Privacy Notice

Ryzion OS ("Ryzion OS", "we", "us") provides a business operating system for the event industry — photography studios, planners, venues, decorators, caterers and the clients they serve. This notice covers the Ryzion OS website, the workspace application, client and guest portals, and published event sites.

Ryzion OS is a service operated by Riyazat Jaffar Kazarani, a sole proprietor trading as Ryzion OS, based in Andhra Pradesh, India.

For privacy questions or to exercise any right described below, use our data rights form or write to hello@ryzionos.com.

Notice version 2026-09-29. When you tick a consent box anywhere in the product we record which version of this notice was on screen at the time, so it is always possible to reconstruct what you were told.

The DPDP Act calls the party that decides why and how personal data is processed the Data Fiduciary, the party that processes on its behalf the Data Processor, and the individual the data is about the Data Principal. Which one we are changes who you should approach, so it is worth being precise:

• We are the Data Fiduciary for data about our own customers — the studios, planners and businesses who hold a Ryzion OS account — including account, billing and usage data.
• We are a Data Processor for the data our customers put into their workspace about their clients and guests: contact details, event particulars, guest lists, RSVPs, photographs and documents. That content belongs to the customer, who is the Data Fiduciary for it. We process it only on their documented instructions.

If you are a guest or client of a business that uses Ryzion OS, that business decides what happens to your data. You may still use our data rights form — we will route your request to them and support them in answering it.

Information you give us. Name, email address, phone number, business name and type, and account credentials when you register. If you subscribe to a paid plan, the billing details required to take payment.

Workspace content. Whatever you choose to store: client and lead records, projects and events, calendars and tasks, invoices and proposals, guest lists and RSVP responses, and uploaded media such as photographs and documents.

Event guest data. On published event sites we collect the name and attendance response of anyone who RSVPs, and — only where the guest separately agrees — their meal preference. We ask for meal preference as its own question because a choice such as Jain or vegan can disclose religious belief, and we would rather not collect that by default.

Facial data, where the photo finder is used. Studios on our Growth plan can enable an AI photo finder on an event gallery. If you use it, we compute a mathematical representation (an "embedding") of the face in the selfie you provide and compare it against embeddings computed from the photographs in that album, so we can show you only the pictures you appear in. This happens only after you tick the consent box on that page. See section 6.

Information collected automatically. IP address, browser and device type, pages viewed, and timestamps, together with the cookies described in section 11. We use this to keep the service secure, diagnose faults and understand which features get used.

Information from third parties. If you sign in with Google, we receive your name, email address and profile picture from that provider. We request only the minimum scopes needed to sign you in and operate the features you have enabled, and we do not use Google user data for advertising or sell it to anyone.

Under the DPDP Act personal data may be processed on the basis of your consent, or for one of the certain legitimate uses the Act lists in s.7 — a narrower and more specific set than the "legitimate interests" of European law. We rely on:

• To provide the service you asked for — creating and running your workspace, storing your content, sending transactional messages. Basis: consent given when you create an account, and the voluntary-provision limb of s.7.
• To take payment — processing subscriptions and one-off charges, issuing invoices, handling refunds. Basis: consent, and compliance with Indian tax and accounting law.
• To keep the service secure — authentication, rate limiting, fraud and abuse prevention, audit logging. Basis: s.7 legitimate uses, including compliance with law.
• To support and improve the product — responding to enquiries, diagnosing faults, analysing aggregate usage. Basis: consent for optional analytics (section 11); the rest is necessary to deliver the service.
• To send product and marketing email — only where you have ticked the separate, optional box for it. Basis: consent. Every message carries an unsubscribe link, and refusing costs you nothing.
• To find your photos in an event gallery — facial matching, described in section 6. Basis: your consent, given per scan.

For the processing that is necessary to create your account, operate your workspace and deliver the service you signed up for, we rely on your consent given at sign-up together with the necessity of that processing to perform our agreement with you. The optional processing above — marketing communications and the photo finder — runs only on the separate, specific consent described against each. We rely on the "certain legitimate uses" in section 7 of the Act only where you have voluntarily provided data for a purpose and not objected (for example, when you contact us for support), and to meet obligations the law places on us.

Ryzion OS includes assistant features that can draft messages, summarise records and help organise your work. When you use them, the relevant content from your workspace is sent to a third-party model provider to generate a response.

We do not use your workspace content to train our own models, and we contract with our model providers on terms that prohibit them from training their models on it. If you would rather not have content processed this way, do not use the assistant features.

This is the most sensitive processing we do, so it gets its own section rather than a line in a list.

• It never runs without a tick. The consent box on the photo-finder page starts empty, the camera and upload buttons stay disabled until you tick it, and we record your decision — including a refusal — before the image leaves your browser.
• What is computed. A 512-number vector describing facial geometry. It is not a photograph and cannot be turned back into one, but it identifies you, so we treat it as personal data throughout.
• What we do with your selfie. It is sent to our GPU processing service only to compute the comparison vector. We do not add it to the album and we do not write it to our database or object storage. The comparison vector exists only for the moment of the search and is discarded once your matches are returned; the selfie is not retained by us after the vector is computed.
• Embeddings of album photographs are stored for as long as the studio keeps the album, so that repeat guests can find their photos without re-indexing. They are deleted when the album is deleted.
• Withdrawing. Ask us — or the studio — to remove your embeddings and we will. Use the data rights form.

