Privacy Policy

Personal information you disclose to us: We collect personal information that you voluntarily provide when registering, showing interest in our services, or contacting us.

Personal information we collect includes:

• Names
• Phone numbers
• Email addresses
• Debit/credit card numbers (processed securely)
• Location data
• Event details (date, location, type of event)

Payment Data: Payment information is processed securely through Razorpay. We do not store your complete card details. For more information, please review Razorpay's Privacy Policy.

Application Data: If you use our mobile application, we may collect geolocation data (with your permission) and send push notifications (configurable in your device settings).

Device and Technical Data

When you access our Services, we automatically collect certain technical information, including:

• IP address and general location (city/region level)
• Browser type and version
• Device type, operating system, and unique device identifiers
• Date and time of access, pages viewed, and time spent on pages
• Referring website or source
• Mobile network information (for app users)

App Permissions

Our mobile application may request the following permissions:

• Location: To find photographers near you and for event location services
• Camera: To upload profile photos and capture images for reviews
• Storage/Photos: To save and upload photographs
• Notifications: To send booking updates, reminders, and promotional offers

You can manage these permissions at any time through your device settings.

We process your personal information for a variety of reasons, including:

• To facilitate account creation and authentication: We process your information to create and manage your account.
• To deliver and facilitate services: We process your information to provide you with the requested service, including connecting you with photographers.
• To respond to inquiries and support requests: We process your information to respond to your questions and solve any issues you may have.
• To send administrative information: We may use your information to send you service-related updates, security alerts, and support messages.
• To fulfill and manage orders: We process your information to process payments, manage bookings, and handle returns/refunds.
• To protect our Services: We process your information to identify and prevent fraud, unauthorized access, and other harmful activities.
• To comply with legal obligations: We may process your information where required by applicable law.

We may share your information in the following situations:

• With photographers: When you book a photographer, we share relevant booking details (name, contact, event details) with the photographer to fulfill the service.
• With payment processors: We share payment information with Razorpay to process transactions securely.
• With service providers: We may share your information with third-party vendors who provide services on our behalf (e.g., cloud hosting, analytics, customer support).
• For business transfers: In connection with any merger, sale of company assets, financing, or acquisition, your information may be transferred.
• With your consent: We may share your information for any other purpose with your explicit consent.
• To comply with laws: We may disclose your information where required by law or to respond to legal requests.

Yes, we may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Cookies help us improve your experience by remembering your preferences and understanding how you use our Services.

Types of cookies we use:

• Essential cookies: Required for the website to function properly.
• Analytics cookies: Help us understand how visitors interact with our Services.
• Preference cookies: Remember your settings and preferences.

You can set your browser to refuse cookies or alert you when cookies are being sent. However, some parts of our Services may not function properly without cookies.

We may incorporate AI-powered features to enhance your experience, such as:

• Personalized photographer recommendations based on your preferences
• Smart search suggestions
• Automated customer support responses

When using AI features, we process your data in accordance with this Privacy Notice. AI-generated recommendations are designed to enhance your experience and are not used for automated decision-making that produces legal effects concerning you.

We keep your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it. If deletion is not possible (for example, because your information is stored in backup archives), we will securely store your information and isolate it from further processing until deletion is possible.

We have implemented appropriate technical and organizational security measures designed to protect your personal information. These include:

• Encryption of data in transit using SSL/TLS
• Secure storage of sensitive information
• Regular security assessments and updates
• Access controls limiting who can view your data

However, despite our safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security. You should access our Services within a secure environment.

Depending on your location, you may have certain rights regarding your personal information under applicable data protection laws. These may include:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data in certain circumstances.
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Request a copy of your data in a machine-readable format.
• Right to object: Object to our processing of your personal data in certain circumstances.
• Right to withdraw consent: If we rely on your consent, you can withdraw it at any time.

To exercise these rights, please contact us at support@shutr.in. We will respond to your request within a reasonable timeframe as required by applicable law.

Account Information: You can review and update your account information by logging into your account settings. If you wish to delete your account, please contact us, and we will deactivate or delete your account and information from our active databases. However, we may retain some information as required by law or for legitimate business purposes.

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference. At this time, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

Yes, we may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

We encourage you to review this Privacy Notice periodically to stay informed about how we are protecting your information.

If you have questions or comments about this Privacy Notice, or would like to exercise your privacy rights, you can contact us by:

• Email: support@shutr.in
• Phone: +91 9398351793

Company: Chitrakha Services Private Limited
Operating as: Shutr

Based on applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request a review, update, or deletion of your personal information, please submit a request by contacting us at support@shutr.in.

Partner Account Deletion: Partners can initiate their account deletion through our dedicated Partner Deletion Portal. Upon request, your account will be immediately deactivated and removed from public search results. After a 30-day "Deleted" cooling-off period, all your personal data, portfolio, and earnings history will be permanently scrubbed from our active databases, except where we are legally required to retain certain information (e.g., for tax or accounting purposes).

Please note that we may request verification of your identity before processing your request. We will respond to your request within a reasonable timeframe as permitted by applicable law.

Our Services are not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at support@shutr.in.

If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to remove that information from our servers.

Your information may be transferred to, stored, and processed in countries other than your country of residence. Our servers are primarily located in India. If you are accessing our Services from outside India, please be aware that your information may be transferred to, stored, and processed by us and our service providers in India and other countries.

By using our Services, you consent to the transfer of your information to countries which may have different data protection rules than your country. We will take appropriate steps to ensure that your personal information remains protected in accordance with this Privacy Notice.

Our Services may contain links to third-party websites, services, or applications that are not operated by us. This includes links to photographers' external portfolios, social media profiles, and payment processors like Razorpay.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

Your interactions with these third-party services are governed by their respective privacy policies, not ours.

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers is protected using SSL/TLS encryption (256-bit).
• Password Security: User passwords are stored using one-way cryptographic hashing with individual salts, making them unreadable even to us.
• Payment Security: Payment processing is handled by Razorpay, which is PCI DSS (Payment Card Industry Data Security Standard) compliant. We do not store complete card numbers.
• Access Controls: Access to personal data is restricted to authorized personnel who require it for their job functions.
• Regular Audits: We conduct periodic security assessments and vulnerability testing.
• Secure Infrastructure: Our servers are hosted on secure cloud platforms with industry-grade firewalls and intrusion detection systems.

Data Breach Notification: In the event of a data breach that may affect your personal information, we will notify affected users via email and/or app notification within 72 hours of becoming aware of the breach, as required by applicable law.

In compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, we have appointed a Grievance Officer to address your concerns regarding data processing.

Grievance Officer

• Name: Data Protection Officer, Shutr
• Email: grievance@shutr.in
• Response Time: We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days.

Your Rights Under DPDP Act

As a data principal, you have the following rights:

• Right to access information about your data processing
• Right to correction and erasure of your personal data
• Right to grievance redressal
• Right to nominate another person to exercise your rights in case of death or incapacity

Data Protection Board of India

If you are not satisfied with our response to your grievance, you have the right to file a complaint with the Data Protection Board of India as established under the DPDP Act, 2023.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you explicitly agree to our processing (e.g., marketing communications)
• Contract: When processing is necessary to provide you with our Services (e.g., booking photographers)
• Legal Obligation: When we are required to process data to comply with applicable laws
• Legitimate Interest: When processing is necessary for our legitimate business interests (e.g., fraud prevention, security)