CLICKO TECHNOLOGIES
PRIVACY POLICY
Standard Operating Terms & Data Governance Policy for Clicko On-Demand Photography Platform

Effective Date: September 14, 2026
Legal Compliance: DPDP Act 2023 & IT Act 2000
Applicability: User App & Partner App

REGULATORY COMPLIANCE NOTICE:
This Privacy Policy is drafted in accordance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and developer distribution agreements for Google Play and Apple App Store.

  1. INTRODUCTION & SCOPE
    This Privacy Policy governs the collection, processing, transmission, storage, and disclosure of data by Clicko ("Platform", "we", "us", or "our"), operated by Clicko Technologies. This policy applies to all users accessing our services, including Clients (individuals booking photography or videography sessions) and Photographer Partners / Freelancers (service providers registered to fulfill bookings) across the Clicko Mobile Applications and Web Portals.

By creating an account, accessing, or utilizing any services provided by Clicko, you acknowledge that you have read, understood, and agreed to the practices outlined herein. If you do not agree with any provision of this Policy, you must refrain from installing, registering with, or utilizing our services.

  1. DEFINITIONS
  • "Data Principal" (User): Any natural person to whom the personal data relates (Clients and Photographer Partners).
  • "Data Fiduciary" (Clicko): The entity determining the purpose and means of processing personal data.
  • "Personal Data": Any data about an individual who is identifiable by or in relation to such data.
  • "Shoot Media": Digital photographic negatives, raw camera frames (RAW/CR3/NEF), high-resolution processed JPEGs, and video footage captured during a booking.
  1. INFORMATION WE COLLECT

A. Account Identity Data

  • Data Points: Full Name, Verified Mobile Number, Email Address, Profile Picture.
  • Purpose & Basis: User authentication via OTP, booking profile generation, and service communication.

B. Partner Verification Data (KYC - Partner App Only)

  • Data Points: Government ID (Aadhaar / PAN verification numbers), Bank Account / UPI details for payouts, equipment specifications.
  • Purpose & Basis: Legal identification, fraud mitigation, background screening, and vendor financial settlements.

C. Location & Geodata

  • Data Points: Precise foreground and background GPS coordinates, shoot destination address, service area zone.
  • Purpose & Basis: Hyperlocal shoot dispatching, live arrival tracking, ETA calculation, and safety auditing during active bookings.

D. Device & Telemetry

  • Data Points: Device Model, OS Version, Firebase Installation ID, IP address, Push Notification tokens, crash logs.
  • Purpose & Basis: System health, automated push dispatch, crash diagnosis via Firebase Crashlytics, and network optimization.

E. Payment Transactions

  • Data Points: Transaction ID, payment status, tokenized gateway tokens (Razorpay / Cashfree). (Note: No card CVV or net banking passwords are saved).
  • Purpose & Basis: Billing reconciliation, invoice creation, platform commissions, and statutory GST compliance.
  1. PHOTO RIGHTS, MEDIA OWNERSHIP & PRIVACY PROTECTION
    Photography involves highly sensitive visual personal data. Clicko establishes clear, strict rules protecting the privacy of clients and creators:

4.1 Client Privacy & Commercial Usage Prohibition:
Photographs and video footage captured during any booking are the personal and private property of the Client. Neither Clicko nor the assigned Photographer Partner is permitted to publish, market, distribute, post on social media, or license Shoot Media to third parties without prior explicit, written consent (such as a signed Model Release or digital in-app consent) executed by the Client.

