Privacy Policy
Effective date: June 2026 · For couples and wedding guests
Who We Are
WedAnswer is a Wedding Assistant service for Indian couples operated by an individual sole proprietor under the trade name WedAnswer ("we", "us", "our"). We help Indian couples set up a personalised Wedding Assistant for their wedding guests, accessible at wedanswer.com. For any privacy-related queries, contact us at [email protected].
What Data We Collect
1. Account Data (Couples)
- Full name, email address, and hashed password when you create an account.
- If you sign in with Google: your Google account email and display name. We store an opaque Google account ID — we never receive or store your Google password.
2. Wedding Details
- Couple names, wedding date, city, wedding type (Hindu / Muslim / Christian / Sikh / Jain / Other), and the custom Wedding Assistant URL slug you choose.
3. Wedding Event Data
- Events, venue details, contact persons, FAQs, and notes that you or your coordinator enter to power your Wedding Assistant — via Google Sheets, Excel upload, or the admin dashboard.
4. Coordinator and Partner Details
- Coordinator name, phone number, and email address.
- Partner (co-organiser) email address and phone number.
5. Guest Device Fingerprint
- A hashed identifier derived from browser and device characteristics, used to enforce per-guest rate limits on the chat API and to maintain a blocklist of abusive sessions. The fingerprint is associated with your wedding only — it is never linked to a real identity, never shared, and deleted when your wedding data is deleted.
6. Chat Sessions
- Questions asked by guests and AI-generated responses. No guest names or login are required to use your Wedding Assistant. Chat sessions are associated only with the wedding slug and a device fingerprint.
7. Payment Data
- We collect only a Razorpay order ID and payment confirmation. Full card details are handled entirely by Razorpay and are never transmitted to or stored by WedAnswer.
How We Use Your Data
- To create and operate your Wedding Assistant and make it accessible to your guests.
- To send transactional emails (Wedding Assistant link, Google Sheet link) to you, your partner, and your coordinator.
- To process your one-time activation payment via Razorpay.
- To enforce rate limits and maintain a blocklist to prevent abuse of the chat API.
- To investigate reported issues and maintain service reliability.
We do not use your wedding data for advertising, profiling, marketing, or any purpose other than operating the service.
Third-Party Data Processors
We engage the following processors to deliver the service. Each is bound by contract to process data only as instructed by us.
| Processor | Country | Purpose | Data shared |
|---|---|---|---|
| AI Language Provider | India | Primary AI provider for guest chat messages | Guest chat messages |
| Google Gemini (Google LLC) | United States | Fallback AI provider for guest chat if primary provider is unavailable | Guest chat messages |
| Google Sheets API (Google LLC) | United States | Creates and syncs your event data sheet (optional — Excel upload available instead) | Wedding event data |
| Google Identity Services (Google LLC) | United States | Optional "Sign in with Google" authentication | Email, display name |
| Razorpay | India | Processes one-time wedding activation payment | Order amount, payment status |
| Cloud Hosting Provider | India | Cloud server hosting all WedAnswer data | All account and wedding data |
Cross-Border Data Transfers
Guest chat messages are processed by our primary AI provider (based in India), so chat processing normally stays within India. If that provider is unavailable, Google Gemini (US) handles the fallback, in which case that message is processed in the United States. If you use Google Sheets for data entry, your wedding event data is stored on Google's US infrastructure (this is optional — Excel upload keeps all data in India). Google does not use data submitted via Google Cloud APIs to train its models. All other WedAnswer data is stored in India on our cloud hosting infrastructure.
Data Retention
| Data | Retention period |
|---|---|
| Chat sessions and messages | Automatically deleted 90 days after session start |
| Guest device fingerprints (active) | Deleted when your wedding data is deleted |
| Guest device fingerprints (blocklist) | Retained until wedding deletion to prevent abuse re-entry |
| Account and wedding data | Deleting your account disables it immediately; all data is permanently erased 30 days later |
| Draft weddings (unpaid) | Automatically deleted 7 days after creation |
| Payment records (Razorpay order ID) | Retained for 7 years for tax compliance |
Your Rights Under the DPDP Act, 2023
As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the right to:
- Access — request a summary of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete personal data.
- Erasure — delete your account at any time from Admin → Settings → Danger Zone. Your wedding assistant goes offline and sign-in is disabled immediately; all account and wedding data is then permanently deleted 30 days later. This right cannot be exercised for payment records retained for statutory compliance.
- Grievance redressal — raise a complaint with our Grievance Officer.
- Nomination — nominate another person to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, contact our Grievance Officer. We will respond within 30 days as required by law.
Grievance Officer
In accordance with the Digital Personal Data Protection Act, 2023:
- Role: Grievance Officer, WedAnswer
- Email: [email protected]
- Response time: Within 30 days of receiving a complaint
Cookies
WedAnswer uses strictly necessary cookies only. No advertising, analytics, or tracking cookies are used.
| Cookie | Purpose | Type |
|---|---|---|
wb_access_token | Short-lived access token — authenticates your session | HttpOnly, not accessible to JavaScript |
wb_refresh_token | Long-lived refresh token — keeps you signed in without re-entering your password | HttpOnly, Secure |
These cookies are set only for registered couples. They are never set for anonymous guests using the Wedding Assistant. No consent banner is required for strictly necessary cookies.
Security
We implement industry-standard security measures including: HTTPS-only data transmission, hashed password storage (PBKDF2 via ASP.NET Core Identity), HttpOnly cookie tokens, encrypted storage at rest, and server-level firewall rules. In the event of a data breach that is likely to result in harm to Data Principals, we will notify affected users as required by law.
Children's Privacy
WedAnswer is intended for adults (18+) organising weddings. We do not knowingly collect data from persons under 18.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes affecting your rights or how we use your data, we will notify registered users by email at least 7 days before the changes take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.
Contact
For questions about this Privacy Policy or your personal data:
Email: [email protected]
This Privacy Policy should be read alongside our Terms & Conditions.