Privacy Policy
This Privacy Policy describes how Kivarolabs Integrated Technologies Pvt. Ltd. collects, uses, discloses, and protects personal information when you use StudioLear and our associated websites, mobile applications, and services.
India's Digital Personal Data Protection Act 2023 & IT Act 2000 / UK GDPR & Data Protection Act 2018 / California Consumer Privacy Act (CCPA) and applicable U.S. federal and state laws / UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data.
By using StudioLear, whether as a studio, photographer, client, or guest, you agree to the practices described in this Privacy Policy.
1. Who We Are
Kivarolabs Integrated Technologies Pvt. Ltd.
support@studiolear.com
We act as:
- Data Controller for personal data we collect directly from studios, clients, and guests using the platform.
- Data Processor when we process client or guest data on behalf of studios or photographers who use our platform to manage their events.
2. Information We Collect
We collect the following categories of personal information:
Studio / Photographer Information: Name, business name, email address, phone number, studio branding details, billing and subscription data.
Client Information: Name, email address, phone number, event details, account credentials, any media or personal information voluntarily submitted.
Media & Event Content: Photos, videos, and associated metadata for event management, album creation, and AI photo recognition features.
Payment & Billing Data: Processed via Razorpay. We do not collect or store full card numbers or CVV. We retain limited billing details for invoicing and compliance.
Cookies & Technical Data: First-party cookies and similar technologies for functionality, security, and analytics. No third-party advertising cookies.
3. How We Use Your Information
We use personal information to:
- Register and maintain studio and client accounts
- Provide, operate, and improve the StudioLear platform
- Process payments and manage subscriptions
- Host, organize, and deliver media and albums
- Provide invitations, AI-powered features, and event experiences
- Send transactional, security, and administrative messages
- Comply with legal obligations and enforce our Terms of Service
4. Legal Bases for Processing (GDPR / UK GDPR)
We rely on:
- Performance of a contract - to provide the Service to studios, clients, and guests
- Legitimate interests - to maintain platform security and improve features
- Consent - for optional features like AI guest photo matching or marketing communications
- Legal obligations - for accounting, regulatory, or law enforcement requirements
5. AI Photo Finder and Guest Consent
If the Guest Photo Finder is enabled for an event:
- Guests voluntarily upload a selfie through a secure QR link to identify their event photos.
- These images are temporarily processed for AI-based matching and are not used for any other purpose.
- Studios must obtain valid guest consent when they initiate the feature.
- If offered directly to clients, consent is obtained during the upload process via clear notices and checkboxes.
- We do not sell, train external models, or reuse these images for unrelated purposes.
7. International Data Transfers
Data may be transferred to and processed in jurisdictions including India, the UK, USA, and UAE. We implement Standard Contractual Clauses and equivalent safeguards to comply with international data transfer rules.
8. Data Retention
Data is retained as long as the account or subscription remains active. After non-renewal, a limited grace period is provided before permanent deletion. Certain records (e.g., payment records) may be retained longer for legal compliance.
9. Security
We use industry-standard measures including:
- Secure cloud hosting via AWS and Cloudflare
- Role-based access control
- Regular monitoring and security audits
No system is 100% secure. We continuously improve our measures to reduce risks.
10. Children's Privacy
We do not knowingly collect data from children under 16 (or local equivalent minimum age). If such data is found, it will be deleted promptly.
11. Your Rights
Depending on your location, you may have the right to:
- Access, rectify, or delete your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge complaints with relevant authorities
To exercise your rights, contact support@studiolear.com.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted with a revised "Last Updated" date. Material changes will be communicated as required by law.
14. Contact Us
For privacy-related queries or rights requests, contact:
Global Compliance Coverage
India - Digital Personal Data Protection Act 2023
UK - GDPR
USA - CCPA, COPPA
UAE - PDPL
International SaaS Data Transfers - Standard Contractual Clauses