Privacy Policy

BeeWeddy ("we", "us", "our") operates the BeeWeddy platform (web app and Android app — together the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, and how we use, share, retain and protect it. We comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and Google Play's Data Safety requirements.

1. Information We Collect

1.1 Information you provide

• Account: name, phone number, role (customer / vendor / professional / captain).
• Vendor / Professional profile: business name, category, description, base location, photos of work, package details, pricing.
• Booking & Pricing: event type & date, guest count, event location, package items.
• Wallet & Referrals: referral code used, wallet balance, withdrawal request details.
• Captain / Event attendance: venue GPS coordinates set by the captain (used only for geofence check-in).

1.2 Information collected automatically

• Device & technical: IP address, browser type, OS, app version (used for security and crash diagnostics).
• Cookies / local storage: session tokens, language preference, saved package previews.
• Geolocation (one-time, opt-in): only when a professional taps "Check In" at an event venue, to verify they are within the geofence radius set by the captain.

1.3 We do not collect

• Contacts list, SMS, call logs, microphone, or background location.
• Health, financial-account, or government-ID data (no PAN / Aadhaar collected within the app today).
• Data from children under 13. The Service is intended for users aged 18 and above.

2. How We Use Your Data

• To create and manage your account, authenticate logins, and prevent fraud.
• To match customers with vendors and to compute Instant Pricing estimates.
• To process bookings, package submissions, captain assignments, and attendance.
• To credit invite bonuses, calculate platform commission, and process wallet withdrawals.
• To respond to support, refund, and dispute queries.
• To improve the Service (anonymized analytics) and to comply with legal obligations.

3. Legal Basis (DPDP Act 2023)

We process personal data based on (a) your consent obtained at registration and at sensitive events (location prompt, photo upload), and (b) legitimate uses such as performing the Service you signed up for, complying with law, and preventing harm.

4. Sharing & Disclosure

• Other users: vendor profiles, work galleries, and package listings are visible to logged-in customers. Customer name & event location are visible only to the assigned vendor / captain after a booking is confirmed.
• Service providers: infrastructure (Google Cloud / AWS), database (MongoDB Atlas), email/SMS gateways. They process data only on our instructions.
• Legal: when required by law, court order, or to protect our rights or user safety.
• We do not sell or rent personal data to advertisers.

5. Data Retention

• Active account data is retained for the life of the account.
• On deletion (in-app or via public web request), we delete personal data within 30 days, except where law requires longer retention (e.g., tax / financial records up to 7 years).
• Anonymized / aggregated analytics may be kept indefinitely.

6. Your Rights (DPDP Act §11–14)

• Right to access: download a JSON copy of your data via Dashboard → Settings → Download My Data.
• Right to correction: edit profile fields anytime from your dashboard.
• Right to erasure: delete your account in-app via Settings → Delete My Account, or use the public form at /delete-my-account.
• Right to grievance: contact our Grievance Officer (below); we respond within 30 days.
• Right to nominate someone to exercise your rights in case of death/incapacity (DPDP §14).

7. Security

All traffic is encrypted in transit using HTTPS/TLS. Passwords (admin only) are hashed with bcrypt. Sessions use HttpOnly cookies. Phone-OTP login is being rolled out; until then, please do not share your phone number publicly. Despite our efforts, no online service can be 100% secure — please report suspected incidents immediately.

8. Children

The Service is for users 18 years and above. Birthday events are planned by adult organizers; we do not knowingly collect data from minors. If you believe a minor has registered, contact us so we can remove the account.

9. International Transfers

Data is primarily stored in India. If we use service providers in other regions, transfers will comply with the DPDP Act cross-border-transfer rules notified by the Government of India.

10. Updates to this Policy

We may update this policy. Material changes will be announced in-app at least 7 days in advance. The "Last updated" date at the top reflects the current version. Continued use after the effective date means you accept the updated policy.

11. Grievance Officer

Grievance Officer: BeeWeddy Compliance Team
Email: vigneshthilag@gmail.com
Address: Tamil Nadu, India
We acknowledge complaints within 24 hours and resolve within 30 days as required by Rule 5(9) of the IT Rules, 2021.