DPDP-ready by design

Your clients' privacy is the product.

India's Digital Personal Data Protection Act, 2023 makes every photograph of an identifiable person personal data. LIT SUITE is built for this from day one — so your studio is ready to demonstrate compliance to a school, a corporate event team, or a curious client.

Encrypted, access-controlled storage

Client data is encrypted in transit and at rest, and every table is row-level-secured so one studio can never read another's. Photographs are never used to train models, sold, or shared with third parties.

Consent before access

Client galleries open via a signed, expiring token shared by the photographer. There is no public listing, no search-engine indexing, and no permanent URL.

Right to deletion

Email our DPO and we will erase a booking, album or client — and everything linked to it — within 30 days. We do not soft-archive against your will.

Audit log for every interaction

Every action a client takes — opening a review link, leaving a comment, approving a spread — is logged with a timestamp on the per-booking activity feed. You can prove compliance.

No training, no advertising

Client photographs and personal data are not used to train machine-learning models, sold to advertisers, or shared with third parties for marketing.

Token expiry & revocation

Public links default to a 60-day expiry. Studios can revoke any link instantly. Expired or revoked links return a 'not found' page — no leak.

Data Protection Officer

For a data deletion request, audit log export, or a DPDP-related question, email dpo@lit.app. We respond within 3 working days. Our sister product DPDPAReady.in publishes the latest DPDP guidance for events, schools and weddings.