfie image itself.
- Guest details: the name a guest types, the number of photos found and downloaded, and basic technical data such as the time of each visit.
3. How we use it
- To show each guest the photos they appear in, and the family the full album.
- To run customer accounts, plans, billing and support.
- To keep the service secure and prevent misuse.
We do not sell personal data, show advertising, or use event photos or face data to train any AI model.
4. Consent and face data
Before a guest uses face search, they are shown a short privacy note and must agree to it. Face search is optional. Face-match codes are kept only while face search is on for that event (normally 90 days after publishing). After that, they are deleted automatically. A guest can tap “Remove my data” in the gallery at any time to delete their face data at once.
5. Service providers
We use trusted providers to run Chitrak AI: Amazon Web Services (face matching), Google Drive (original photos, in the customer's own account), Cloudflare (preview copies), MongoDB Atlas (account data), Vercel (website hosting) and Razorpay (payments). Each one handles data only to provide its service to us. Some of these providers may process data outside India.
6. Security
Galleries are not listed by search engines. Every photo opens through a private link that expires shortly after, and only after we have checked access. Links use long random keys and can be reset at any time. Admin accounts are protected by passwords and session limits.
7. How long we keep data
- Face data: until face search ends for the event, or sooner if the guest removes it.
- Preview copies and guest details: while the customer's plan is active, plus 30 days.
- Billing records: as required by Indian tax law.
8. Your rights
You can ask to see, correct or delete your personal data, or withdraw your consent. Guests can also remove their face data themselves in the gallery. To make a request, email info@rgltechnologies.com. We will reply within 30 days.
9. Children
Events can include children. Their face data is only created when a parent or guardian searches for them using the “find family” feature, with the guardian's consent.
10. Contact and grievances
Grievance Officer: Kunal Jain, RGL Technologies, Indore. Email info@rgltechnologies.com or call +91 92038 08910.
We may update this policy from time to time. If the changes are important, we will tell customers by email or WhatsApp.