Last updated: June 15, 2025
Digital Memories Platform (“DMP,” “we,” “our,” or “us”) is a software-as-a-service platform for photography and videography studios. This Privacy Policy explains what information we collect when you or your clients use our platform at digitalmemoriesplatform.com (the “Service”), how we use and protect that information, and the choices available to you. By using the Service you agree to this Policy.
DMP provides photography studios with an integrated workspace covering client relationship management (CRM), bookings and scheduling, invoicing and payments, client-facing galleries, and messaging via email and WhatsApp Business. Studios use DMP to run their own business; their clients typically interact with DMP only when receiving a gallery link, an invoice, a booking confirmation, or a WhatsApp message initiated by their studio.
Protecting the personal information handled through the Service is fundamental to our business. We aim to collect the minimum data required to operate the Service, keep it secure, and give both studios and their end clients meaningful control over the data that concerns them.
We collect information in the following categories:
When you register as a user of DMP we collect your name, email address, phone number, password (stored as a one-way hash), preferred language, and, if you enable multi-factor authentication, information used to verify the second factor.
For each studio (organization) using DMP we collect the business name, business address, logo and brand assets, tax identifiers (such as GSTIN where applicable), team member accounts and their assigned roles, and business preferences (currencies, package configurations, working hours).
Studios upload information about their own clients (leads, couples, event organizers). This typically includes the client’s name, contact details (email, phone), event details (date, venue), preferences captured during onboarding, and any notes the studio records for its own service delivery.
Booking records, quotations, contracts, invoices, communication history, task assignments, follow-ups, and pipeline stages that a studio maintains inside DMP.
Studios upload event deliverables such as photographs, videos, and album previews to share with their clients through DMP galleries. This content is treated as confidential and access is restricted to the owning studio and the recipients the studio grants access to.
When a client pays a studio through DMP, we facilitate the transaction using a licensed payment processor (currently Razorpay for Indian rupee transactions). Full card numbers, UPI credentials, and other sensitive payment credentials are entered directly on the processor’s hosted flow and never touch our servers. We retain a transaction reference, the amount, the payment status, and masked identifiers (for example the last four digits of a card) for reconciliation, receipts, and refund handling.
IP address, user-agent string, device type, operating system, browser version, referring URL, and approximate location derived from the IP address. This information is collected automatically when you interact with the Service and is used primarily for security, abuse prevention, and diagnostics.
Aggregated and de-identified information about how the Service is used, such as which features are accessed, session duration, error frequency, and API request rates. We use this information to improve the product. Where user-level analytics are recorded, they are stored under the studio’s organizationId and are subject to the same access controls as the studio’s operational data.
We use the information described above to:
We do not use client photographs, videos, or private CRM notes to train machine-learning models. Any product intelligence or benchmark features are derived from aggregated, de-identified metrics that cannot reasonably be linked back to an individual studio’s clients.
DMP integrates with the Meta WhatsApp Business Platform so that studios can send booking confirmations, reminders, delivery notifications, and gallery links to their clients from their own WhatsApp Business number. Key facts about this integration:
DMP relies on the following third-party services to deliver the platform. Each provider processes only the data required for its specific function and is bound by its own terms and privacy commitments.
We do not claim compliance certifications (such as SOC 2, ISO 27001, HIPAA, or PCI-DSS Level 1) that we have not actually obtained. If we obtain any such certifications in the future, this Policy will be updated to reflect them.
We apply industry-standard technical and organizational controls to protect the information we handle. Current safeguards include:
No system can be guaranteed to be perfectly secure. We continuously review our controls and encourage users to help us keep the Service safe by using strong, unique passwords, enabling multi-factor authentication when available, and reporting suspected security issues to the address in Section 13.
We retain information for as long as an account is active or as needed to provide the Service, comply with legal obligations (for example tax and accounting retention requirements), resolve disputes, and enforce our agreements.
When a studio closes its account, the studio’s operational data (leads, bookings, galleries, WhatsApp connection) is scheduled for deletion or anonymization within a reasonable period, subject to any legal hold or ongoing legitimate business need. Backup copies are removed on the applicable backup rotation cycle. Financial records that must be retained under law (for example invoices and tax filings) are kept for the period required by that law.
You may request accelerated deletion of specific records at any time by contacting the address in Section 13; we will honor the request except where retention is legally required.
Subject to applicable law and to verification of your identity, you may:
End clients of a studio (for example a couple whose photographs are hosted by their photographer through DMP) should first contact the studio, which is the controller of that data. DMP will assist studios in honoring valid requests from their clients.
DMP is a business tool intended for use by photography and videography studios and their staff. It is not directed to children, and we do not knowingly collect personal information from individuals under the minimum age required by applicable law in their jurisdiction (16 in most of the European Economic Area, 13 in the United States, and 18 in India for certain purposes). If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations, or the Service. When we make material changes we will update the “Last updated” date at the top of this page and, where appropriate, provide notice through the Service (for example a banner on your studio dashboard or an email). Your continued use of the Service after an update takes effect constitutes acceptance of the revised Policy.
If you have questions about this Policy, want to exercise your rights, or wish to report a privacy or security concern, please contact us:
We aim to respond to privacy requests within a reasonable time frame and, in any event, within the periods required by applicable law.
© 2026 Digital Memories Platform. This Policy is provided for transparency and does not create any contractual right beyond those expressly stated in our Terms of Service.