Privacy Policy

Introduction

This Privacy Policy explains how oneglint Media Solutions Pvt. Ltd. ("oneglint," "we," "us," or "our") collects, uses, processes, stores, and shares your personal data when you visit photos.oneglint.com (the "Site"), use the oneglint application (the "Application"), or interact with our photo distribution services (collectively, the "Services").

By accessing or using our Site and Application, registering for an account, uploading/viewing photos, or making purchases, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue using our Services.

1. Our Role & Data Fiduciary Architecture

Under applicable data protection laws, including India's Digital Personal Data Protection Act (DPDPA) and the EU General Data Protection Regulation (GDPR):

• Joint Data Fiduciaries / Co-Controllers: For event photo distribution services, oneglint and the respective Event Organizer operate as Joint Data Fiduciaries. Together, we determine the purpose and means of collecting participant data, photo processing, media delivery, order fulfillment, and event analytics.
• Data Processors: We engage third-party infrastructure and service vendors (e.g., cloud hosting, payment gateways, communication providers) who process data strictly under our instructions.

2. Information We Collect

We collect information directly provided by you, generated through your use of our platform, or supplied via third-party integrations.

A. Data You Provide Directly

• Account & Contact Data: Name, email address, phone number, mailing/billing address, and company details provided during registration, guest checkout, support requests, or surveys.
• Payment Information: Online transactions are handled by external, PCI-DSS compliant payment gateways (e.g., PayU). We do not store raw credit/debit card numbers, CVVs, or bank credentials. We only receive transaction confirmations, billing details, and order IDs.
• Photos & Biometric/Facial Reference Data: Media uploaded to the platform, including photos and videos. When you use facial recognition or selfie-based photo search to find your event photos, we process your reference selfie and generate biometric vector maps purely to locate matching event photographs.

B. Data Collected Automatically (Navigational & Usage Data)

• Device & Technical Data: IP address, device type, operating system, browser, app version, network details, and referral source.
• Session & Behavioral Analytics: Clickstream data, session start/end times, pages viewed, photos browsed, checkout flow, and feature interactions.
• Cookies & Tracking: We use essential and performance cookies, local storage, and web beacons to operate the platform, preserve cart/session state, prevent fraud, and run analytics.

C. Third-Party Integrations

• Google Sign-In: When logging in via Google, you authorize us to collect your basic profile details (name, email address).
• reCAPTCHA (v2): We use Google reCAPTCHA v2 (checkbox) on authentication and checkout pages to protect against automated bots and spam.

3. How We Use Your Data

We process your data for the following legitimate business purposes:

• Photo Delivery & Facial Matching: To search, index, match, and display event photos to authorized users.
• Order Processing & Fulfillment: To process digital downloads, print orders, subscriptions, and deliver media.
• Joint Event Operations: To provide Event Organizers with event-specific registration, photo view counts, analytics, and order records.
• Platform Security: To protect against abuse, bot attacks, fraud, and unauthorized access.
• Customer Support: To resolve support tickets, user inquiries, and transactional issues (via telephone, SMS, email, or chat).
• Communications: To send order updates, security alerts, service notices, and promotional messaging (where consented).

4. Data Sharing & Disclosure

We do not sell or rent your personal information to third-party marketers. We share personal data only under the following strictly defined conditions:

A. Event Organizers (Joint Data Fiduciaries)

When you browse, search, or purchase photos for a specific event hosted on photos.oneglint.com, we share relevant personal information, including your registration details, photo engagement metrics, analytics, and purchase history, with the Event Organizer responsible for that event. Event Organizers are independent Data Fiduciaries and handle data under their own privacy practices and applicable laws.

B. Third-Party Data Processors

We share data with verified third-party service providers bound by strict confidentiality and Data Processing Agreements (DPAs):

• Cloud Infrastructure & Hosting: Amazon Web Services (AWS), Google Cloud Platform (GCP)
• Customer Relationship & Support Operations: Zoho
• Voice & SMS Communications: Exotel, MSG91
• Payment Processing: PayU (and other PCI-DSS compliant payment gateways)

C. Legal & Corporate Requirements

We may disclose personal data if required by law, court order, or governmental demand, or in connection with a corporate merger, acquisition, or sale of company assets.

5. Facial Recognition & Photo Privacy Notice

When using our AI-based photo search:

• Your reference selfie is converted into a temporary mathematical facial vector map to compare against indexed event photographs.
• Face data is strictly used for photo matching and locating your media.
• We do not sell facial data or use it for unauthorized cross-platform profiling.
• You may request deletion of your reference selfie and associated facial vector data at any time.

6. International Data Transfers & EU GDPR Notice

oneglint is based in India, and your data is stored on secure cloud servers (such as AWS) located in India and other regional data centers.

If you access our Services from the European Union (EU) or European Economic Area (EEA), we process your data under the following legal bases pursuant to the GDPR:

• Performance of a contract with you (order delivery and photo search).
• Consent (for photo processing and marketing).
• Legitimate interests (platform security, system improvements, joint event fulfillment).

7. Your Data Rights

Subject to local laws (such as DPDPA in India or GDPR in Europe), you have the following rights:

• Right to Access / Summary: Request a summary of personal data held about you and processing activities undertaken.
• Right to Correction & Completion: Request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request the deletion of your personal information, subject to legal retention obligations.
• Withdrawal of Consent: Easily withdraw your consent at any time.
• Grievance Redressal: Access an internal mechanism to resolve complaints regarding your data.

To exercise these rights, please contact our Grievance Officer (details in Section 10).

8. Data Security & Retention

Subject to local laws (such as DPDPA in India or GDPR in Europe), you have the following rights:

• Right to Access / Summary: Security: We employ encryption, access controls, firewalls, and secure protocols to protect your data. However, no internet transmission is 100% secure.
• Retention: We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with statutory financial retention laws, or satisfy event hosting contracts. Once data is no longer required, it is securely deleted or anonymized.

9. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our platform practices or statutory privacy regulations. Updates will be posted on this page with a revised "Last Updated" date.

10. Grievance Officer & Contact Information

In compliance with India's Digital Personal Data Protection Act (DPDPA) and applicable privacy laws, if you have any questions, concerns, or grievances regarding data processing, please contact our designated Grievance Officer:

• Company Name: oneglint Media Solutions Pvt. Ltd.
• Grievance Officer: Data Protection Officer / Grievance Officer
• Email: support@oneglint.com
• Postal Address: #Plot No 4, Survey no- 124, Road no 15D, Industrial Park, IDA Nacharam, Hyderabad, Telangana 500076, India