Celebrable is operated by Celebrable (proprietor details to be added), Pune, Maharashtra, India (“we”). This policy explains how we process personal data as a data fiduciary under India's Digital Personal Data Protection Act, 2023.
What we collect
- Account: your email address, and your name and profile picture if you sign in with Google.
- Invitation content: the description you write, names, dates, venues, contact numbers you choose to show, and the photos you upload.
- Guest replies: names, attendance, headcount and optional phone numbers or messages that guests submit through your RSVP form. We process these on your behalf.
- Payments: order and payment references from Razorpay. We never see or store card, UPI or bank details.
- Technical data: a one-way hash of IP addresses for rate limiting and abuse prevention, and first-party product events (for example “invitation published”). No advertising trackers.
How we use it
- To design, host and deliver your invitation and show your RSVPs to you.
- To send sign-in links and service emails.
- To process payments, issue invoices and meet tax obligations.
- To prevent abuse, fraud and spam, and to improve the product using aggregated, non-identifying statistics.
AI processing
To design your invitation, your description, details and small versions of your photos are sent to our AI provider (Anthropic) under terms that prohibit using them to train models. Outputs are stored with your invitation. We do not use your content to train any model.
Who can see your invitation
Published invitations are unlisted: they are reachable only by people who have the link, and they ask search engines not to index them. You can add a passcode, take the page down, or delete it. Anyone you send the link to can forward it, so share it the way you would share a printed card.
Service providers
We use Vercel (hosting), Neon (database), Cloudflare (photo storage and delivery), Razorpay (payments), Resend (email) and Anthropic (AI design). They process data only to provide their service to us. Some are located outside India; transfers follow applicable law.
How long we keep data
- Invitations stay online for your plan's period. Photos of expired invitations are deleted 30 days after expiry unless you extend.
- Deleting an invitation deletes its page, photos, versions and RSVPs immediately. Deleting your account deletes all of your invitations.
- Payment records are kept for as long as tax law requires, even after account deletion.
Your rights
You can access, correct and delete your data from your account at any time, ask us what we hold about you, withdraw consent, and nominate another person to exercise these rights. Write to support@celebrable.tech; we respond within 30 days.
Children
You must be 18 or older to create an account. Parents may include their children's names and photos in invitations they create; those pages are always unlisted and untracked.
Cookies
We use a session cookie to keep you signed in and, for passcode-protected pages, a cookie that remembers the passcode was entered. No advertising or third-party analytics cookies.
Security
Data is encrypted in transit, access is restricted to what each part of the system needs, upload and payment endpoints are signed and rate-limited, and we will notify affected users and the Data Protection Board of India of a personal data breach as the law requires.
Grievances
Grievance Officer, Celebrable, Pune, Maharashtra, India. Email: support@celebrable.tech.