Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information: your name, email address, phone number, studio/business name, and password when you register and sign in.
• Studio business data you create: leads/enquiries, clients, quotations, bookings, packages, invoices, payment records, projects and project stages, tasks, team members, expenses, galleries, and the photos and videos you upload.
• Your clients' information: when you add your own customers (their name, phone number, email, event type, event date, address, and related notes) so you can manage your work for them. You are responsible for having a lawful basis and the necessary consent to provide this information to us.
• Payment information: when you purchase a subscription or an add-on, payment is processed by our third-party payment gateway. We receive limited transaction details (such as a payment reference and status). We do not store your complete card or bank credentials.
• Communication data: messages and notifications generated by the Service, including content prepared for delivery over WhatsApp where you have connected it.
• Usage and technical data: log data, device and browser type, IP address, pages visited, actions taken, and cookies used to keep you signed in and to improve the Service.

2. How We Use Your Information

We use the information to:

• Provide, operate, maintain, and secure the Service.
• Create and manage your account and authenticate logins (including OTP-based login).
• Run core studio workflows: leads, quotations, bookings, invoices, payments, projects, galleries, client photo selection, and delivery.
• Process subscription and add-on payments (such as additional storage or messaging) through our payment gateway.
• Send transactional communications such as receipts, reminders, selection invites, and service notifications — including over WhatsApp where connected.
• Provide customer support and respond to your requests.
• Analyze usage to improve features, performance, reliability, and security.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with applicable legal, tax, and regulatory obligations.

3. Data Storage and Security

Your data is stored on secured cloud infrastructure. Database records are hosted on managed cloud database services, and uploaded media files (photos and videos) are stored on cloud object storage. We apply industry-standard safeguards including encryption in transit, access controls, and row-level data isolation so that one studio's data is not accessible to another. While we take reasonable measures to protect your information, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

4. Sharing of Information

We do not sell your personal information. We share information only in these cases:

• Service providers: trusted third parties who help us operate the Service — cloud hosting and database providers, cloud object storage providers, our payment gateway, and messaging providers such as the WhatsApp Business Platform — strictly to perform services on our behalf and under appropriate obligations.
• Legal reasons: where required by applicable law, regulation, legal process, or enforceable government request.
• Business transfer: if Sisiona is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

5. WhatsApp Business Platform / Meta Integration

Sisiona integrates with the WhatsApp Business Platform, provided by Meta Platforms, Inc. ("Meta"), to enable photography studios to communicate with their clients over WhatsApp — for example, sending booking confirmations, payment reminders, OTP login codes, and gallery delivery links.

Data collected and processed through this integration

• Phone numbers — of studios, their clients, and their team members, used to send and receive WhatsApp messages.
• WhatsApp message content sent and received through the platform, including booking confirmations, reminders, gallery/delivery links, and OTP login codes.
• WhatsApp Business Account (WABA) details — such as the connected phone number, display name, and business account identifiers — when a studio connects its own WhatsApp number to Sisiona via Meta's Embedded Signup flow.

How data is shared with Meta

To deliver WhatsApp messages, the relevant message content and phone numbers are transmitted to Meta/WhatsApp, as required to operate the WhatsApp Business API. This sharing is limited to what is necessary to send and receive messages on behalf of the studio. We do not sell this data to Meta or to any other party.

Data received from Meta

When a studio connects its WhatsApp Business Account using Facebook Login for Business / Embedded Signup, we receive account and connection details from Meta (such as the WhatsApp Business Account ID, phone number ID, and an access token). This information is used solely to connect and manage that studio's own WhatsApp Business Account within Sisiona, is stored encrypted, and is handled in accordance with Meta's Platform Terms and Developer Policies.

For details on how Meta itself handles data, see Meta's Privacy Policy at facebook.com/privacy/policy.

6. Cookies

We use essential cookies to keep you signed in and to operate core functions of the Service. We may use limited analytics to understand usage and improve the product. You can control cookies through your browser settings; disabling essential cookies may affect how the Service works.

7. Compliance

We aim to handle personal data, including data processed through the WhatsApp Business Platform integration described above, in accordance with applicable data protection laws — including India's data protection regime (the Digital Personal Data Protection Act, 2023, and applicable IT Rules) and, where relevant to users or data originating outside India, the EU General Data Protection Regulation (GDPR).

8. Your Rights & Data Deletion

Subject to applicable law, you may request to access, correct, update, export, or delete your personal data — including phone numbers and WhatsApp message data processed through the integration described in Section 5 — and you may withdraw consent for non-essential processing. To request data deletion or exercise any other right, email support@sisiona.com from your registered email address with the subject line "Data Deletion Request". We may need to verify your identity before acting on a request, and we will confirm once the deletion is complete. You are also responsible for honoring such requests from your own clients whose data you have added to the Service.

We retain your data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain certain records to comply with legal, tax, accounting, or regulatory obligations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

For any questions about this Privacy Policy, your data, or to request data deletion, contact us at support@sisiona.com. You can also reach us at: SISIONA, S. No 50/04 50/05, 50/18, Shop No B 01, Rajalaxmi Icon, Narhe Road, Narhe, Pune, Maharashtra, 411041, India.