All Things Wed (“All Things Wed”, “we”, “us”, or “our”) is a wedding-planning platform operated by Sarveonix (UDYAM-MP-23-0298965), J1 Tower, 272 PU4, Behind Orbit Mall, Scheme No. 54, Indore, Madhya Pradesh - 452010, India. This policy explains what personal data we collect through the All Things Wed website, web app, and mobile app (Android and iOS), why we collect it, who we share it with, and the choices and rights you have over it.

By creating an account or using All Things Wed, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the service.

1. Who this policy covers

All Things Wed is used by three kinds of people, and this policy applies to all of them:

  • Planners and their team members - wedding planning businesses and staff who run their operations (tasks, vendors, budgets, guest lists, client communication) on the platform.
  • Clients - couples (bride/groom) and their family members invited by a planner to view and collaborate on their own wedding.
  • Guests - individuals a planner or client adds to a guest list to send invitations, RSVP requests, or event updates to. Guests typically do not have an account; we process their contact details on behalf of, and at the instruction of, the planner/client who added them.

2. Information we collect

2.1 Account & identity data

  • Name, email address, and password (stored as a salted bcrypt hash - we never store or can recover your plaintext password).
  • If you sign in with Google: your Google account's name, email address, and profile photo, obtained via Google's OAuth consent screen. We never see or store your Google password.
  • Organization and wedding memberships, role, and permissions.

2.2 Wedding planning data

Content you or your team create while using the product:

  • Tasks, subtasks, statuses, due dates, and priorities.
  • Vendor records, agreed pricing, and payment/budget figures you enter for your own tracking. We do not process payments or store any payment card, UPI, or bank account details - financial figures you enter are plain planning data.
  • Guest lists: names, phone numbers, RSVP status, dietary or seating notes, and groupings you or your client add.
  • Chat messages and comments exchanged between planners, team members, and clients inside a task or wedding.
  • Files you upload or share: photos, videos, and documents (e.g. contracts, mood boards, invitations), stored in our object storage.

2.3 Device permissions (mobile app)

The All Things Wed mobile app requests the following permissions. Each is optional and only requested when you use the related feature:

  • Contacts - to let you import phone contacts directly into a guest list, instead of typing them by hand. We only read the contacts you explicitly select to import.
  • Photos & media - to attach photos/videos to a chat message, and to save photos/videos shared in chat back to your device.
  • Microphone - used only when you record a video attachment from within the app (to capture the video's audio track); we do not use the microphone for standalone voice recording or ambient listening.
  • Notifications - to deliver task and chat alerts. We generate a device push token (via Expo's push service) tied to your account so we can deliver these.

2.4 Communications data

When a planner or client sends RSVP requests, invitations, or updates to guests, we process the guest's name and phone number to deliver that message via WhatsApp (through our messaging infrastructure) or email (through our transactional email provider). We do not use guest contact details for any purpose other than delivering the specific communication the planner/client sent.

2.5 Automatically collected data

  • Diagnostics & crash reports - the mobile app uses Sentry to capture crash reports and errors, which can include device model, OS version, app version, IP address, and a stack trace of the error. This is used solely to find and fix bugs.
  • Website analytics - allthingswed.com uses Google Tag Manager, Google Analytics, and Microsoft Clarity to understand how visitors use the marketing site (pages viewed, clicks, and session behavior, including session-replay/heatmap analytics via Clarity). These run on the public marketing website only, are disclosed via our cookie banner, and are separate from your in-app account activity.
  • Log & usage data - standard server logs (IP address, timestamps, requests made) for security, abuse prevention, and debugging.

3. How we use your information

  • To create and operate your account, and authenticate you (including via Google Sign-In).
  • To provide the core product: tasks, vendor management, budgets, guest lists, chat, and file sharing between planners, their team, and their clients.
  • To send transactional notifications you'd expect: task reminders, chat notifications, RSVP confirmations, and account-related emails.
  • To send guest communications (RSVP requests, invitations, event updates) that a planner or client explicitly composes and sends through the platform.
  • To maintain security, detect and prevent fraud/abuse, and enforce our terms.
  • To diagnose crashes and fix bugs (via Sentry).
  • To understand and improve the marketing website's content and conversion (via GTM/GA/Clarity) - this does not touch in-app account data.

We do not sell your personal data, and we do not use your wedding planning data (tasks, guests, chats, files) to train any third-party AI model.

4. Who we share data with

We share personal data only where necessary to run the service:

  • Within your organization/wedding - by design, data you add to a wedding (tasks, guests, chat, files) is visible to other members of that wedding according to their role and permissions (e.g. a client sees only their own wedding, never another client's).
  • Infrastructure providers - our servers, database, and file storage run on cloud infrastructure we operate and control; these providers host data but do not access it for their own purposes.
  • Google - if you use Google Sign-In, Google processes the OAuth handshake per its own privacy policy. Our website analytics (Analytics/Tag Manager) also run on Google infrastructure.
  • Microsoft Clarity - website session analytics on the public marketing site only.
  • WhatsApp / messaging infrastructure - guest phone numbers and message content are passed to our WhatsApp messaging gateway solely to deliver the communications a planner/client sends.
  • Sentry - crash and error diagnostics from the mobile app.
  • Email delivery provider - to send transactional emails (invites, notifications, password resets).
  • Legal requirements - if required to comply with a valid legal process, protect our rights, or protect the safety of our users.

We do not sell, rent, or trade personal data to third parties for their own marketing purposes.

5. Data retention

We retain account and wedding planning data for as long as your account is active, so the product continues to work as expected. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal, tax, or security purposes (e.g. fraud-prevention logs), or where data has already been shared with other members of a wedding as part of normal product use.

6. Your rights and choices

  • Access & correction - you can view and update most of your account and profile data directly in the app; for anything else, contact us using the details below.
  • Deletion - you can request deletion of your account and associated personal data at any time by writing to us.
  • Permissions - on mobile, you can revoke contacts, photos, microphone, or notification permissions at any time from your device Settings; the related in-app feature will simply be unavailable until re-granted.
  • Cookies - you can control non-essential cookies via the cookie banner shown on the marketing site, or your browser settings.
  • Communication preferences - guests can ask the planner/client who added them to stop further communications, and we will honor that request at their instruction.

If you are in a jurisdiction with statutory data protection rights (e.g. under India's Digital Personal Data Protection Act, 2023, or the EU/UK GDPR), you may additionally have rights to data portability, restriction of processing, or to lodge a complaint with your local data protection authority. Contact us and we will assist.

7. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS) for all traffic between the app and our servers, salted password hashing, role-based access controls so users only see data they're authorized to see, and time-limited signed URLs for file access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's privacy

All Things Wed is a business tool for wedding planners and their adult clients. It is not directed at, and we do not knowingly collect personal data from, children under the age of 18. If we become aware that we have inadvertently collected data from a child, we will delete it.

9. International data transfers

Some of our third-party providers (e.g. Google, Microsoft) may process data outside India. Where this happens, we rely on those providers' own compliance mechanisms and contractual safeguards for cross-border transfer.

10. Changes to this policy

We may update this policy as the product evolves. We will update the “Last updated” date above, and for material changes we will make reasonable efforts to notify you (e.g. via email or an in-app notice) before they take effect.

11. Contact us

For any privacy questions, access/deletion requests, or concerns, contact us at contact@sarveonix.com, or by post at:

Sarveonix
J1 Tower, 272 PU4, Behind Orbit Mall, Scheme No. 54
Indore, Madhya Pradesh - 452010, India