Privacy Policy

1. Overview

This Privacy Policy explains how RaysMtech Solutions (“RaysMtech”, “we”, “us”) collects, uses, stores, and shares personal information when you use PICHAHub (the “Platform”).

Important roles: In many cases, photographers decide what client data is collected (e.g., phone numbers, WhatsApp numbers, payment messages) and why. In those cases, the photographer may be the “data controller” and RaysMtech acts as a “data processor” providing the Platform infrastructure.

2. Information we collect

3. How we use information

• Provide and operate the Platform (account creation, galleries, access control, links)
• Deliver messages and notifications (e.g., SMS smart links where enabled)
• Prevent abuse and maintain security
• Support, troubleshooting, and service improvements
• Comply with legal obligations and respond to lawful requests

4. Legal basis and compliance

We process personal data based on (as applicable): performance of a contract (providing the Platform), legitimate interests (security, fraud prevention), consent (where required), and legal obligations.

Photographers are responsible for ensuring they have a lawful basis to collect and share client data and images, including obtaining consent where required, in compliance with the Kenya Data Protection Act, 2019and applicable international laws where their clients are located.

5. Sharing and disclosures

We may share information with:

• Service providers (hosting, storage/CDN, SMS providers, analytics) to operate the Platform
• Photographers (e.g., client payment messages and contact details are visible to the photographer who owns the album/request)
• Legal authorities when required by law, court order, or to protect rights and safety

We do not sell personal information as “data brokers”. If this changes, we will update this policy.

6. International transfers

Some service providers may store or process data outside Kenya. Where applicable, we take reasonable steps to use providers with appropriate safeguards. Photographers are responsible for ensuring international transfers they initiate (e.g., sharing links with foreign clients) comply with applicable laws.

7. Data retention

We retain personal data as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce agreements. Photographers control album availability and link expiry settings.

You can request deletion of your account data. Some data may be retained if required by law or for legitimate security and audit purposes.

8. Security

We implement reasonable technical and organizational measures to protect data. However, no system is 100% secure. Photographers must also protect access to their accounts and links.

9. Your rights

Depending on the law that applies to you, you may have rights to access, correct, delete, object, or restrict processing of your personal information.

If you are a client of a photographer, requests relating to the photographer’s content (images, licensing, consent, deletion) should be directed to the photographer as the primary party controlling that content. We may assist where we can and where legally required.

10. Children

The Platform is not intended for children. Photographers must not upload images of minors without appropriate parental/guardian consent and a lawful basis.

11. Changes

We may update this policy from time to time. If changes are material, we will provide notice (e.g., via the Platform). Continued use means you accept the updated policy.

12. Contact

For privacy questions, contact RaysMtech Solutions via your official support channels.