Privacy
Wedding photos are personal. Here's what Foselo collects, why, and the control you have over it.
Last updated 3 November 2026
The short version
- Your original photos stay on your Mac unless you choose to send them.
- We don't sell personal data, show ads, or use your photos to train AI models.
- We don't identify people in your photos.
- You can export your studio's data, and delete your account, at any time.
Who this covers
This policy covers the Foselo website, the Foselo Mac app, and the web pages couples and guests use. Foselo runs these services, and "we" means Foselo.
We make the decisions about studio account data, so we're responsible for it. Photos and client details belong to the studio that added them. For those, the studio decides what happens and we act on its instructions. If you're a couple or a guest, your studio is your first contact, and we'll help them respond.
What we collect, and why
| Whose | What | Why |
|---|---|---|
| Studio accounts | Name, email, optional phone, job title and profile photo. Google sign-in details. Studio name, branding, team members and roles, and your settings. | To run your account and team |
| Billing | Plan, currency, amounts, dates and payment references. A payment provider will handle card and UPI details when payments open. We won't store full card numbers. | To bill you and meet tax rules |
| Couples and clients | Email address, name if given, six-digit sign-in codes, picks, must-haves, notes and approvals. | So the studio can run selection and proofing |
| Smart Album guests | Viewing session, and a hashed version of the network address used for unlock attempts. | To protect albums from guessing |
| Photos and albums | Previews, proofs, print files and Smart Album photos that a studio chooses to publish. Basic file details such as dimensions, capture date and camera model. | To show, deliver and print the album |
| Device and security | Signed-in devices, sign-in times, security events, and activity such as who approved or exported what. | To secure accounts and keep a record |
| Direct Transfer | Sender and recipient emails, folder name, file count and size, and the network addresses the two apps use to connect. Never the photos, which go directly between the two Macs or encrypted through our relay. | To connect the two apps and count relay use |
| Emails | Recipient, kind of email, subject and send result. Never the email body, so codes and links aren't stored there. | To avoid duplicates and fix delivery problems |
| Site use | Pages opened, recorded by route without album IDs or link keys. Tied to an account only on studio pages. The public site and couples' links stay anonymous. | To see what's used and improve it |
Your photos
The Mac app links to the originals on your drive and doesn't copy them. Albums are saved as files on your Mac, and those files are yours to keep, back up or delete.
Something goes online only when you share it. That means previews for selection, proofs for approval, print files sent through a delivery link, and photos in a Smart Album.
With Direct Transfer, photos go from one Foselo user to another, straight between their Macs where possible and through our relay when not. We keep the transfer's details, such as size and status.
To keep faces out of bad crops, the Mac app finds where faces sit in a photo using macOS. This finds a position only. It doesn't work out who anyone is, and we build no face templates.
Studios: your responsibility for clients
When you add a couple's email or publish photos of people, you need a lawful basis for doing so, such as their consent or your contract with them. This includes the guests and children who appear in the photos, for whom you should have consent from a parent or guardian. Please honour requests that clients make to you.
Our legal basis
We process data to deliver the service you asked for, to meet legal duties, on the consent you give, and, where the law allows, for legitimate purposes such as keeping the service secure. You can withdraw consent at any time, though parts of the service may stop working.
Who helps us run Foselo
These providers process data for us under their terms. We share only what they need.
| Provider | What it does |
|---|---|
| Vercel | Hosts the website and service. Its request logs can include full page addresses. |
| MongoDB Atlas | Stores account, studio, selection and proof records. |
| DigitalOcean Spaces | Stores published previews, proofs and print files, in Bengaluru, India. |
| Google Firebase | Handles Google sign-in. |
| Resend | Sends our emails. |
| Payment provider | Will process payments once they open. We'll name it here first. |
Some of them operate outside India, so data may be processed in other countries, with the protections the law requires. We may also disclose data if the law requires it, or as part of a business sale, in which case this policy continues to protect it.
Cookies and local storage
We use only what the service needs: a secure sign-in cookie for studios, a cookie that keeps a couple signed in to their selection, and a session of up to 12 hours for Smart Album viewers. Your browser also remembers choices such as light or dark theme. We use no advertising cookies.
How long we keep data
| Data | Kept |
|---|---|
| Client sign-in codes | Until they expire, after 10 minutes |
| Smart Album unlock attempts | 1 day |
| Delivery files | 30 days after the link expires. Unfinished uploads, 7 days |
| Previews no published version uses | Removed once the album has been quiet for 7 days |
| Albums in Trash | 30 days, then deleted with their photos, comments, shares and links |
| A deleted account or studio | Links clients hold close as soon as deletion is requested. After 30 days it's deleted, including selections, couples' emails, Smart Albums, email records and Direct Transfer records |
| Direct Transfer records | Until the studio or account that sent or received them is deleted |
| Email records | Until the studio or account they belong to is deleted |
| Signed-out device records | No fixed end date yet. We're setting one and will update this table |
| Billing records | As long as tax and accounting law requires |
How we protect it
Data travels over encrypted connections, and storage is private. Selection links need a six-digit code, Smart Albums need a link and PIN, and studios can revoke access. Signed links to photos expire quickly, sign-in attempts are limited, and client pages are kept out of search engines. No system is perfectly secure. If a breach affects you, we'll tell you and the relevant authorities as the law requires.
Your rights
Depending on where you live, including under India's Digital Personal Data Protection Act 2023 and the GDPR, you can ask to see your data, correct it, delete it or get a copy. You may also withdraw consent, object to some uses, nominate someone to act for you, and complain to your data protection authority.
Studios can export data and delete their account in Settings. For anything else, contact us using the details below. We'll respond within the time the law allows.
Children
Foselo accounts are for people aged 18 and over. Children may appear in wedding photos, and those photos remain under the control of the studio that took them.
Changes to this policy
We'll update the date above when this changes, and tell studios by email before any important change takes effect.
Contact and grievances
Questions, requests and complaints: [email protected].
Grievances: Foselo Privacy and Grievance Desk, at the same address.
Foselo, Bengaluru, Karnataka, India.