Privacy Policy

1. Who this policy covers

This policy applies to photographers and studios who hold a Ndylens account (our "Customers"), and to the clients of those studios whose contact details a Customer adds to Ndylens to send them messages ("End Clients"). Each studio is the controller of its own client data; Ndylens processes that data on the studio's behalf to deliver the messaging service.

2. Information we collect

• Account information - studio name, contact name, email address, phone number, and login credentials.
• Client contact information entered by studios - client names, phone numbers, email addresses, and key dates (e.g. birthdays, wedding/shoot dates) used to schedule reminders.
• Photos and media a studio uploads to attach to messages or galleries.
• Messaging data - the content, status (sent, delivered, read), and timestamps of WhatsApp and email messages sent or received through the platform, including replies from End Clients.
• Billing information - subscription plan and payment status. Card details are handled by our payment processor and are not stored by Ndylens.
• Usage and device data - log data, IP address, browser type, and basic analytics used to operate and secure the service.

3. How we use information

• To provide the service - sending the automated and manual WhatsApp and email messages a studio configures for its clients.
• To schedule reminders around the dates a studio records (e.g. birthdays, anniversaries, upcoming or past sessions).
• To show studios the delivery and reply status of their messages.
• To process subscriptions and manage account access.
• To secure, maintain, troubleshoot, and improve the platform.
• To comply with legal obligations and the terms of the platforms we integrate with.

4. WhatsApp Business Platform

Ndylens uses the WhatsApp Business Platform (provided by Meta) to send and receive messages on behalf of studios. When a studio sends a message through Ndylens, the recipient's phone number and the message content are processed by Meta to deliver that message, in accordance with Meta's terms and policies. We only use WhatsApp messaging to deliver the communications a studio has set up, and we do not use WhatsApp data for advertising. Message-status events (such as delivered and read receipts) returned by Meta are stored so studios can see whether their messages reached the recipient.

5. How we share information

We do not sell personal information. We share data only as needed to run the service:

• Meta / WhatsApp - to transmit WhatsApp messages and receive their delivery status.
• Email delivery providers - to send email messages on a studio's behalf.
• Payment processors - to handle subscription billing.
• Cloud infrastructure providers - to host the application and store data securely.
• Legal - where required by law, or to protect the rights, safety, and security of Ndylens, our Customers, or others.

6. Data retention

We retain account and client data for as long as a studio's account is active and as needed to provide the service. A studio may delete individual client records at any time, and may request deletion of its account and associated data by contacting us. We may retain limited records where required for legal, accounting, or security purposes.

7. Your choices and rights

• Access & correction - studios can view and edit the client information they store in Ndylens.
• Opt-out - studios can disable messaging for any client, and End Clients can ask the studio that messages them to stop.
• Deletion - you can request deletion of your account or specific data by emailing us.
• Depending on your location, you may have additional rights over your personal data under applicable law.

8. Data security

We use industry-standard measures to protect data, including encryption in transit, access controls, and secure secret storage for credentials and tokens. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to it.

9. Children

Ndylens is a business tool intended for use by photography professionals and is not directed to children. We do not knowingly collect personal information directly from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

11. Contact us