Privacy Policy

1. INTRODUCTION

PicaBot ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, software, and services.

This policy applies to all users of PicaBot services, including website visitors, software users, and customers of businesses using our photobooth software.

COMPLIANCE:

This policy is designed to comply with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Indian Personal Data Protection Act
• Other applicable privacy laws

2. INFORMATION WE COLLECT

PERSONAL INFORMATION:

We may collect the following personal information:

Account Information:

• Name, email address, phone number
• Business name and address
• Payment information (processed by third parties)
• Username and password
• Profile information and preferences

Technical Information:

• Device identification and hardware information
• IP address and location data
• Browser type and version
• Operating system information
• Software usage statistics and performance data

PHOTOS AND CONTENT:

For users of our photobooth software:

• Photos taken using our software (for QR code generation)
• Photo metadata (date, time, location if enabled)
• Custom templates and branding elements
• Text and other content added to photos

PAYMENT INFORMATION:

• Payment gateway credentials (stored encrypted)
• Transaction records and payment history
• Billing information and invoices
• Subscription details and usage metrics

AUTOMATICALLY COLLECTED INFORMATION:

• Website usage data and analytics
• Log files and error reports
• Cookies and similar tracking technologies
• Feature usage and interaction data

3. HOW WE USE YOUR INFORMATION

We use collected information for the following purposes:

SERVICE PROVISION:

• Providing and maintaining our software and services
• Processing user registrations and subscriptions
• Generating QR codes and sharing links for photos
• Customer support and technical assistance
• Software updates and security patches

BUSINESS OPERATIONS:

• Processing payments and managing subscriptions
• Communicating about services and account changes
• Analyzing usage patterns for service improvement
• Preventing fraud and ensuring security
• Compliance with legal obligations

MARKETING AND COMMUNICATIONS:

• Sending promotional emails and newsletters (with consent)
• Announcing new features and updates
• Conducting surveys and market research
• Personalizing user experience and recommendations

LEGAL AND SECURITY:

• Enforcing our terms and conditions
• Investigating and preventing illegal activities
• Protecting our rights and property
• Responding to legal requests and court orders

4. INFORMATION SHARING AND DISCLOSURE

We may share your information in the following circumstances:

WITH YOUR CONSENT:

• When you explicitly authorize sharing
• For specific purposes you've requested
• With third-party integrations you've enabled

SERVICE PROVIDERS:

• Payment processors (Razorpay, Stripe, PayPal, etc.)
• Cloud hosting and storage providers
• Email and communication service providers
• Analytics and monitoring services
• Customer support platforms

BUSINESS TRANSFERS:

• In connection with mergers, acquisitions, or sales
• During due diligence processes
• To successors or assigns of our business

LEGAL REQUIREMENTS:

• To comply with applicable laws and regulations
• In response to lawful requests from authorities
• To protect our rights, property, or safety
• To protect the rights and safety of others

PHOTO SHARING:

• Photos uploaded for QR code generation are made accessible via sharing links
• Sharing links may be provided to photobooth customers
• Photos are not shared publicly without explicit consent
• Third-party access limited to generated sharing links

WE DO NOT:

• Sell personal information to third parties
• Share information for marketing purposes without consent
• Provide access to raw user databases
• Share payment gateway credentials with unauthorized parties

5. DATA RETENTION

We retain information for different periods based on data type and purpose:

ACCOUNT INFORMATION:

• Retained while account is active
• Deleted within 30 days of account closure
• Some information may be retained for legal compliance

PHOTOS AND CONTENT:

• Free users: 30 days after upload
• Pro users: 30 days after upload
• Extended retention available upon request
• Automatic deletion for storage management

PAYMENT INFORMATION:

• Transaction records: 7 years for tax compliance
• Payment gateway credentials: Until account closure
• Billing information: Until subscription ends + 5 years

TECHNICAL DATA:

• Usage logs: 12 months
• Error reports: 6 months
• Analytics data: 24 months (anonymized after 12 months)

LEGAL HOLDS:

Information may be retained longer if required for:

• Legal proceedings or investigations
• Regulatory compliance
• Fraud prevention
• Legitimate business interests

6. DATA SECURITY

We implement comprehensive security measures to protect your information:

TECHNICAL SAFEGUARDS:

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive data
• Secure database configurations
• Regular security updates and patches
• Access controls and authentication

ORGANIZATIONAL MEASURES:

• Employee training on data protection
• Limited access on need-to-know basis
• Regular security audits and assessments
• Incident response procedures
• Third-party security certifications

PAYMENT SECURITY:

• PCI DSS compliance for payment data
• Encrypted storage of payment credentials
• Secure API integrations
• Regular security monitoring

LIMITATIONS:

While we implement strong security measures, no system is 100% secure. We cannot guarantee absolute security and are not liable for security breaches caused by factors beyond our reasonable control.

