Privacy Policy
Last updated: April 2026
This Privacy Policy explains how PhotoBanao (photobanao.in), operated by Chanakya Takle, collects, uses, and protects your personal data. This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDPA) of India.
1. Who We Are
PhotoBanao is an AI photo transformation service that generates professional-style photos from selfies. We are the "Data Fiduciary" under DPDPA, responsible for how your personal data is processed.
Contact: hello@photobanao.in
2. What Data We Collect
We collect the following personal data:
| Data | Why We Collect It | How Long We Keep It |
|---|---|---|
| Your selfie / uploaded photo | To generate your professional photos using AI | Deleted within 24 hours |
| AI-generated photos | To deliver your photo pack | Deleted within 24 hours |
| Payment information (via Razorpay) | To process your payment | We do NOT store payment details — Razorpay handles this |
| Email address (if provided) | To send order confirmation and photo delivery links | Retained until you request deletion |
| Browser/device information | For website functionality and basic analytics | Anonymized, no personal identification |
| IP address | For security, fraud prevention, and rate limiting | Logged temporarily, not linked to your photos |
3. Facial Data — Special Notice
Your uploaded selfie contains facial data, which is sensitive personal data. Here is exactly what happens to it:
- Your selfie is uploaded to our secure servers.
- It is sent to our AI processing system to generate professional-style photos.
- The AI does not store, learn from, or retain your facial data after processing.
- Your selfie and all generated photos are permanently deleted from our servers within 24 hours.
- We do NOT use your facial data for facial recognition, surveillance, biometric identification, or any purpose other than generating your requested photos.
- We do NOT sell, share, or transfer your facial data to any third party except the AI processing service required to generate your photos.
4. Consent
Under DPDPA, consent is the primary basis for processing your personal data. By uploading your photo and checking the consent checkbox on our website, you provide explicit, informed consent for us to:
- Process your selfie using AI to generate professional photos
- Temporarily store your photos for up to 24 hours for delivery
- Process your payment through Razorpay
- Send you order-related communications
You may withdraw your consent at any time by contacting us at hello@photobanao.in. Withdrawal of consent will result in deletion of your data and inability to use the service.
5. How We Use Your Data
We use your data ONLY for:
- Generating your professional photos (the core service)
- Processing your payment
- Delivering your photos to you
- Responding to your support requests
- Preventing fraud and abuse of our service
- Improving our service (using anonymized, aggregated data only — never your actual photos)
We do NOT use your data for:
- Advertising or marketing to third parties
- Training AI models on your specific photos
- Facial recognition or biometric databases
- Selling to data brokers or any third party
- Profiling or automated decision-making that affects your rights
6. Third-Party Services
We use the following third-party services to operate PhotoBanao:
| Service | Purpose | Their Privacy Policy |
|---|---|---|
| Razorpay | Payment processing | razorpay.com/privacy |
| Vercel | Website hosting | vercel.com/legal/privacy-policy |
We only share the minimum data necessary with each provider. We do not share your photos with anyone except the AI processing service required to generate them.
7. Data Storage and Security
- All data is transmitted using HTTPS encryption.
- Photos are stored on secure, encrypted servers.
- Access to photo data is restricted to automated systems only — no human views your photos during processing.
- All photos are automatically and permanently deleted within 24 hours of generation.
- Payment data is handled entirely by Razorpay and never touches our servers.
- In the event of service discontinuation, all user data will be deleted within 30 days and a notice will be posted on the website.
8. Your Rights Under DPDPA
As a Data Principal under DPDPA, you have the right to:
- Access: Request a summary of your personal data that we process.
- Correction: Request correction of inaccurate personal data.
- Erasure: Request deletion of your personal data. (Note: photos are auto-deleted within 24 hours regardless.)
- Withdraw Consent: Withdraw your consent for data processing at any time.
- Grievance Redressal: File a complaint if you are unhappy with how we handle your data.
- Nominate: Nominate another person to exercise your rights in case of death or incapacity.
To exercise any of these rights, contact us at hello@photobanao.in. We will respond within 72 hours.
9. Grievance Redressal
Grievance Officer: Chanakya Takle
Email: hello@photobanao.in
If you have any concerns about how we handle your data:
- Step 1: Contact us at hello@photobanao.in. We will resolve your concern within 72 hours.
- Step 2: If unsatisfied, you may file a complaint with the Data Protection Board of India at https://www.meity.gov.in.
10. Children's Data
- We do NOT process photos of anyone under 18 years of age.
- We do not knowingly collect personal data of children.
- If we discover that a minor's photo has been uploaded, we will delete it immediately.
11. Data Breach Notification
In the event of a personal data breach that is likely to cause harm to you, we will:
- Notify the Data Protection Board of India as required by DPDPA.
- Inform affected users as soon as reasonably practicable.
- Take immediate steps to mitigate the breach.
12. Cookies and Tracking
- We use essential cookies for website functionality (session management, preferences).
- We may use basic analytics to understand visitor traffic (anonymized, no personal identification).
- We do NOT use advertising cookies or tracking pixels from ad networks.
- We do NOT track you across other websites.
13. Cross-Border Data Transfer
Your photo may be processed by AI services hosted outside India. In such cases:
- We ensure the processing service provides adequate data protection.
- Your photo is transmitted securely, processed, and the result is returned to our servers.
- No copy of your photo is retained by the external processing service after the task is complete.
14. Changes to Privacy Policy
We may update this policy from time to time. Changes will be posted on this page with a revised "Last updated" date.
15. Contact
Data Fiduciary: Chanakya Takle
Email: hello@photobanao.in
WhatsApp: +91-9604234567
Address: Nashik, Maharashtra 422002, India