We do not sell personal data. We share it only in these circumstances:

• Service providers (our Data Processors). We rely on third-party cloud infrastructure, storage, content delivery, database, email, payment, AI inference, error-tracking and analytics providers to run the service. They act on our instructions under written contracts, may process data only for the purposes we specify, and may not use it for their own ends. Our current sub-processors are Supabase (database, authentication and storage), Backblaze B2 (media storage), Cloudflare (content delivery and the media proxy), Vercel (application hosting), Razorpay (payments), OpenRouter (AI inference for the assistant features), Modal (GPU face-embedding for the photo finder), PostHog (product analytics), Sentry (error tracking) and Better Stack (log storage). We keep this list current, will give notice of material changes, and you can ask for the up-to-date list at any time at hello@ryzionos.com.
• Within your workspace. Content is visible to the team members, clients and guests your workspace owner grants access to.
• Legal and safety. Where we are required by law, or where disclosure is necessary to protect our rights, our users, or the public.
• Business transfers. If we are involved in a merger, acquisition or sale of assets, data may transfer with the business. We will give notice before your data becomes subject to a different privacy notice.

Our primary hosting region is Asia South (Mumbai), ap-south-1. Some of our providers process data outside India — error tracking, product analytics and AI inference in particular.

The DPDP Act permits transfer outside India except to territories the Central Government restricts by notification. As of the date of this notice the Central Government has not notified any such restricted territory. Of the providers named above, error tracking (Sentry), product analytics (PostHog), log storage (Better Stack) and AI inference (OpenRouter and the model providers it routes to) may process data in the United States and the European Union; all others process data within India, or — for content delivery — at globally distributed edge locations. We will update this section if the notified position changes.

The Act requires us to erase personal data once the purpose is served and retention is no longer needed for a legal purpose — so these are ceilings, not targets.

• Account and workspace data — for as long as your account is open. After closure we delete or irreversibly anonymise it within 90 days, except where we must keep records longer by law.
• Guest and RSVP data — kept by the studio that collected it, for as long as they keep the event. We delete it when they do, or when they close their account.
• Face embeddings — for the life of the album they belong to.
• Consent records — kept for the life of the account and for three years after it is closed, because we must be able to demonstrate what was agreed.
• Billing and tax records — retained for at least eight years, to meet our obligations under the Central Goods and Services Tax Act, 2017 (which requires records to be kept for 72 months from the due date of the annual return) and the Income-tax Act, 1961.
• Security and audit logs — retained for 12 months.
• Backups — deleted content persists in encrypted backups until they expire on their normal cycle, within 7 days.

As a Data Principal you have the right to:

• Access a summary of the personal data we process about you, and the identities of those we have shared it with (s.11).
• Correction, completion, updating and erasure of your personal data (s.12). We will erase unless retention is required by law.
• Withdraw consent at any time, as easily as you gave it (s.6(4)). Withdrawal does not undo processing already carried out lawfully, and we will stop the relevant processing on receipt.
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity (s.14).
• Grievance redressal — a readily available means of raising a complaint with us, which you must use before approaching the Board (s.13).

Much of this you can do yourself from your workspace settings. For anything else, use the data rights form. Requests are free, and we will not ask you to justify one.

The Act also places duties on you as a Data Principal: not to impersonate anyone else when making a request, not to suppress material information, and not to file false or frivolous complaints.

Grievance Officer: Riyazat Jaffar Kazarani
Email: hello@ryzionos.com
Postal address: 2-100, Nagaram, Thatipaka, Andhra Pradesh 533247, India
Acknowledgement: within 72 hours. Resolution: within 30 days of receipt.

If we do not resolve your grievance to your satisfaction, you may complain to the Data Protection Board of India. Raising it with us first is a precondition under the Act.

We use strictly necessary cookies to keep you signed in and to protect the service. These cannot be turned off without breaking sign-in, and we do not ask for consent to them because the service cannot be delivered without them.

Separately, we would like to measure how the product is used and collect error diagnostics. That is optional, we ask before doing it, and the banner's reject button carries the same weight as its accept button. Refusing changes nothing about how the service works for you. You can change your answer at any time from this page or by clearing the ryzion_consent cookie.

We encrypt data in transit and at rest, scope access by role, and keep private media behind short-lived signed URLs rather than public links. Our security overview describes our controls in more detail. No system is perfectly secure, and we cannot guarantee absolute security.

If a personal data breach occurs we will notify the Data Protection Board of India and each affected Data Principal in the form and within the time the Act and its Rules require.

Under the DPDP Act a child is anyone under 18. Ryzion OS is a business tool and is not directed at children, and we do not knowingly process a child's personal data without verifiable consent from a parent or lawful guardian. We do not undertake tracking, behavioural monitoring or targeted advertising directed at children.

Event galleries and guest lists uploaded by our customers may contain images of children. The customer is the Data Fiduciary for that content and is responsible for obtaining the consent the Act requires before uploading it. The photo finder is a self-service tool a guest chooses to use, and it processes the face of whoever submits a selfie. Because a child is anyone under 18, a guest who is under 18 should use it only with the consent of a parent or lawful guardian. We do not verify a guest's age automatically, so we rely on guests — and on the studios who publish the gallery — to observe this, and we do not knowingly compute or store the facial data of a child without the consent the Act requires.

If you believe a child's data has been provided to us without that consent, contact us and we will remove it.

We may update this notice as the service changes. We will revise the version and date above and, where changes are material, notify you by email or in the application before they take effect. A change of version also means we will ask again for any consent that depended on the old wording.

Riyazat Jaffar Kazarani, trading as Ryzion OS
2-100, Nagaram, Thatipaka, Andhra Pradesh 533247, India
08862294534
hello@ryzionos.com