Effective Date: June 29, 2026
Last Updated: June 29, 2026
TrizenAI Technologies Private Limited ("Company," "we," "us," or "our") operates Snapflo (snapflo.studio), a studio management platform for photographers, freelancers, and content creators. This Privacy Policy describes how we collect, use, process, and protect your personal information when you use our Services, in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), India's Digital Personal Data Protection Act 2023, and Google's API Services User Data Policy.
By accessing or using Snapflo, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, please discontinue use of our Services.
Company Name
TrizenAI Technologies Private Limited
Registered Address
Chennai, Tamil Nadu, India
Data Protection Contact
support@snapflo.studioGeneral Inquiries
support@snapflo.studioWhen you voluntarily connect social media accounts to Snapflo's scheduling feature, we receive authorization tokens and limited profile data as permitted by your consent. See Section 5 for full details on Google/YouTube data specifically.
Snapflo never posts to any social media platform without your explicit action. You can disconnect any account at any time from your Snapflo settings.
Under the GDPR, we process your personal data on the following legal grounds:
Processing required to deliver the services you signed up for.
Where you have explicitly authorised specific processing, such as connecting a social media account.
For improving our services, fraud prevention, and platform security.
When required to comply with applicable laws and regulations.
To provide, maintain, and improve Snapflo — including bookings, gallery delivery, invoicing, and social media scheduling.
To process payments, generate invoices, and manage subscription billing.
To send service notifications, security alerts, and respond to your support requests.
To analyse usage patterns, diagnose issues, and improve the platform experience. Analytics data is anonymised where possible.
To detect, prevent, and respond to security incidents, fraud, and abuse.
To comply with applicable laws, regulations, and lawful requests.
We do not sell, rent, or trade your personal information to third parties.
We share information only in the following limited circumstances:
Trusted vendors who help operate our platform — cloud hosting (AWS/Google Cloud), payment processors (Razorpay, Stripe), and transactional email providers. All providers are bound by data processing agreements and may not use data for any other purpose.
When required by law, subpoena, court order, or government request, or to protect our rights, property, or safety.
In connection with a merger, acquisition, or sale of assets, your data may transfer as part of the transaction with advance notice to you.
When you explicitly authorise sharing with a specific third party.
Limited Use Disclosure: Snapflo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve user-facing features visible within Snapflo and is not used for advertising, profiling, or transferred to any third party for any purpose other than delivering the service you requested.
When you choose to connect your Google account to Snapflo, we request the following OAuth scopes depending on the features you enable:
Google Calendar
https://www.googleapis.com/auth/calendar.events
Allows Snapflo to create, update, and delete shoot sessions and events on your Google Calendar on your behalf. Used solely to sync bookings and schedules you create within Snapflo to your calendar.
https://www.googleapis.com/auth/calendar.readonly
Allows Snapflo to read your calendar events to check availability and avoid scheduling conflicts when booking new shoots or client sessions.
YouTube (Social Media Scheduling)
https://www.googleapis.com/auth/youtube.upload
Allows Snapflo to upload video files to your YouTube channel on your behalf. Used solely to publish videos you have created and scheduled within Snapflo.
https://www.googleapis.com/auth/youtube.readonly
Allows Snapflo to read your channel name and channel ID so we can display your connected account within the dashboard and confirm successful uploads.
We request only the minimum permissions necessary for each feature. We do not request access to your Gmail, Google Drive, Google Contacts, or any other Google service.
We use the Google user data we receive solely to:
We do NOT: use Google user data to serve advertisements, build advertising profiles, sell or transfer it to any third party for their independent use, use it for any purpose unrelated to the service described in this policy, or allow humans to read your Google data except with your explicit permission or as required by law.
We store only the OAuth access and refresh tokens needed to maintain your authenticated connection with Google. These tokens are encrypted at rest using AES-256 and in transit using TLS 1.3. We do not store the contents of your Google Calendar events or raw video content on our servers beyond what is necessary to complete a scheduled action (e.g., temporarily staging a video file before upload). Calendar event IDs are stored solely to allow Snapflo to update or remove events you manage through the platform. Tokens and associated event IDs are deleted within 30 days of account disconnection or account deletion.
We do not share, sell, or disclose Google user data to any third party. The only data transfer to Google's servers is the video content you have explicitly scheduled for upload — this transfer is necessary to fulfil the service you requested. No other Google data leaves Snapflo's systems.
You can disconnect your Google account (Calendar and/or YouTube) at any time:
Upon revocation, Snapflo will immediately stop writing to your Google Calendar and YouTube channel. Stored OAuth tokens and calendar event IDs will be deleted within 30 days.
Your personal data may be transferred to and processed in countries outside your country of residence, including India and countries where our cloud service providers operate.
For transfers from the European Economic Area (EEA), we use appropriate safeguards including:
We implement industry-standard technical and organisational security measures to protect your data:
TLS 1.3 for data in transit; AES-256 for data at rest, including OAuth tokens.
Role-based access controls and multi-factor authentication for internal systems.
Continuous security monitoring and intrusion detection systems.
Regular encrypted backups with tested disaster recovery procedures.
We retain your data only as long as necessary for the purpose it was collected:
| Data Type | Retention Period |
|---|---|
| Account Information | Duration of account + 30 days after deletion |
| Google Calendar & YouTube OAuth Tokens | Deleted within 30 days of disconnection or account deletion |
| Google Calendar Event IDs | Deleted within 30 days of disconnection or account deletion |
| Transaction Records | 7 years (as required by tax and financial regulations) |
| Usage Analytics | 24 months (anonymised thereafter) |
| Support Communications | 3 years from resolution |
| Backup Data | 90 days (rolling deletion) |
Under the General Data Protection Regulation, you have the following rights:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data ("right to be forgotten").
Request limitation on how we process your data.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or direct marketing.
Withdraw consent at any time where processing is consent-based (including revoking Google account access).
File a complaint with your local supervisory data protection authority.
Email us at support@snapflo.studio or use our Data Deletion page. We will respond within 30 days as required by GDPR.
We use cookies and similar tracking technologies to maintain sessions and improve your experience. You can manage preferences through your browser settings.
For full details see our Cookie Policy.
Snapflo is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such data, please contact us at support@snapflo.studio and we will promptly delete it.
Snapflo may contain links to external websites and integrations (e.g., social media platforms, payment gateways). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information.
We may update this Privacy Policy to reflect changes in our practices or applicable law. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where required, by sending an email notification to your registered address. If we make material changes to how we use Google user data, we will notify you in advance and obtain fresh consent where required.
For questions, concerns, or requests about this Privacy Policy or our data practices:
Data Protection Contact
support@snapflo.studioGeneral Inquiries
support@snapflo.studioPhone
+91 9003382337Address
Chennai, Tamil Nadu, India
TrizenAI Technologies Private Limited
EEA residents may also contact their local Data Protection Authority for GDPR-related concerns.
© 2026 Snapflo by TrizenAI Technologies Private Limited. All rights reserved.
This privacy policy applies to Snapflo at snapflo.studio, owned and operated by TrizenAI Technologies Private Limited.
