Privacy Policy

GOSHbooth (“we”, “us”, “our”) operated by GOSHCo values your privacy. This policy explains what we collect, how we use it, and how we protect it.

1. What We Collect

• Event photos captured during the photo booth session.
• No personal information (name, email, phone, Aadhaar) is collected from guests.
• Admin login credentials (email + password, hashed) for the booth operator only.
• Basic server logs (IP address, request timestamps) — retained for 30 days for security purposes only.
• Anonymous website usage data (pages visited, interaction duration, click patterns) collected via Google Analytics.

2. How We Use Photos

• Photos are uploaded to Cloudinary (cloud storage) when internet is available.
• Photo URLs and event metadata are stored in Google Firestore.
• Photos are accessible via a unique QR code link shared at the event.
• We do not use photos for advertising, AI training, or any purpose other than delivering them to the guest who was photographed.
• At the end of each event, all photos are compiled into a zip archive, uploaded to Cloudinary, and the download URL is stored in Firestore. This complete archive is shared with the event host for full album access.

3. Subprocessors

• Cloudinary — cloud storage and delivery of event photos.
• Google Firebase (Firestore) — storing event metadata and photo URLs.
• Vercel / hosting provider — serving the booth.goshco.in website.
• Google LLC (Google Analytics) — website traffic analysis and event tracking.

4. Photo Retention

• Photos are stored in Cloudinary for 90 days after the event date.
• Event metadata in Firestore is retained for 1 year.
• After retention period, photos are permanently deleted from our systems.
• The booth operator (admin) may manually delete photos at any time.

5. Offline Mode

• When internet is not available, photos are stored locally on the operator's laptop only.
• No data is uploaded to any cloud service in offline mode.
• Local photos are the responsibility of the booth operator to manage and delete after the event.

6. Your Rights

• Request deletion of your photo at any time by emailing hello@goshco.in.
• We will process deletion requests within 7 days.
• Include your event name and approximate date in your request.

7. Children

• Photo booths are often used at family events including children's birthdays.
• We do not knowingly store personally identifiable information about children.
• Photos of children are treated with the same retention and deletion policy as all other photos.

8. Security

• Photos are stored in Cloudinary with access-controlled URLs.
• Admin dashboard is password protected.
• HTTPS used across all pages.
• In case of a data breach, affected parties will be notified within 72 hours.