Privacy Policy

Last updated: September 29, 2026

Terms of Service →Refund & Cancellation Policy →

This Privacy Policy explains how Revepod Technologies LLP (LLPIN: ADC-2765) ("Revepod," "we," "us," "our") collects, uses, and protects information when you use Revepod (the "Service"), a studio management and client communication platform for wedding and event photography studios.

1. Information We Collect

  • Account information: name, email address, phone number, business/studio name, and billing details when you sign up.
  • Customer Data you upload: information about your clients that you input into Revepod as part of running your studio — which may include client names, contact details, event dates, quotations, contracts, payment records, event schedules, deliverables, and album drafts. This is uploaded by you, the studio owner ("Data Fiduciary" under the DPDP Act), and we process it on your behalf ("Data Processor").
  • Usage data: how you interact with the Service — pages visited, features used, log data, device/browser information.
  • Payment information: processed via Razorpay (including UPI); we do not directly store full payment card details.
  • Communication data: if you use Revepod's integrations to message your clients (e.g., via WhatsApp) or send outreach/notifications via our email delivery provider, we process the content and metadata necessary to deliver those communications.

2. How We Use Information

  • To provide, operate, and maintain the Service.
  • To process payments and manage subscriptions.
  • To communicate with you about your account, updates, or support requests.
  • To improve the Service, including through aggregated, anonymized usage analysis.
  • To comply with legal obligations.

We do not sell your personal information or your Customer Data to third parties. Consistent with applicable Indian law, we will not share your Personal Information with third parties for their own direct marketing purposes without your consent.

3. Legal Basis for Processing

Under India's DPDP Act, personal data may only be processed on the basis of (a) consent, or (b) one of the specific "certain legitimate uses" set out in Section 7 of the DPDP Act.

We rely on: (a) your consent, given at signup (including your acceptance of these Terms and this Policy) and through your continued use of the Service; and (b) the "voluntary provision" legitimate use under Section 7(a) of the DPDP Act — where you have voluntarily provided personal data to us for a specified purpose, such as creating an account or making a payment, and have not indicated that you do not consent to that use.

Where we are legally required to process or retain data — for example, tax, accounting, or KYC records — we do so under the compliance-with-law grounds recognised under the DPDP Act and other applicable Indian law.

4. How We Share Information

We may share information with:

  • Service providers who help us operate the Service (e.g., hosting providers, Razorpay for payments, email delivery services, WhatsApp Business API providers).
  • Legal authorities, if required by law or to protect our rights.
  • A successor entity, in the event of a merger, acquisition, or sale of assets.

We do not share Customer Data you've uploaded with third parties except as necessary to operate the Service (e.g., cloud hosting, payment processing, message delivery) or as legally required.

5. Data Storage and Security

We implement reasonable technical and organizational measures to protect data, including encryption in transit, access controls, and restricted employee access on a need-to-know basis. No system is completely secure; we cannot guarantee absolute security.

In the event of a personal data breach, we will give notice to the Data Protection Board of India and to each affected Data Principal, in the form and manner required under Section 8(6) of the DPDP Act and its rules, including information about what happened and the steps we are taking in response.

6. Data Retention

  • We retain account information for as long as your account is active.
  • Upon account termination, Customer Data is retained for at least 30 days to allow for export (see Section 17 of our Terms of Service), after which it is deleted, except where retention is required by law.
  • Usage data is generally retained for a shorter period, except where needed for security, fraud prevention, or legal compliance.

7. Your Rights

Under the DPDP Act and general good practice, you have the right to:

  • Access a summary of the personal information we hold about you and the processing activities we carry out on it, including the identities of other Data Fiduciaries and Data Processors we have shared it with and a description of what was shared.
  • Correct, complete, or update inaccurate or incomplete information.
  • Request erasure of your data, subject to legal retention requirements.
  • Withdraw consent at any time, where processing is based on consent — withdrawal is as easy as giving consent, and does not affect the legality of processing carried out before withdrawal.
  • Nominate a representative to exercise your rights in the event of death or incapacity (as provided under the DPDP Act).

