Security & Privacy

ShaadiShots is built on a simple principle: your clients' photos should never leave your control. The entire application runs locally on your own computer, and no photo or face-recognition data is uploaded to any server.

Self-Hosted Architecture

ShaadiShots is a desktop application that installs and runs on your computer. All photo processing, AI face recognition, and gallery generation happen locally. There is no cloud backend for photo storage or processing.

• Photos are read from and written to your local filesystem
• AI face recognition runs on your computer's CPU/GPU
• Guest galleries are served from your local network
• No photo data is transmitted to external servers

Face Recognition & Privacy

Face recognition is one of ShaadiShots' core features, and it involves processing biometric-adjacent data. Here is exactly how it works and what happens to that data:

• Face detection and recognition happen entirely on your local machine
• Face embeddings (mathematical representations of faces) are stored locally in the app's data directory
• Face data is never transmitted to any external server
• Face data is used solely to group photos of the same person within events you create
• You can delete face data at any time by deleting the event or clearing the app's data
• Guests never see face-recognition data — they only see their own photos

Guest Gallery Security

When guests access their photos via QR code, the gallery is served from the photographer's local computer over the local network. Key security properties:

• Each guest can only view their own personalized gallery
• Guests cannot browse other guests' photos
• Gallery access is scoped to the local network where ShaadiShots is running
• No guest data (names, emails, phone numbers) is collected or stored
• No cookies or tracking are used on guest galleries

License Validation

The only network requests ShaadiShots makes are:

• License activation and validation when the app starts (requires internet)
• Periodic license re-validation (every 7 days while online)

License validation only verifies that your license key is valid. No photo data, face data, or event data is sent during this process. After activation, ShaadiShots can work offline for up to 7 days.

Data Retention & Deletion

Because ShaadiShots is self-hosted, you have full control over data retention:

• Photos remain in the folders where you placed them — ShaadiShots does not move or copy them
• Face-recognition data is stored in the app's local data directory
• Deleting an event removes its associated face data
• Uninstalling the app removes all local data
• No data is retained on any external server because no data is ever uploaded

What ShaadiShots Does NOT Do

• Upload photos to any cloud server
• Collect guest personal information
• Use cookies or tracking on guest galleries
• Share data with third parties
• Sell or monetize photo or face data
• Require an internet connection for photo processing

Reporting Security Issues

If you discover a security vulnerability in ShaadiShots, please report it responsibly by emailing ShaadiShots@kumawat.co.in. We take security reports seriously and will respond promptly.