Privacy policy

This Privacy Policy explains how Visage (“we”, “us”, “our”) collects, uses, stores, shares, and protects information when you visit our website, create an account, make a booking or payment, or use our photobooth services. It also explains your choices and rights.

Last updated: 1 August 2026

This Privacy Policy applies to our website (visagex.in), our online booking and payment system, your Visage account, and our photobooth services, including digital galleries, sharing links, and any related communications.

1. Who we are

Visage is a photobooth brand and event technology provider based in Mumbai, India. In this policy, “you” may mean a website visitor, a registered account holder, a client (event host), or an event guest who appears in photos/videos captured by our services.

Contact: info@visagex.in | +91 9967219574

2. Information we collect

2.1 Account information

  • Registration: when you create a Visage account you provide your name, email address, and (optionally) phone number. If you sign in with Google, we receive your Google profile name and email address.
  • Authentication data: we use Supabase for account management. Supabase stores your session tokens, sign-in method, and last-login timestamps.

2.2 Booking and inquiry details

  • Booking information: event type, date, city, state, country, selected photobooth model, chosen experience, add-ons, extra hours, and pricing mode (deposit or full payment).
  • Contact form submissions: name, email, phone, company/brand, event details, and messages submitted via our contact form (processed by Formspree).
  • Service-related details: event schedules, venue information, delivery preferences, and approvals/feedback.

2.3 Payment information

  • Payment processing: payments are processed by Razorpay, a PCI-DSS compliant payment gateway. We do not receive or store your full card number, CVV, or UPI PIN. We receive and store the Razorpay order ID, payment ID, payment status, the amount paid, and currency.
  • Payment records: we retain booking amounts, dates, payment status, and transaction references for accounting, tax compliance, and dispute resolution.

2.4 Photos, videos, and related data

  • Photobooth content: photos, GIFs, videos, boomerangs, and associated metadata (e.g., capture time, template used, booth configuration).
  • Sharing data: email/phone entered at the booth (if enabled), and delivery status (e.g., whether a link/message was sent).

Important: Event guests may appear in captured content. Depending on the event setup, guests may also voluntarily enter contact details to receive their media.

2.5 Automatically collected information (website)

  • Device and usage data: IP address, browser type, device identifiers, pages viewed, referrer URL, and approximate location inferred from IP.
  • Cookies & similar technologies: used for website functionality, authentication sessions, analytics, and performance.
  • Page view analytics: we track page views (page URL, referrer, session duration) to understand traffic patterns and improve our services.

3. How we use information

  • To provide our services: operate the booth, capture media, create and host galleries, deliver files/links, process bookings and payments.
  • To manage your account: authenticate your identity, maintain your booking history, and let you view or manage your bookings online.
  • To communicate: send booking confirmations, payment receipt summaries, and respond to inquiries and support requests. These are service communications, not marketing.
  • To alert our team: notify our operations team when a booking is paid, a payment fails, or a refund is processed, so we can prepare for your event or follow up as needed.
  • To manage approvals: obtain and record client approvals for final deliverables, templates, or curated selections.
  • To improve: troubleshoot issues, maintain quality, and improve our website/services.
  • For safety and legal purposes: prevent fraud/misuse, enforce agreements, and comply with legal obligations.

4. Legal bases (where applicable)

Depending on where you live and how you interact with us, we rely on one or more of the following bases: contract (providing services you request, processing your payment, and managing your account), consent (e.g., marketing or optional delivery features), legitimate interests (running and improving our business, preventing fraud), and legal obligations (record-keeping, tax, and compliance).

5. Photos/videos, consent, and client/guest approvals

5.1 Event guests

Our photobooth services are typically used at events. By participating (e.g., stepping into the booth or voluntarily submitting contact details for delivery), guests acknowledge that photos/videos may be captured and stored digitally and may be delivered to the guest and/or the event client according to the event’s setup.

5.2 Event clients (hosts)

Clients may receive access to event galleries and selected deliverables. Clients are responsible for ensuring they have appropriate permissions and notices for their event (including any venue rules and any required guest notices/consents) and for how they choose to use or publish the content after we deliver it to them.

5.3 Marketing use

Unless otherwise agreed in writing, we do not publish identifiable guest content for marketing without an appropriate basis (such as client authorization and/or participant consent, depending on the context). When we do use content for marketing (e.g., website portfolio, social media), we may blur or avoid identifying details when reasonably possible.

6. How we share information

We do not sell your personal information. We may share information as follows:

  • With the event client/host: event galleries and deliverables, and related operational details.
  • With service providers: vendors who help us operate, including:
    • Supabase — authentication and database hosting
    • Razorpay — payment processing
    • Resend — transactional email delivery (booking confirmations, payment receipts)
    • Google Analytics — website analytics
    • Formspree — contact form submissions
    • Vercel — website and API hosting
    These providers process data only as needed to deliver their services and are subject to their own privacy policies.
  • For legal/safety reasons: if required by law, court order, or to protect rights, safety, and property.
  • Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

7. Cookies & analytics

We use cookies and similar technologies to operate the website, maintain your authentication session, remember preferences, understand site traffic, and improve performance. You can control cookies through your browser settings. Some features (including sign-in and booking) may not work properly if cookies are disabled. By continuing to use our website, you consent to the use of essential cookies as described in this policy.

8. Data retention

We retain information only as long as reasonably necessary to provide our services and for legitimate business purposes (such as backups, dispute resolution, and record-keeping), unless a longer retention period is required by law.

  • Account data: retained while your account is active and for a reasonable period after deletion, as needed for legal and accounting purposes.
  • Booking and payment records: retained for a minimum period required by applicable tax and accounting regulations (typically 6–8 years under Indian tax law).
  • Event media: typically retained for a limited period after the event (often 6–12 months) unless otherwise agreed with the client.
  • Client communications and records: may be retained longer for accounting, legal, and operational purposes.

Deletion requests are handled case-by-case. We may retain certain information where needed for legal compliance, fraud prevention, to resolve disputes, or to enforce agreements.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information, including encrypted connections (HTTPS), row-level security on database records, and secure API authentication. Payment data is handled by Razorpay under PCI-DSS standards. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Your rights and choices

Depending on your location, you may have rights to request access, correction, deletion, or a copy of your personal information, and to object or restrict certain processing.

  • Account: you can view and update your profile information from your Visage account page.
  • Marketing: you can opt out of marketing communications by following the unsubscribe instructions or contacting us.
  • Event media requests: guests may need to provide sufficient information for us to locate specific content. For privacy and security, we may ask for verification.
  • Account deletion: you may request deletion of your account and associated data by contacting us at info@visagex.in. Certain records (booking, payment, tax) may be retained as required by law.

We may charge a reasonable fee or decline requests that are excessive, repetitive, or not required by law.

11. International transfers

Our service providers (including Supabase, Vercel, Razorpay, and Resend) may process information in countries other than your own, including the United States. Where applicable, we take steps intended to ensure appropriate safeguards are in place.

12. Children’s privacy

Our website and account registration are not directed to children under 18. Photobooth content may incidentally include minors at events. Event clients/hosts are responsible for obtaining any permissions required for minors to participate, where applicable.

13. Third-party links

Our website or galleries may include links to third-party sites or platforms (including Razorpay’s payment pages and WhatsApp). We are not responsible for the privacy practices of those third parties.

14. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last revised. Material changes will be posted on this page. If you have an account, we may also notify you by email of significant changes.

15. Contact us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact us at info@visagex.in.