Privacy Policy

Last updated: August 2026 · Aligned with the Digital Personal Data Protection Act, 2023

1. Introduction

CaptureFlow ("we", "our", "us") is a CRM platform designed for photography and videography studios, operated by Trident Studios LLP / SilTech Industries. We are committed to protecting your privacy and the privacy of your clients' data. This policy explains how we collect, use, store, and protect your information, in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act). Under the DPDP Act, you (the studio and its clients) are the Data Principals; we act as the Data Fiduciary for your account data, and as a Data Processor for the client records your studio stores in CaptureFlow.

2. Consent & Purpose Limitation

We collect and process personal data only for the purposes stated in this policy, with your consent given at registration. We do not use your data for any purpose beyond running CaptureFlow for you. You may withdraw consent at any time by deleting your account or writing to our Grievance Officer — withdrawal stops all processing except what the law requires us to retain.

3. Data We Collect

When you use CaptureFlow, you may provide:

  • Studio information (name, contact details)
  • Team member details (names, emails, roles)
  • Lead and client information (names, phone numbers, emails, addresses)
  • Event details (dates, venues, service requirements)
  • Payment records (amounts, methods, transaction IDs)

4. How We Use Your Data

Your data is used exclusively to:

  • Provide and maintain the CaptureFlow service
  • Enable you to manage your studio operations
  • Generate reports and analytics for your business
  • Improve our platform and user experience

We do NOT sell, rent, or share your data with any third parties for marketing or advertising purposes.

5. Data Security

  • All data is stored in encrypted databases
  • Passwords are hashed using industry-standard bcrypt encryption
  • All connections are secured with HTTPS/TLS encryption
  • Access to your data is restricted to your studio's team members only
  • Each studio's data is isolated — other studios cannot access your information

6. Data Isolation

CaptureFlow uses a multi-tenant architecture where each studio's data is logically separated. Your leads, clients, events, payments, and team data are only accessible by users within your studio account. We (the CaptureFlow team) do not access your business data unless explicitly requested by you for support purposes.

7. Data Retention

Your data is retained as long as your account is active. If you choose to delete your account, all associated data will be permanently removed from our systems within 30 days.

8. Your Rights (DPDP Act, 2023)

As a Data Principal under the DPDP Act you have the right to:

  • Access a summary of the personal data we hold and how it is processed
  • Request correction, completion or updating of inaccurate data
  • Request erasure of your account and all associated data
  • Withdraw consent, as easily as it was given
  • Grievance redressal through the officer named below
  • Nominate a person to exercise these rights on your behalf

We respond to verified requests within 30 days. Client records inside your studio account are corrected or erased by your studio directly through the app.

9. Data Processors & Storage

  • Data is stored on servers under our control; database backups are encrypted and rotated
  • Payments are processed by Razorpay (an RBI-regulated payment aggregator) — we never see or store your card or UPI credentials
  • Transactional emails are delivered through our SMTP provider

In the event of a personal data breach we will notify affected users and the Data Protection Board of India as required by the DPDP Act.

10. Children's Data

CaptureFlow is a business tool and is not directed at children. We do not knowingly process personal data of anyone under 18 as users of the platform.

11. Grievance Officer

For any privacy question, data request, or grievance under the DPDP Act, 2023, write to our Grievance Officer at contact@siltech.in (Trident Studios LLP / SilTech Industries). We acknowledge grievances within 72 hours and aim to resolve them within 30 days.