Privacy policy

Who we are

Celebit is a brand of Wedmee, operated by [TO CONFIRM: registered legal entity name], registered at [TO CONFIRM: registered office address]. Where this policy says "we" or "us", it means that company. For anything relating to your personal data, write to support@celebit.in.

This policy covers both sides of the marketplace: couples and guests who use Celebit to find and book vendors, and the wedding professionals who list on it.

Information we collect from couples

When you create an account

• Your phone number, which is how you sign in
• Your name, email address, and profile photo, if you choose to add them

As you plan

• Wedding preferences: event type, event date, preferred city, and budget range
• Saved addresses, including a label, street address, city, state, pincode, and the latitude and longitude of the location
• Shortlists and wishlists of vendors you are considering
• Enquiries you send, and the quotes and messages exchanged with vendors
• Bookings, including their status as they move from enquiry through confirmation, advance payment, delivery, and completion
• Reviews and ratings you write about vendors you have engaged

When you pay

• Payment amount, currency, method type (UPI, credit card, debit card, netbanking, wallet, or EMI), and status
• The order, payment, and refund references our payment gateway returns
• Invoices, which record the amount, tax, and, where you provide one, your GST number

We never see or store your card number, UPI PIN, CVV, or netbanking credentials. Those are entered on our payment gateway's secure flow and never reach our servers.

Information we collect from vendors

If you list on Celebit, we also collect:

• Business details: business name, description, categories, service areas, packages, pricing, and business hours
• Verification documents you upload, which may include your GST certificate, PAN card, Aadhaar card, business licence, or address proof, along with our verification decision on each
• Portfolio media - photographs, videos, and albums you publish on your listing
• Availability and calendar entries marking dates as available, blocked, or booked
• Subscription plan and billing status, and payout records including the commission applied to each

Verification documents are identity documents and we treat them accordingly. They are used only to confirm you are a genuine business, are visible only to our verification staff, are never shown on your public listing, and are never shared with couples.

Information collected automatically

• Searches you run, filters you apply, and vendor profiles you view
• Which recommendations we showed you and what you did with them
• An activity log of significant actions - sign-ins, booking changes, payments, and profile updates - stored with your IP address and browser user-agent
• Device tokens, if you allow push notifications, so we can deliver them

How we use your information

• To run the marketplace: create your account, show relevant vendors, and carry a booking through its lifecycle from enquiry to completion
• To connect you with vendors: pass an enquiry to the vendor you selected along with the details they need to quote and deliver
• To take payments: create payment orders, confirm them, raise invoices, process refunds, and pay vendors their share after commission
• To verify vendors: check the documents a business submits before approving a listing
• To keep quality up: moderate reviews before publication, and act on reports of content that breaks our rules
• To communicate: send one-time passwords, booking and payment updates, refund and payout notifications, and event reminders, over push, email, or WhatsApp
• To recommend: suggest vendors, and answer questions in our assistant, using an AI model run on Cloudflare's infrastructure. Your enquiry text and preferences are sent to that model to generate a response. Recommendations are suggestions only and never decide anything with a legal or similarly significant effect on you.
• To stay safe: detect fraud, prevent abuse of OTPs and enquiries, enforce our terms, and suspend accounts that break them
• To improve: understand which categories, cities, and pages are used so we can make them better

Marketing

We send promotional messages and offers only where you have opted in, and every one includes a way to stop. Turning off marketing does not stop service messages you need in order to use your account, such as OTPs, booking confirmations, and payment receipts.

Legal basis and consent

We process your information to perform the service you asked for, to meet legal and tax obligations, to protect the platform against fraud and abuse, and, for optional processing such as marketing, with your consent.

You can withdraw consent for optional processing at any time from your account or by writing to us. Withdrawal is not retrospective - it does not undo processing already carried out - and some information must be kept to complete bookings you have already made or to satisfy tax and accounting law.

Who we share it with

We do not sell your personal data, and we do not share it for anyone else's advertising.

• The vendor you contact. Sending an enquiry or making a booking shares your name, phone number, event date, city, and the details of your request with that vendor, so they can quote and deliver. Vendors are independent businesses and become responsible for the data you give them.
• The couple who contacted you, if you are a vendor. Your business name, listing, portfolio, pricing, and contact details are shown. Your verification documents are not.
• Razorpay, our payment gateway, which processes payments, refunds, and the details of each transaction.
• MSG91, which delivers the SMS one-time passwords used to sign you in.
• Cloudflare, which hosts the platform, stores our database and uploaded media, and runs the AI models behind recommendations and the assistant.
• Authorities and advisers, where the law requires it or where we need to establish, exercise, or defend a legal claim.
• A buyer or successor, if the business is sold or reorganised, under terms that keep this policy's protections in place.

Where your data is stored

The platform, our database, and uploaded media run on Cloudflare's global network, so your information may be stored or processed on servers outside India. We rely on Cloudflare's contractual safeguards for those transfers.

How long we keep it

| What | How long | | --- | --- | | Account and profile data | While your account is open, then [TO CONFIRM: retention period, e.g. 90 days] | | Bookings, invoices, payments, payouts | As long as tax and accounting law requires | | Vendor verification documents | While the listing is active, then [TO CONFIRM: retention period] | | Chat messages and enquiries | While your account is open | | Reviews | Published reviews remain after account closure, shown without your name | | Activity, search, and view logs | [TO CONFIRM: retention period, e.g. 12 months] | | One-time passwords | Minutes - they expire almost immediately after being issued |

Security

Sessions use signed tokens held in httpOnly cookies that page JavaScript cannot read, sent only over HTTPS. Sign-in is by one-time password, so there is no reusable password of yours for us to lose. Requests are rate limited to blunt brute-force and enquiry-spam attempts. Access to production data and to vendor documents is limited to staff whose role requires it, and significant actions are written to an audit log.

No system is perfectly secure. Use a device and phone number you control, and tell us immediately if you think someone else has reached your account.

Your rights

You can:

• Access the information we hold about you and get a copy
• Correct anything wrong or out of date, most of it directly from your account
• Delete your account and the personal data attached to it, subject to the retention periods above
• Withdraw consent for optional processing, including marketing
• Complain to us, or to the relevant data protection authority
• Nominate someone to exercise these rights for you if you are unable to

Write to support@celebit.in to use any of these. We may ask you to verify the phone number on the account first, so we are not acting on an impostor's request. We will respond within [TO CONFIRM: response window, e.g. 30 days].

Deleting your account does not remove records we must keep: completed bookings, invoices, and payment records stay for the statutory period, and published reviews remain but are shown without your name.

Children

Celebit is for adults arranging a wedding and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe a child has given us personal data, contact us and we will remove it.

Cookies

We use two cookies, both to keep you signed in. Our cookie policy sets out exactly what they are and how long they last.

Grievance officer

If you are unhappy with how we have handled your personal data, contact our Grievance Officer:

• Name: [TO CONFIRM: grievance officer name]
• Email: [TO CONFIRM: grievance officer email]
• Address: [TO CONFIRM: registered office address]

We will acknowledge a complaint within 24 hours and resolve it within 15 days, as Indian law requires.

Changes

We may update this policy as the service changes. When we make a material change we will update the date at the top of this page and, where it affects you meaningfully, tell you directly.