Privacy & Data
Protection Policy

1. Privacy Framework & Data Protection Roles

Qlickz AI Solutions ("QlickZ", "we", "our") is dedicated to responsible data governance across all interactive photobooth software, mobile roaming applications, and cloud processing services. We align our data handling practices with applicable data protection standards, including the Digital Personal Data Protection (DPDP) Act 2023 (India), the General Data Protection Regulation (GDPR EU 2016/679), and the California Consumer Privacy Act (CCPA).

• Event Guest (Data Subject / Principal): The individual participating in the photobooth experience.
• Event Operator (Data Fiduciary / Data Controller): The event agency, studio owner, or booth host managing physical station hardware, event operations, and on-site guest consent.
• Qlickz AI Solutions (Data Processor / Technology Provider): The software and cloud infrastructure provider facilitating licensing, image routing, and AI processing services.

2. Facial Processing & Data Lifecycle

Our software and cloud services process participant imagery under clear, purpose-bound safeguards:

• Purpose-Bound Processing: Captured photographs, facial likeness, and styling selections are processed solely for the purpose of generating the requested AI-enhanced photographs or videos and delivering the final output to the guest.
• No Biometric Surveillance or Identification Databases: Automated image analysis is conducted strictly to apply creative visual transformations and framing. We do not extract facial data for surveillance, identity verification, or building biometric identification profiles.
• Temporary Storage & Retention Lifecycles: Rendered media and digital delivery links are hosted temporarily on secure cloud systems solely to facilitate guest access (such as QR code downloads). In accordance with operational lifecycles, temporary delivery links expire on a structured schedule (typically within 20 minutes to 7 days), and security/system logs are cleared periodically within standard administrative windows (up to 30 days).
• Model Training Safeguards: Participant images and creative prompts are processed for inference rendering and are not utilized to train public foundational AI models.

3. On-Site Operations & Local Data Custody

• Local Machine Custody: Output prints, strip layouts, and local event session logs saved to the kiosk machine remain under the direct operational custody and responsibility of the on-site Operator.
• Operator Consent Duty: Operators are responsible for ensuring that participants are informed of data processing and provided with on-screen consent prompts prior to capturing photographs.
• Local Storage Management: Kiosk software provides administrative utilities allowing operators to manage, review, and clear local event session media from disk.

4. Service Infrastructure & Third-Party Processors

To deliver secure and scalable services, we engage reputable cloud infrastructure and technology providers:

• Cloud Hosting & Network Infrastructure: Secure cloud servers and encrypted network routing adhering to enterprise security standards.
• Authorized Payment Processors: PCI-DSS compliant payment gateways managing billing transactions with encrypted protocols.
• AI Processing Services: Secure third-party AI processing platforms and compute services engaged under commercial terms to execute requested image transformations.

5. Data Subject Rights & Grievance Redressal

Individuals wishing to exercise statutory data rights (such as access, correction, or deletion inquiries) or with privacy questions may contact our compliance team: