1. Information We Collect

SnapFlow respects your privacy. We collect personal details necessary to provide studio services, including:

Studio profile details (Name, Business Name, Email, Contact Number).
Client proofing session data (Client Names, PINs, Image Selections).
Payment transaction records (Processed securely via PCI-DSS compliant gateways).

2. How We Use Your Data

Your data is used strictly for platform operational purposes:

Delivering photo selection and proofing galleries to clients.
Managing studio billing, invoices, and storage utilization.
Sending transactional SMS and email notifications (e.g., gallery access PINs).

3. Payment & Financial Data Security

SnapFlow never stores credit/debit card numbers or sensitive banking credentials on our servers. All transaction details are directly processed by PCI-DSS compliant payment aggregators (PayHere / Partner Banks) adhering to international security standards.

4. Data Storage & Protection

Uploaded studio photos are encrypted and stored in secure AWS S3 cloud buckets. Access to client galleries is protected by secure PIN authentication and expiring token links.

5. Third-Party Sharing

We do not sell, rent, or trade user data to third-party advertisers. Data is shared only with verified service providers (e.g., PayHere for payments, Meta Graph API for Instagram/WhatsApp notifications) strictly for operational delivery.

6. Data Rights & Contact

Studios may request data exportation or complete account deletion at any time by reaching out to our privacy officer at privacy@snapflow.lk.