Privacy Policy
Effective from 24 October 2026
This policy explains what FutureX Consulting Services LLP (“we”, “us”) does with personal data when you use Xtasveer, and what rights you have over it. It is written for two audiences: studios who hold accounts with us, and guests who receive photographs through them.
This service analyses faces. Sections 3, 4 and 5 explain exactly what is derived, why, how long it is kept, and how to have it deleted.
1. Our two roles
We handle personal data in two distinct capacities, and your rights differ depending on which applies.
- For account data — the details you give us when you register, sign in, and pay — we are the Data Fiduciary. We decide why and how it is used, and you can exercise your rights directly against us.
- For photographs a studio uploads and the people appearing in them, the studio is the Data Fiduciary and we are its Data Processor. We act on the studio’s instructions. If you are a guest asking about photographs of you, ask the studio first; we will help them respond, and you may also come to us directly.
2. What we collect
Account and profile data:
- name, email address and, where you provide it, phone number and profile picture;
- your studio’s name, branding and settings, and the role and permissions held by each member;
- a record of the facial-recognition terms you accepted, including the version, the time, your IP address and your browser or application.
Content uploaded by studios:
- photographs and video, their filenames, sizes and capture metadata;
- folder structure, favourites and event details such as name, dates and location;
- client records a studio chooses to keep — name, email, phone, company and address — and the quotations, invoices and payments attached to them.
Where a studio chooses compression, the stored photograph may be a compressed version rather than the unchanged original file. The resulting size and quality depend on the source file and selected settings. Studios should keep originals separately.
Face data — see section 3.
Payment data:
- plan, billing term, amounts, invoices and payment status;
- card and bank details are collected and held by our payment provider, not by us. We receive confirmation of a payment and a reference, never your full card number.
Technical data:
- IP address, device and browser information, and timestamps of significant actions such as sign-in, upload and download;
- error diagnostics needed to keep the service working.
3. Face data, in detail
When a studio uploads photographs, our software detects faces in them and converts each detected face into a numerical descriptor — a fixed-length list of numbers representing geometric features. The photograph itself is stored because the studio uploaded it; the descriptor is stored alongside it.
A descriptor is not a picture. It cannot be reversed into an image of a face, and on its own it does not identify anyone by name.
When a guest chooses to add a selfie, we store that selfie and derive a descriptor from it in the same way. Comparing the two lets us show the guest the photographs they appear in. A guest may add more than one labelled selfie — for example for family members — and each is handled the same way.
We use face data for one purpose: matching people to photographs inside the events concerned. We do not use it to identify anyone outside that purpose, we do not sell or share it, and we do not use it to train facial-recognition models.
For photographs, face detection runs on the photographer’s own computer during upload rather than on our servers.
4. Consent, and what our system actually records
Before an account can store face descriptors, the holder of that account must accept our facial-recognition terms. We keep a record of the version accepted, the time, the IP address and the browser or application used. That record is held once per account and applies to that account’s use of the feature.
A guest is asked to consent separately, on their own account, before any selfie of theirs is analysed. A guest can withdraw that consent by deleting the face scan, which removes the selfie, the descriptor derived from it and the matches produced from it.
What this mechanism does not do: it does not collect consent from people who merely appear in a photograph and never sign in. Obtaining consent from those people is the studio’s legal responsibility under our Terms, and we cannot verify that it was obtained.
5. If you appear in photographs but have no account
A photographer may upload photographs in which you appear. Faces in those photographs are detected and converted into descriptors as described above, whether or not you have an account with us.
The photographer is responsible for having told you and obtained your consent. If they did not, or if you want your images and any derived data removed, contact the studio that photographed your event. You can also write to us at [email protected] and we will act on a verified request or pass it to the studio and follow up.
Deleting a photograph deletes the descriptors derived from it.
6. Children
Accounts are for people aged 18 and over. We do not knowingly create accounts for children.
Children do appear in event photographs. Under the Digital Personal Data Protection Act, 2023, processing a child’s personal data requires verifiable consent from a parent or guardian. Our Terms place that obligation on the studio that uploads the photographs. If you are a parent or guardian and want a child’s images or derived face data removed, contact the studio or write to us at [email protected] and we will act promptly.
7. How we use personal data
- to operate the service — hosting galleries, delivering photographs, matching guests to their pictures, and running studio tooling;
- to take payment, issue invoices and meet tax obligations;
- to secure the service, investigate abuse and enforce our Terms;
- to notify a guest when new photographs of them are available, where they have that feature enabled;
- to support you when you contact us.
We do not sell personal data. We do not use your photographs or face data for advertising, and we do not use them to train machine-learning models.
9. Where data is stored
Data is stored with cloud providers who may operate facilities outside India. Where personal data is transferred outside India, we do so on terms that require the provider to protect it to the standard described in this policy and as permitted by applicable law.
10. How long we keep it
- Content and derived face descriptors: while the studio keeps them, subject to the storage-limit process below, and deleted within 30 days of the studio deleting them or closing its account.
- Guest selfies and their descriptors: until the guest deletes the face scan, or the account is closed.
- Account data: for as long as the account exists, then up to 90 days in backups.
- Payment, invoice and tax records: as long as tax and companies legislation requires, typically eight years.
- Consent records: for as long as we rely on the consent, plus a reasonable period afterwards to evidence that it was given.
A temporary storage boost does not extend retention indefinitely. Reminders start 7 days before it ends. The studio must extend the boost or reduce usage to its normal quota; remaining over-limit Content is deleted after expiry and completion of the reminders. The Content deletion process also applies to its derived face descriptors. Storage and boost conditions are set out in section 8 of our Terms and Conditions.
The one-month retention used in a yearly photo-count example is an illustration of a studio deleting files and reusing paid storage. That example does not make us delete all uploads automatically after one month.
11. Your rights
Under the Digital Personal Data Protection Act, 2023 you may:
- ask what personal data of yours we hold and how it is used;
- have inaccurate or incomplete data corrected or completed;
- have your data erased, where we no longer need it for the purpose it was collected for and no law requires us to keep it;
- nominate a person to exercise these rights on your behalf if you die or become incapacitated;
- raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied.
Guests can delete face scans and selfies themselves from their profile at any time — that is the fastest route, and it takes effect immediately.
To exercise any right, write to [email protected]. We may need to verify your identity before acting. We respond within 30 days.
12. Security
Access to data is enforced by the service itself on every request, not merely hidden in the interface: a studio can reach only its own events, and a guest only the events they have joined and the folders published to them. Traffic is encrypted in transit, and download links are short-lived and issued per request.
No service is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as the law requires.
14. Changes to this policy
We may update this policy. Where a change materially affects how we handle your personal data, we will tell you by email or in the application before it takes effect. The effective date is shown at the top of this page.