4.2 Cloud Delivery & Retention Policy:

  • Active Cloud Storage: Processed event and shoot photographs uploaded by partners to Clicko Cloud Storage are maintained for active access and download for a period of thirty (30) calendar days from delivery confirmation.
  • Data Purging & Archival: Upon expiry of the thirty-day window, media may be permanently pruned from cloud servers to protect privacy and storage integrity. Clients are notified to download high-resolution galleries promptly upon delivery.
  • Photographer Local Deletion: Photographers agree to retain working backups for fifteen (15) days post-session exclusively for dispute resolution, after which backup copies should be securely formatted.
  1. HYPERLOCAL GEOLOCATION & APP PERMISSIONS
    Clicko requests explicit Android and iOS system permissions strictly calibrated to app utility:
  • Location (Foreground & Background): Clients utilize location to select booking destinations. Photographer Partners are prompted for background location access exclusively while on active booking status to provide arrival updates and safety routing. Partner background tracking automatically disables once a session concludes.
  • Camera & Photo Library: Used strictly to upload shoot portfolios, profile photos, and transfer delivered images directly to client photo galleries.
  • Notifications: Used for instant order matching, shoot dispatch alerts, photographer arrival warnings, and critical account messages.
  1. DATA SHARING & THIRD-PARTY DISCLOSURE
    Clicko strictly prohibits selling or leasing personal data to third-party data brokers or marketing affiliates. We share information only under strict operational boundaries:
  • Booking Fulfillment: Upon booking acceptance, the client's shoot location, contact number, and first name are shared with the designated Photographer Partner. Similarly, the partner's name, profile photo, verified rating, and live location are shared with the client.
  • Cloud & Platform Infrastructure: We partner with industry-standard providers including Google Cloud Platform / Firebase (data hosting, database management, and authentication).
  • Payment Gateways: PCI-DSS certified payment processors (e.g., Razorpay / Cashfree) handle financial transactions over end-to-end encrypted tunnels.
  • Legal Disclosures: We may disclose data if lawfully compelled by formal subpoenas, court orders, or authorized law enforcement agencies under applicable Indian jurisdiction.
  1. DATA SECURITY & STORAGE ARCHITECTURE
    Clicko enforces technical and operational measures compliant with ISO/IEC 27001 standards and DPDP statutory recommendations:
  • Transport Encryption: All client-server traffic is encrypted using Transport Layer Security (TLS 1.3 / SSL) protocols.
  • Access Controls: Strict Role-Based Access Control (RBAC) and multi-factor authentication are mandatory across all internal databases and production servers.
  • Database Encryption: Sensitive partner KYC tokens and transaction records are encrypted at rest using AES-256 bit encryption algorithms.
  1. USER RIGHTS & ACCOUNT DELETION PROTOCOL
    Under the DPDP Act 2023, every user (Data Principal) has enforceable statutory rights:
  • Right to Access & Correction: Users may view, review, and update profile credentials directly within the Clicko App settings.
  • Right to Withdraw Consent: Users can revoke permissions (Location, Camera, Storage) via device settings at any time.
  • Right to Erasure (Account Deletion): In compliance with Google Play and Apple App Store rules, Clicko provides an in-app "Delete Account" button under Settings -> Account -> Delete My Account.
  • Deletion Turnaround: Upon account deletion confirmation, all personal identifiers, active sessions, and profile records are irrevocably purged or anonymized within thirty (30) business days, excluding records legally required for tax, invoice auditing, or unresolved fraud investigations.
  1. CHILDREN'S PRIVACY
    Clicko services are not intended for individuals under the age of eighteen (18) years without parental supervision. We do not knowingly collect personal data from minors. In case of shoots involving minors (e.g., baby showers, kids' birthdays), bookings must be executed and monitored solely by an authorized parent or legal guardian.
  2. GRIEVANCE REDRESSAL MECHANISM
    Pursuant to the provisions of the Digital Personal Data Protection Act, 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the designated Grievance Officer details are set out below:
  • Designated Officer: Grievance Redressal Officer
  • Platform Entity: Clicko Technologies Private Limited
  • Email Address: grievance@clicko.in / support@clicko.in
  • Response Timelines: Acknowledgment within 48 hours; Resolution within 30 days.
  • Registered Address: Legal & Compliance Cell, Clicko Technologies, New Delhi, India
  1. AMENDMENTS TO THIS POLICY
    Clicko reserves the right to revise or modify this Privacy Policy at intervals to reflect legal changes, technological advancements, or platform capabilities. Any updates will be accompanied by an updated "Effective Date" at the top of this document, and material changes will be notified via in-app banner or registered email.

Clicko foreground location access karta hai nearby photographer matching aur shoot venue location ke liye.

Clicko account delete karne par user data permanently delete karta hai