7. YOUR PRIVACY RIGHTS

Depending on your location, you may have the following rights:

ACCESS RIGHTS:

• Request access to your personal information
• Obtain copies of data we hold about you
• Receive information about our data processing activities

CORRECTION AND UPDATING:

• Request correction of inaccurate information
• Update your account information
• Modify preferences and settings

DELETION RIGHTS ("Right to be Forgotten"):

• Request deletion of your personal information
• Account closure and data removal
• Limitations for legal compliance and legitimate interests

DATA PORTABILITY:

• Request data in a portable format
• Transfer data to another service provider
• Export your photos and content

OPT-OUT RIGHTS:

• Unsubscribe from marketing communications
• Opt out of certain data processing activities
• Disable cookies and tracking (may affect functionality)

OBJECTION RIGHTS:

• Object to processing based on legitimate interests
• Object to direct marketing
• Request restrictions on processing

TO EXERCISE YOUR RIGHTS:

• Email us at info@picabot.in
• Include "Privacy Rights" in the subject line
• Provide identification for verification
• Specify the rights you wish to exercise

8. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies for:

ESSENTIAL COOKIES:

• User authentication and session management
• Security and fraud prevention
• Basic website functionality
• Shopping cart and preferences

ANALYTICS COOKIES:

• Website usage statistics
• Performance monitoring
• Error tracking and debugging
• Feature usage analysis

MARKETING COOKIES:

• Personalized content and recommendations
• Advertising effectiveness measurement
• Social media integration
• Cross-site tracking (with consent)

COOKIE MANAGEMENT:

• Browser settings to control cookies
• Opt-out tools for analytics and marketing
• Cookie consent management
• Regular cookie policy updates

THIRD-PARTY COOKIES:

• Payment processor cookies
• Analytics service cookies (Google Analytics, etc.)
• Social media cookies
• Customer support chat cookies

9. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your own, including:

• India (our primary operations)
• United States (cloud hosting and services)
• European Union (data centers and services)
• Other countries where our service providers operate

TRANSFER SAFEGUARDS:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by relevant authorities
• Privacy Shield or successor frameworks
• Other appropriate safeguards as required by law

DATA SUBJECT RIGHTS:

Your privacy rights apply regardless of where your data is processed. You can exercise these rights by contacting us at info@picabot.in.

10. CHILDREN'S PRIVACY

AGE RESTRICTIONS:

• Our services are not directed to children under 13
• We do not knowingly collect information from children under 13
• Account holders must be 18 years or older
• Parental consent required for minors using photobooths

PHOTOBOOTH USAGE:

• Operators must obtain appropriate permissions for photographing minors
• Compliance with local laws regarding children's privacy
• Special handling for photos containing minors
• Parental consent documentation recommended

IF YOU BECOME AWARE:

If you believe we have collected information from a child under 13, please contact us immediately at info@picabot.in and we will promptly investigate and delete such information.

11. CHANGES TO THIS PRIVACY POLICY

POLICY UPDATES:

• We may update this policy from time to time
• Material changes will be communicated with 30 days notice
• Notice methods include email, website announcements, and in-app notifications
• Continued use constitutes acceptance of updated policy

NOTIFICATION METHODS:

• Email to registered users
• Prominent website notice
• In-software notifications
• Version dating and change logs

REVIEW RECOMMENDATIONS:

• Review this policy periodically
• Check for updates when using our services
• Contact us with questions about changes

12. THIRD-PARTY SERVICES

Our services integrate with third-party providers:

PAYMENT PROCESSORS:

• Razorpay, Stripe, PayPal, Square, and others
• Each has their own privacy policies
• We share necessary payment information only
• Users should review processor privacy policies

CLOUD SERVICES:

• AWS, Google Cloud, Microsoft Azure, and others
• Used for hosting, storage, and computing
• Data processing agreements in place
• Regular security and compliance audits

ANALYTICS SERVICES:

• Google Analytics, Mixpanel, and others
• Used for usage analysis and service improvement
• Data anonymization and aggregation
• Opt-out options available

We are not responsible for the privacy practices of third-party services. Users should review their privacy policies independently.

13. CONTACT INFORMATION

For privacy-related questions, concerns, or requests:

PicaBot Privacy Team
Email: info@picabot.in
Subject: Privacy Inquiry

Website: https://picabot.in
Support: Visit picabot.in for additional resources

DATA PROTECTION OFFICER:
For EU residents or GDPR-related inquiries:
Email: info@picabot.in
Subject: DPO - GDPR Inquiry

RESPONSE TIME:

• General inquiries: 5-7 business days
• Privacy rights requests: 30 days (may be extended to 60 days for complex requests)
• Urgent security matters: 24-48 hours

14. LEGAL BASIS FOR PROCESSING

We process personal information based on the following legal grounds:

CONSENT:

• Marketing communications
• Optional features and services
• Cookie usage (where required)
• Photo sharing and QR code generation

CONTRACT PERFORMANCE:

• Providing software and services
• Account management and billing
• Customer support
• Software updates and maintenance

LEGITIMATE INTERESTS:

• Service improvement and development
• Fraud prevention and security
• Business operations and analytics
• Direct marketing to existing customers

LEGAL COMPLIANCE:

• Tax and accounting obligations
• Regulatory reporting requirements
• Law enforcement cooperation
• Court orders and legal processes