Much of your account information can be accessed, updated, or corrected directly through your Revepod account settings. For requests beyond what's available there — including access to Customer Data or deletion requests — contact us at revepod.app@gmail.com.

8. Grievance Redressal

In accordance with the DPDP Act, if you have a grievance regarding how your personal data is processed, contact our Grievance Officer at: revepod.app@gmail.com

We aim to acknowledge and address grievances within the timelines prescribed under applicable law.

If your grievance is not resolved to your satisfaction, or is not addressed within the prescribed timelines, you have the right to file a complaint with the Data Protection Board of India, in the manner prescribed under the DPDP Act.

9. Client / Third-Party Data You Upload

If you upload personal data about your own clients (e.g., wedding couples) into Revepod, you are responsible for ensuring you have appropriate consent and legal basis to do so under applicable law, including obtaining any notices or consents required under the DPDP Act. We process this data solely on your instructions, as your data processor, and do not use it for any purpose beyond providing the Service to you.

10. Cookies and Tracking

We use only the cookies and similar technologies strictly necessary for the Service to function — such as session and authentication cookies required to keep you logged in. We do not use tracking cookies or analytics tools for advertising or marketing purposes beyond what is disclosed here.

11. Children's Privacy

The Service is not directed at individuals under 18, and Account holders must be 18 or older (see Section 2 of our Terms of Service). We do not knowingly collect personal information from minors as part of Account registration.

Studios may, in the ordinary course of event photography, process personal data relating to children — for example, in event photographs or guest lists. Where a Studio processes personal data of a child, the Studio (as Data Fiduciary for that data) is responsible for obtaining verifiable consent from the child's parent or lawful guardian as required under Section 9 of the DPDP Act, and for ensuring such processing does not cause any detrimental effect on the child's well-being.

We do not carry out tracking, behavioural monitoring, or targeted advertising directed at children, whether on our own account or on behalf of Studios using the Service.

12. International Data Transfers

Some of the infrastructure and third-party service providers we use to operate the Service — including cloud hosting and database infrastructure — store or process personal data on servers located outside India. As of the date of this Policy, the Government of India has not restricted transfer of personal data to these locations under Section 16 of the DPDP Act.

Where personal data is transferred outside India, we require our service providers to maintain security safeguards consistent with the protections described in this Policy. If the Central Government notifies restrictions on transfer to any country or territory under the DPDP Act, we will comply with those restrictions and update this Policy accordingly.

13. Google API Services

Revepod uses Google's APIs to power a small number of specific, optional features:

  • Sign-in with Google: if you sign in using your Google account, we access your basic Google profile (name, email address, profile picture) solely to authenticate you.
  • Google Sheets sync (optional): if you connect a spreadsheet under Enquiries > Integrations, we access only that specific spreadsheet, solely to sync enquiry rows into Revepod as you configure.
  • Gmail (optional, send-only): if you connect your Gmail or Google Workspace address under RevePod AI, we request only Gmail's send-only permission — Revepod can send email on your behalf when a preset you've configured is triggered, and cannot read, search, or view anything in your inbox.

How we store it: we store only the secure OAuth tokens needed to maintain these connections, transmitted and stored using encrypted connections. We do not permanently store the content of synced spreadsheets or sent emails beyond what is needed to operate the feature.

How we share it: we do not sell, rent, or share data obtained through Google APIs with third parties, do not use it for advertising, and do not transfer it except as necessary to provide the feature, comply with law, or as part of a merger or acquisition with prior notice to you.

Revocation: you can disconnect any of these integrations at any time from your account settings, or revoke Revepod’s access entirely from your Google Account security settings at myaccount.google.com/permissions.

Limited Use Disclosure: Revepod's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email and/or an in-app notice, and will update the "Last updated" date above.

15. Contact Us

For privacy-related questions or requests, contact us at:

Revepod Technologies LLP (LLPIN: ADC-2765)

Registered address: 560, 1st Cross, 1st Main, SVG Nagar, Vijayanagar, Nagarbhavi, Bangalore - 560072, Karnataka, India

Email: revepod.app@gmail.com

© 2026 Revepod Technologies LLP. All rights reserved.