ZoefTech Privacy Policy
Effective Date: November 2026 • Compliant with Indian DPDP Act 2023 & Global Privacy Standards
Copyright & Ownership Declaration
© 2026 Zoef Tech. All Rights Reserved.
This software, including its original source code, interface designs, educational content, lesson-planning frameworks, AI-powered workflows, observation methodologies, evaluation structures, documentation and associated digital assets, is protected under applicable intellectual property and copyright laws of India.
Unauthorised copying, reproduction, modification, distribution, publication, commercial exploitation or creation of derivative works using protected original materials is strictly prohibited without prior written permission from the copyright owner.
Access to or use of this application does not grant any ownership, reproduction, redistribution or commercial exploitation rights.
Our Core Biometric Privacy Guarantee
Guest selfies are used strictly and solely for real-time visual face search within the specific event gallery accessed by the guest. Guest selfies are never written to permanent disk storage, databases, or training datasets. Immediately after the cosine similarity search completes, the ephemeral image payload is flushed from volatile memory.
1. Scope and Applicability
This Privacy Policy explains how Zoef Tech (“Zoef Tech”, “we”, “our”), a registered MSME and Udyam enterprise in India, processes personal and biometric data collected through the ZoefTech Facial Recognition AI platform, including our photographer dashboard, public gallery interfaces, and Google Drive synchronization integrations.
2. Biometric Data Processing & Architecture
Under the Digital Personal Data Protection Act (DPDP Act) 2023 of India, facial templates and biometric markers are classified as personal data. Our architecture enforces the following security standards:
- Ephemeral Selfies: A guest selfie taken in the browser is streamed over TLS 1.3 to our inference worker. The worker extracts face landmarks, computes a 128-dimensional unit vector in volatile RAM, and immediately discards the image binary.
- Mathematical Irreversibility: Facial embeddings consist of 128 floating-point numbers normalized to unit length. A facial photograph or visual likeness cannot be reconstructed or reverse-engineered from these numbers.
- Event Tenant Isolation: Every face vector is tagged with a unique
event_id. Vectors cannot be compared across different events, studios, or general populations. - No Third-Party Sharing or Model Training: We do not sell, license, rent, or trade biometric embeddings. Data is never used to train third-party AI models.
3. Google Drive Integration & Limited Use Disclosure
ZoefTech allows studio photographers to link their Google Drive accounts via OAuth 2.0 to sync event photographs:
Google API Services User Data Policy Compliance:
- Scope Requested:
https://www.googleapis.com/auth/drive.readonly. We only request read-only access to browse folders and stream event photographs selected by the photographer. - Zero Modification: The application does NOT create, edit, delete, or alter any files or folders in your Google Drive.
- Secure Token Storage: OAuth refresh and access tokens are encrypted at rest using AES-256-GCM encryption in Cloudflare D1. Tokens are never exposed to the frontend or third parties.
- Limited Use: ZoefTech's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Data Retention & Cloud Storage
Photographs indexed for events are securely stored in Cloudflare R2 object storage with AES-256 encryption at rest. Event guests who register to receive their photos provide a phone number, which is stored in encrypted format and masked (e.g. +91 98*** **321) in all dashboard views.
Event data and facial embeddings are automatically purged from active databases upon event deletion or subscription termination by the photographer.
5. Your Rights Under DPDP Act 2023
Under Indian data protection laws, event guests and studio photographers have the following rights:
- Right to Access: View the photographs associated with your face match.
- Right to Correction & Erasure: Request the deletion of specific photographs or unlinking of your face embeddings from any gallery.
- Right to Grievance Redressal: Contact our designated Data Protection & Grievance Officer at
privacy@zoeftech.com.