Skip to main content
Krama

DRAFT: to be reviewed by a lawyer before launch.

Privacy policy

Last updated: TODO date

In short

  • We collect only what's needed to plan your wedding.
  • Everything is stored in India.
  • We never sell your data or use it for ads.
  • Your workspace is deleted automatically on the date set in its settings.
  • You can see, correct, download or delete your data, and complain to our Grievance officer.

Who we are

TODO: registered business name, address. We are the Data Fiduciary for account information, and we process your wedding's information on your behalf under the Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

Hosts, family members and planners: name, email or mobile number, and what you add to your workspace (functions, tasks, budget, files).

Guests: the details the family adds (name, household, phone or email, replies, rooms and travel) and the replies you give on your RSVP page.

Website visitors: essential cookies only. Analytics only if you agree (see Cookie policy).

Why we use it

To run your wedding workspace, send sign-in codes and reminders you ask for, take payment, keep the service secure, and answer your messages. Nothing else.

Where it is stored

On servers in India (Mumbai). Some providers below may process limited data outside India for their part of the service, with safeguards required by law.

Who helps us (sub-processors)

Supabase (database and file storage, Mumbai region); Vercel (website hosting); Razorpay (payments, when switched on); MSG91 (SMS sign-in codes, when switched on); Meta (WhatsApp messages, when switched on); Resend (email); Cloudflare (bot protection on forms); PostHog and Vercel Analytics (visit counts, only with your consent). TODO: confirm the final list before launch.

How long we keep it

Each wedding workspace is deleted automatically on the date set in its settings, after reminders. Backups may keep a copy for up to TODO days before they roll over; they are not used to restore deleted workspaces. Account details are deleted when you close your account.

Your rights

Under the DPDP Act you can ask to see, correct, complete or erase your personal data, withdraw consent, and nominate someone to act for you. Guests can remove their details from their RSVP page at any time. To use a right, write to our Grievance officer.

Children

Krama is for adults. We do not knowingly collect data from children except where a family adds a child as a guest; families should add only what is needed.

Changes

If we change this policy in an important way, we will tell account holders before it applies.

Complaints

Write to our Grievance officer first. If you are not satisfied, you can complain to the Data Protection Board of India.

Want to use one of your rights?

Contact the Grievance officer