Privacy Policy
Last updated: June 27, 2026
This Privacy Policy describes how AlbumLink (operated by VITA Tech Solutions, referred to as "we", "us" or "our") collects, uses, discloses and protects your information when you use the AlbumLink platform available at phbook.vitaai.co.in (the "Service").
This policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDP Act") of India.
1. Information We Collect
- Lab account data: lab name, owner name, email address, phone number, password (hashed) and studio details.
- Customer data uploaded by labs: customer name, contact details, event name and date, photographer credits, order number.
- Album content: photos and PDFs uploaded for delivery to end customers.
- Usage data: log files, IP address, device type, browser, pages visited and timestamps.
- Cookies: strictly necessary cookies for authentication and session management.
2. Purpose of Collection
- To provide, operate and maintain the Service.
- To generate shareable album links, QR codes and PINs.
- To send transactional emails (album ready, expiry reminders, invoices).
- To bill labs for albums delivered and recover dues.
- To detect, prevent and address fraud or abuse.
- To comply with applicable Indian laws and lawful requests from authorities.
3. Legal Basis & Consent
Personal data is processed based on the consent obtained at sign-up and on the legitimate interest of providing the Service. By creating an account or uploading content, you confirm that you have the necessary rights and consents from any data principal whose information you upload.
4. Sharing & Disclosure
We do not sell personal data. We share data only with:
- Cloud infrastructure and email delivery sub-processors strictly to operate the Service.
- Payment processors for invoice settlement.
- Law enforcement or regulatory authorities when legally required.
5. Data Retention
Album links are active for 6 months by default and can be renewed. After expiry and a grace period, album files may be permanently deleted. Account and billing records are retained for the period required by Indian tax and accounting laws.
6. Security
We follow reasonable security practices including TLS encryption in transit, encryption at rest, role-based access, PIN protection for shared albums and regular backups. No system is 100% secure; you are responsible for keeping your credentials confidential.
7. Your Rights (Data Principal Rights under the DPDP Act)
- Right to access a summary of your personal data.
- Right to correction and erasure of inaccurate or no-longer-required data.
- Right to grievance redressal.
- Right to nominate another individual to exercise rights in case of death/incapacity.
- Right to withdraw consent at any time.
Requests can be sent to the Grievance Officer (details below).
8. Children
The Service is intended for businesses (photo and color labs). It is not directed at children under 18. Labs uploading photographs of minors must have parental consent under the DPDP Act.
9. International Transfers
Data may be processed on servers located outside India in accordance with notifications issued under the DPDP Act.
10. Changes to this Policy
We may update this policy from time to time. Material changes will be notified by email or in-app notice.
11. Grievance Officer
In accordance with the Information Technology Act, 2000 and the rules made thereunder, the contact details of the Grievance Officer are:
VITA Tech Solutions
Email: support@vitatechsolutions.com
Website: vitatechsolutions.com