Privacy Policy

Last updated 3 September 2026

Leoran (“we”, “us”) operates the Leoran mobile app for photographers, photo and video editors, album labs, and clients booking a photographer in India. This policy explains what personal data we collect, why, and your rights over it. It is written to align with India’s Digital Personal Data Protection Act, 2023.

Who is responsible for your data

Leoran is the data fiduciary for the account and platform data described below. Where a photographer, editor or lab uses Leoran to run their own business, they are a separate data fiduciary for the client information they enter, and Leoran processes that information on their behalf.

What we collect

• Account & identity: your mobile number (used for OTP sign-in), name, profile photo, city, professional role(s), bio, and — if you add them — WhatsApp number, UPI ID and business/GST details.
• Work data you create: enquiries, bookings, quotations, invoices, payment records, project pipeline status, catalogues, team assignments, reviews and ratings.
• Client details you enter (professionals only): the names, phone numbers and event details of the clients you manage.
• Media: photos and files you upload — portfolio images, catalogue images, shoot and delivery links, and payment-proof screenshots.
• Messages: chat messages exchanged with other Leoran users.
• Device & technical: push-notification token, app version, and diagnostic logs (including failed sign-in attempts) used to keep the service secure and working.

We do not collect your contacts, location, photo library, or advertising identifiers.

Why we use it

• To create and secure your account and sign you in.
• To provide the core features — bookings, quotations, payments tracking, the professional network, discovery, messaging and delivery.
• To send transactional notifications (a new enquiry, a quotation reply, a shoot reminder, a payment update).
• To run optional AI features you trigger — for example profile suggestions, quotation drafting help, and the booking assistant.
• To process Pro subscription payments and verification-badge purchases.
• To detect abuse, moderate reported content, and meet legal obligations.

Payments

Advance and milestone payments between a client and a photographer are made directly by UPI to the photographer’s own account. Leoran does not hold, route or take a cut of that money; we only record the amount against the booking.

Pro subscriptions and verification badges are processed by Razorpay. We receive a payment reference and status from Razorpay; we never see or store your full card, bank or UPI credentials.

Who we share data with

We do not sell your personal data. We share it only with:

• Other Leoran users you choose to interact with — your public profile with anyone browsing, and your booking/job details with the specific professional or client on that booking.
• Google Firebase (Google LLC) — authentication, database, file storage, cloud functions and push notifications.
• Razorpay — subscription and badge payments.
• Google (Gemini API) — only the specific text you submit to an AI feature; it is not used to train Google’s models under the API terms.
• Authorities — where required by valid legal process.

How long we keep it

Account and work data is kept while your account is active. If you cancel Pro, your portfolio is hidden immediately and your files are retained for 90 days before automatic deletion, so you can resubscribe without losing work. If you delete your account, we remove your personal data within 30 days except where we must retain records (for example invoices and payment records) to meet tax and legal requirements.

Your rights

You can access, correct or delete most of your data from within the app. You may also contact us to request access, correction, erasure, or to withdraw consent for optional processing. We will respond within the timelines set by law.

Security

Data is encrypted in transit. Access is restricted by database security rules so that users can only read the records they are party to. Sign-in is protected by one-time passwords and rate limiting.

Children

Leoran is not intended for anyone under 18. We do not knowingly collect data from children.

Changes

We will update this page and, for material changes, notify you in the app.

Contact & grievances

For any privacy question or to reach our Grievance Officer under the Information Technology Act and the DPDP Act, email support@leoran.in.