Privacy Policy

3. Photo Rights & Ownership

StudioMitra makes zero ownership claims over your content. All photographs, watermark overlays, client portfolios, and intellectual property uploaded to your account remain solely the property of you or your clients.

You grant StudioMitra only the limited license necessary to host, thumbnail, convert, and transmit your images to your designated clients upon your request.

We never use your private galleries to train public AI models or license your photographs to stock libraries.

By accessing or subscribing to StudioMitra, you agree to comply with our Terms of Service. Studio accounts are licensed on a SaaS subscription basis for photography professionals, studios, and authorized team members.

• Users are responsible for safeguarding account login credentials and two-factor authentication tokens.
• Content uploaded must not infringe upon third-party copyrights, trademarks, or contain unlawful material.
• StudioMitra reserves the right to suspend accounts engaged in abusive automated scraping, spam distribution, or fraudulent chargeback activity.
• Service Level Agreements target 99.9% platform availability, excluding scheduled maintenance windows announced in advance.

We believe in total billing transparency for all StudioMitra subscription plans and add-on storage tiers:

• 14-Day Money-Back Guarantee: New annual studio subscriptions are eligible for a full refund within 14 calendar days of the initial purchase date if you are not completely satisfied.
• Subscription Cancellations: You may cancel recurring billing at any time from your Studio Dashboard. Your subscription will remain active until the end of the current paid billing cycle with zero penalty fees.
• Client Invoices & Shoot Retainers: Financial transactions between photographers and their end-clients (e.g. wedding shoot deposits or print store orders) are governed by the photographer's individual studio contract. StudioMitra acts as the technology facilitator.
• Refund Processing Time: Approved subscription refunds are processed back to the original payment method within 5 to 7 business days.

StudioMitra maintains robust dispute mitigation workflows in collaboration with acquiring banks, card networks (Visa, Mastercard, RuPay, Amex), and licensed payment aggregators:

• Direct Dispute Resolution: Cardholders are encouraged to contact our support team at support@studiomitra.com prior to filing a bank chargeback to resolve billing questions amicably.
• Delivery Evidence & Proofing Logs: For client invoice disputes, StudioMitra maintains cryptographically timestamped delivery logs, download records, IP access logs, and digital contract signatures to assist photographers in chargeback defense.
• Unauthorized Transaction Reporting: If you identify an unrecognized transaction, notify us immediately within 24 hours. Our fraud operations team will immediately freeze the compromised token, initiate gateway investigations, and assist with reversal procedures.

In compliance with the Information Technology Act 2000, CERT-In directions, and global anti-fraud protocols, StudioMitra enforces proactive cyber security measures:

• Automated Threat Detection: Real-time heuristic monitoring for credential stuffing, bot-driven brute force attacks, distributed denial of service (DDoS), and anomalous download velocities.
• Identity & Phishing Prevention: Studio custom domains and client notification emails are protected with strict SPF, DKIM, and DMARC authentication records to prevent spoofing.
• Law Enforcement Cooperation: Confirmed instances of identity theft, money laundering, ransomware, or unauthorized system penetration will be reported to competent statutory authorities and cyber crime cells.

Our infrastructure architecture follows defense-in-depth principles aligned with ISO/IEC 27001 standards:

• Network Security: Cloud infrastructure isolated across multi-tier Virtual Private Clouds (VPCs) with strict ingress/egress firewalls and web application firewall (WAF) filtering.
• Data Encryption Standards: All data in transit is encrypted using TLS 1.3. Gallery vaults and database volumes are encrypted at rest using AES-256 with rotating KMS key management.
• Vulnerability Management: Periodic independent third-party penetration testing, static application security testing (SAST), and dependency vulnerability auditing.

StudioMitra operates as a Data Processor under India's Digital Personal Data Protection (DPDP) Act 2023 and GDPR:

• Purpose Limitation: We only process client personal data and media files as instructed by the photographer for delivering gallery, booking, and invoicing services.
• Data Minimization: We only collect necessary parameters required to complete operational studio deliverables.
• No Commercial Exploitation: Client photographs, booking questionnaires, and email addresses are never sold, rented, or repurposed for targeted advertising.

To prevent accidental loss of precious client photo collections and studio accounting history:

• Multi-Region Redundancy: Client image archives are replicated across geo-separated storage facilities with 99.999999999% (11 9s) durability.
• Continuous Point-in-Time Recovery: Database state is captured through continuous write-ahead transaction logs and automated daily snapshots.
• Disaster Recovery SLA: Recovery Point Objective (RPO) of < 1 hour and Recovery Time Objective (RTO) of < 4 hours under certified business continuity scenarios.

StudioMitra, a brand operated by SAFALPAY INDIA PRIVATE LIMITED, maintains a comprehensive Cookie Policy, Marketing & Communication Consent Policy (Version 1.0, Effective 19 September 2026). Acceptance of necessary cookies alone does not constitute consent for marketing communications.

• Strictly Essential Cookies: Required for studio authentication, session tokens, CSRF protection, and shopping cart persistence for print orders.
• Functional & Preference Cookies: Remembers your dashboard language, currency view, and client gallery grid sorting preferences.
• Analytics & Performance Cookies: Aggregated metrics to assess page load velocities, Core Web Vitals, and gallery responsiveness.
• Marketing & Telecom Consent: Commercial SMS, voice calls, and WhatsApp communications follow strict opt-in, TRAI/TCCCPR frameworks, and DND preferences.