Legal
Privacy Policy
How Nivya Portraits handles your information.
Effective date:
This policy describes how Bhavya Dalwadi, operating Nivya Portraits as a sole proprietorship, handles information through our public photography website, inquiries and the separate client-delivery workflow described below. Our photographer is known publicly as Bhavya. Nivya client accounts, online booking and our own private-gallery portal are not currently available through this website.
Information You Provide
When you inquire, we receive your name, email address, message and session interest, together with any phone number, preferred date or city/location you choose to provide. We use these details to respond, discuss availability and session requirements, and communicate about any session you later confirm. An inquiry does not reserve or confirm a session. Please share only information relevant to your request.
Business Email And Forwarding
We use Resend to deliver application emails and Gmail for our business inbox. Email sent directly to inquiry@nivyaportraits.com is forwarded through ImprovMX. These services process message content, addressing and delivery information as part of handling our communications. Copies and delivery records may remain with these providers under their own policies and settings.
Private Discord Notifications
Full inquiry details, including your message and any optional phone number, date or location, are also sent to a private Discord notification channel to help us respond. Only the business owner is authorized to access that channel. Discord itself processes and stores notification content through its service; the owner-only channel does not prevent that provider processing. Privacy requests concerning these copies are handled manually.
Location Suggestions Before Submission
You may enter your city/location manually. When autocomplete is enabled, the city text you type is sent through our server to Geoapify to suggest locations, before you submit the inquiry form. Geoapify processes the query and technical request information under its own policies. This feature does not request GPS or device-location permission. Manual text entry remains available if suggestions are unavailable.
Abuse Prevention And Hosting
Our website is hosted on Vercel, which processes website requests and technical information such as IP addresses, requested URLs and browser information. We use IP-based request identifiers, counts and time windows for abuse prevention through Upstash when configured. Public photographs are delivered using Cloudflare R2, and public portfolio and appearance records are stored in Neon. Requests to these services may generate technical logs; a rate-limit window is not a promise about provider log or backup retention.
Website Measurement
We use Vercel Web Analytics to understand visits and interactions, and Vercel Speed Insights to measure website performance. Measurements can include page URLs, referrers, browser/device information, approximate region and performance metrics. Our inquiry and navigation events are designed to report actions and session categories without including names, email addresses, phone numbers, message text, exact locations or preferred dates. We also use Google Search Console to understand how the site appears in Google Search. External services have their own data practices; this policy does not promise that all website requests or third-party services are anonymous or cookie-free.
California Online Tracking And Browser Privacy Signals
The current public site does not use advertising pixels or enable third-party collection of personally identifiable information about your activity over time and across different websites for advertising or cross-site profiling. Vercel states that Web Analytics does not track visitors across different websites and that Speed Insights cannot reconstruct a visitor’s browsing session. Our application does not change its data collection in response to browser Do Not Track (DNT) or Global Privacy Control (GPC) signals; it has no application-level handler for either signal. The service providers described above still process information for their stated purposes. If you follow links to external sites, such as Instagram or a Pixieset gallery, those services may collect information about your activity, including across websites, under their own policies and settings.
Photographs And Promotional Consent
We require separate written authorization before using identifiable client photographs for Nivya Portraits promotion. Permission must identify the applicable channels, such as our website portfolio, social media, paid advertising or printed promotional materials. You may decline promotional use without losing access to photography services. Copyright ownership does not replace permission to use someone’s likeness. We respect restrictions concerning identifiable people, including people in backgrounds. Contact inquiry@nivyaportraits.com to request review of a restriction or withdrawal of permission; we will review future use and practical removal options with you. A request cannot necessarily reverse every prior lawful use or recover copies already distributed.
Minors
A parent or legal guardian must authorize photography services and any applicable promotional use for a minor. Promotional permission is separate from arranging or paying for a session. Adults arranging a session should avoid including unnecessary personal information about children in an inquiry. If you believe a minor’s information or photograph has been used without appropriate authorization, contact inquiry@nivyaportraits.com for review.
Separate Client Gallery Delivery
For initial client delivery, we use Pixieset through a separate password-protected client-gallery workflow. Photographs and information needed to provide access and downloads are processed by Pixieset under its own policies. We confirm applicable delivery, access and download arrangements directly before client confirmation. This does not make the existing Nivya portal available or establish a fixed delivery deadline or gallery expiration period.
Retention And Provider Copies
We manage retention manually and retain information only as reasonably necessary for communication, agreed services, business administration or applicable legal purposes. Relevant copies can exist in Gmail, Resend, ImprovMX, Discord, Vercel, Upstash, Geoapify when enabled, Pixieset and the other services described above. Retention depends on the record, purpose, provider and legitimate recordkeeping needs. We do not promise automatic deletion, a universal retention period or complete removal from external provider backups.
Correction And Deletion Requests
Email inquiry@nivyaportraits.com to request correction or deletion, or to ask about information we hold. The owner reviews requests manually and may ask for information to verify your identity where appropriate. We review the relevant business records and available provider controls, explain any practical limitations, and retain records where needed for legal obligations, legitimate recordkeeping or unresolved business matters. Provider-controlled copies and backups may remain subject to their own retention and deletion processes.
Third-Party Services And Safeguards
The providers described here process information to support communications, hosting, security, measurement, public content or separate delivery. Their policies, infrastructure and applicable legal obligations also govern their processing, storage and international transfers. We protect access to business systems and credentials, but cannot guarantee absolute security or erasure from every provider system. The disabled account, booking and first-party gallery platform requires a separate review before activation.
Policy Changes And Contact
The effective date shown on this page is the actual publication date of this policy version. We update that date for material policy changes and use a prominent website notice when appropriate. We do not provide an automatic policy-change email service. Questions and privacy requests can be sent to inquiry@nivyaportraits.com.