Last updated: 14 August 2026
TookPic is an event-photo delivery service for photographers and their guests. This policy explains what personal data we collect, why, and how it is protected, in line with India's Information Technology Act, 2000 (including the Sensitive Personal Data or Information Rules) and the Digital Personal Data Protection Act, 2023.
Photographer data is used to run your account and deliver the service you sign up for. A guest's selfie is used, with their consent (asked for on-screen before the camera opens), solely to match them to their own event photos. By uploading photos or taking a selfie, you consent to this processing for this purpose.
We share data only as needed to run the service: Supabase (hosting our database and file storage), Razorpay (payment processing — we never see your card or bank details), and either our own self-hosted server or Amazon Web Services (face matching). We do not sell personal data.
Event photos are deleted on the date the photographer sets, shown to guests on the gallery page. Face data is deleted automatically within 30 days of upload, or sooner if the event is deleted — independently of how long the photos themselves are kept.
Photos are stored in access-controlled cloud storage; they are not publicly browsable. We follow reasonable security practices for the data we hold, as required under Indian law.
You may access, correct, or request deletion of your data by contacting us at the address above. Photographers can delete an event, and everything in it, at any time from their dashboard.