Privacy Policy
ShowMyPhoto (“we”, “our”, “us”), operated by Sanjay Systems, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, process, store, and protect personal data when you use our AI-powered photo discovery and sharing platform anywhere in the world.
1. Information We Collect
Depending on how you use our platform, we may collect the following information:
- Photos uploaded by photographers or event organizers
- Selfies uploaded by guests for photo discovery
- Facial recognition data (face embeddings generated from selfies)
- Phone numbers and messages shared through WhatsApp or email
- Event details such as event name, date, and location
- Technical information such as IP address, browser, and device type
2. Facial Recognition & Biometric Data
ShowMyPhoto uses facial recognition technology solely to help guests find their photos from a specific event.
- Facial recognition is used only for photo matching
- We generate a facial embedding (a numerical representation, not an image)
- Biometric data is processed automatically and securely
- Facial data is never sold or used for advertising
- Facial data is deleted after event expiry or upon valid request
By uploading a selfie, you provide explicit consent for the processing of your facial data for this purpose.
3. Purpose of Data Processing
We use personal data only to:
- Identify and display event photos to guests
- Deliver photos securely
- Communicate service-related updates via WhatsApp or email
- Provide customer support
- Improve platform performance, security, and reliability
- Comply with legal and regulatory requirements
4. Legal Basis for Processing
We process personal data under the following legal frameworks:
- Consent: Your clear, specific, and informed consent (e.g., uploading a selfie for facial recognition). Under DPDPA, this constitutes a "specified purpose."
- Contractual Necessity: To provide the photo discovery services you requested.
- Legitimate Interests: For security, fraud prevention, and platform improvement (GDPR Art. 6(1)(f)).
- Legal Obligation: To comply with applicable laws and law enforcement requests.
5. Data Retention
We retain personal data only for as long as necessary:
- Event photos: typically 60–90 days, as defined by the event organizer
- Facial recognition data: deleted after event expiry or earlier upon request
- Search requests and logs: deleted after event completion
- WhatsApp and support messages: retained only as long as required for support
6. Data Sharing & Third Parties
We may share limited data with trusted third parties only to operate our services:
- Cloud hosting and storage providers
- Messaging platforms such as WhatsApp (Meta)
- Infrastructure and AI processing tools
All third-party providers are required to follow appropriate security and confidentiality standards.
7. International Data Transfers
ShowMyPhoto operates globally. If you access our services from the EU or UK, your data may be transferred to India. We ensure such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission or other legal transfer mechanisms that provide an equivalent level of protection.
8. Your Rights
Subject to applicable law, we provide the following rights to all users:
- Access & Portability: Request a copy of your personal data in a structured format.
- Correction & Erasure: Correct inaccurate data or request "The Right to be Forgotten."
- Withdrawal of Consent: You may withdraw consent for facial recognition at any time.
- Right to Nominate (DPDPA): The right to nominate an individual to exercise your rights in the event of death or incapacity.
- Right to Restrict/Object (GDPR): Object to processing based on legitimate interests.
To exercise your rights, including requesting deletion of your personal data, you may submit a request through our Data Removal Request page or contact us using the details below.
When a valid data removal request is received and verified, we permanently delete associated contact details, facial recognition data (embeddings), and search records from our active systems. Minimal records may be retained only for legal compliance and audit purposes.
9. Data Security
We use reasonable technical and organizational security measures to protect personal data. However, no method of transmission or storage is completely secure.
10. Children’s Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children or engage in tracking/behavioral monitoring of minors. If we become aware that we have collected data from a child without verifiable parental consent (as required by DPDPA and GDPR), we will delete that information immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
12. Data Protection Officer & Grievances
In accordance with the DPDPA (India) and GDPR, we have appointed a Data Protection Officer (DPO). If you have any grievances or wish to exercise your rights, you may contact:
Attn: Data Protection Officer, Sanjay Systems
Email: support@showmyphoto.com
Address: Door No 5, 1st Street, State Bank officers 2nd colony Byepass, Madurai, Tamil Nadu
625016
Under DPDPA, you have the right to lodge a complaint with the Data Protection Board of India if your grievance is not resolved within the prescribed timelines.