Privacy Policy

1. Data we collect

• Account data: name, email, phone (via Firebase Authentication)
• Booking data: event details, guest count, location, vendor communications
• Payment data: processed by Razorpay — Utsav does not store card details
• Uploaded files: ID proofs, portfolio images, chat attachments (stored via Vercel Blob)
• Usage data: pages visited, device/browser info (Vercel Analytics, Sentry error reports)

2. How we use it

[PLACEHOLDER: Purpose limitation statement — booking fulfillment, vendor matching, fraud prevention, legal compliance. Must match actual data flows in src/server/**.]

3. Data sharing

Data is shared with vendors only as needed to fulfill a booking, and with processors (Razorpay for payments, Firebase for authentication, Vercel for hosting/storage) strictly to operate the platform. [PLACEHOLDER: List every third-party processor with a data-processing agreement in place.]

4. Data localization & retention

[PLACEHOLDER: Confirm actual database region and retention periods per data category before publishing.]

5. Your rights

Under the DPDP Act 2023, you have the right to access, correct, and request erasure of your personal data. To exercise these rights, contact [PLACEHOLDER: privacy/DPO contact email]. [PLACEHOLDER: A self-serve data-erasure endpoint does not exist yet — until it does, this must state a manual request process with a committed response time.]

6. Cookies

See the Cookie Policy for details on analytics and functional cookies used on this site.

7. Contact

[PLACEHOLDER: Grievance/DPO contact details]