Privacy policy
How we look after your photos and data
Last updated 4 October 2026
The short version
- We use event photos only to run the gallery. We never sell them, never use them for advertising and never use them to train AI models.
- Face search works on number patterns made from faces, not on the pictures themselves. A face pattern is used only inside the one gallery it came from.
- Guests sign in once with their name, email and mobile number. The photographer of that gallery can see these details.
- A guest's selfie is used for the search and then thrown away. We do not store selfies. We keep the list of photos the search found and the selfie's face pattern for that one gallery, so photos added later are found for the guest too. The selfie's face pattern is removed when the gallery's plan ends; the list of photos is removed when the gallery is deleted.
- Face patterns are sensitive biometric data, and we treat them that way.
- The couple decides who sees what. They can hide any photo, add a password, and ask us to delete the whole gallery at any time. Galleries are not on Google.
- When a gallery's plan ends, guests can no longer open it. If it isn't renewed, its photos and face data may be deleted after 2 weeks.
- You can ask us to see, correct or delete your data at any time: privacy@cele-brat.com.
1. Who we are
Cele-Brat AI Gallery (cele-brat.live) is run by CeleBrat Ventures, Ajmer, Rajasthan, India ("Team Cele-Brat", "we", "us"). This policy explains what personal data the gallery handles, why, and the choices you have. It is written to follow India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
Photographers, couples and us
The photographer chooses which photos to upload and who the gallery is for. We decide how face search works and how guest selfies are handled, and we are responsible for that, for accounts and for this website. For requests about the photos themselves you can contact us or the photographer. We act on requests about face patterns and selfies ourselves, and pass a request on only where the photographer must decide.
2. What we collect
| Who | What, and why |
|---|---|
| Photographers | Name, studio name, email, mobile number, password (stored only in scrambled, one-way form), and anything you add to your studio profile: logo, website, Instagram and WhatsApp. When you sign up we record that you accepted the Photographer Terms, with the date, IP address (your device's internet address) and browser. If you buy a plan or credits, the billing details you give for the GST invoice: billing name, address, state and GSTIN (if you have one). Why: to run your account, sign-in and support, to make your invoices, and to show we have your agreement. |
| Couples | Name, email and mobile number (given to us by your photographer to invite you; you can change them yourself in your account), your password in scrambled form, and your gallery choices: what guests can see, hidden photos and any gallery password. Why: to let you control your gallery. |
| Everyone in the photos | The event photos the photographer uploads, and a face pattern for each face our system finds in them (see section 3). The copies shown in the gallery have camera and location details removed. Why: to show the gallery and run face search inside that gallery only. |
| Guests | Your name, email and mobile number, which you give to open a gallery, and a one-time code we send you by WhatsApp or email (stored only in scrambled form, and useless after 10 minutes). We record that you agreed to this policy, when you signed in and which galleries you opened. The selfie you take for "Find my photos" is used for one search, then deleted. Before the camera opens we ask for your consent, including that you are 18 or over or a parent or guardian, and keep a record that you agreed (the time and the gallery), never the selfie. We keep the list of photos the search found. Why: your details are used only to sign you in and to send you updates about the galleries you opened; the list of photos lets you see them again. |
| Everyone | Technical data: IP address, browser type, sign-in attempts, and when pages were opened. Why: to keep the service safe and fix problems. |
Booking enquiries. A gallery may end with a short form to ask its photographer about your own event. What you type there (name, mobile, event type and date, and your email, city and message if you add them) goes only to that photographer and to Team Cele-Brat, to reply to your enquiry.
Online payment. Photographers pay for plans and credits through Razorpay. Card, UPI and bank details are typed in Razorpay's own payment window and never reach us. We keep the payment reference, the amount and the invoice.
Continue with Google. If you choose to sign in with Google, Google tells us your name and email address and that the email is yours. We do not see your Google password or anything else in your Google account.
Phone notifications. If you add the app to your home screen and allow notifications, we keep the address your browser gives us for that phone, so we can send you short updates. You can switch them off in your phone's settings at any time.
If you message us on WhatsApp or by email, we receive what you send us.
3. How face search works
- When photos are uploaded, our system finds the faces in each photo and turns each face into a face pattern: a list of numbers that describes the face. The pattern is not a picture and is not designed to recreate one, but we still treat it as sensitive biometric data.
- The face patterns of a gallery are used only inside that gallery. We do not compare faces across galleries, build profiles of people, or try to find out who anyone is.
- When a guest takes a selfie, the selfie is turned into a face pattern, compared with the patterns in that one gallery, and then the selfie is deleted straight away. We keep the list of photos it found and the face pattern, for that one gallery only, so you can see your photos again without a new selfie and photos added later are found for you too. A new selfie replaces both. Your selfie's face pattern is removed when the gallery's plan ends; the list of photos is removed when the gallery is deleted. Both are removed earlier if you ask us.
- The face patterns made from the photos are removed when the photo or the gallery is deleted.
- Face search runs on our own servers. We do not send faces to outside face-recognition services.
- Hiding a photo keeps it and its face patterns. Deleting a photo or a gallery removes both.
4. Why we use your data
- To run the gallery: store and show the photos, run face search, and let the couple and photographer control it.
- To run accounts: sign-in, invitations to couples, and help when you ask for it.
- To keep the service safe: stop misuse, protect accounts, and look into problems.
- To meet legal duties, such as keeping records the law requires or answering lawful requests from authorities.
We use account data with your consent when you sign up. Face patterns are biometric data, which the law treats as sensitive, and we create them only for face search in the gallery they come from. For the people in the photos we rely on the photographer, who agrees in our Photographer Terms to upload only photos they have the right to share and to tell their clients that guests can find their photos with a selfie. For guests who take a selfie, we rely on their own consent. If you are in a photo and do not want it in a gallery, ask the couple or the photographer to hide or delete it; deleting a photo also deletes its face patterns. We never sell personal data, never show advertising in galleries, and never use your photos or faces to train AI models.
5. Who can see the photos
- Guests with the gallery link. The couple chooses whether guests see the whole gallery or only the photos they're in, can hide any photo, and can add a gallery password so a forwarded link is not enough.
- The couple and the photographer or studio that made the gallery.
- Guest details. The photographer or studio of a gallery, and Team Cele-Brat, can see the name, email and mobile number of each guest who signed in to it, when they opened it and whether they used Find my photos. The couple does not see guests' contact details.
- Team Cele-Brat, only when needed to give support, fix a problem or keep the service safe. Every time our team opens a studio's or a couple's view, it is recorded in an access log.
Galleries are not listed on our website and are not meant to appear in search engines. One cover photo per gallery may show as a preview when its link is shared, for example in WhatsApp.
6. Service providers
We use a small number of companies to run the service. They handle data only on our instructions and only for these jobs:
| Provider | What they do for us |
|---|---|
| Hostinger | Our servers, which run the website, the database and face search. |
| Cloudflare | Private storage for the photos. The storage is not open to the internet; photos reach you only through our website. |
| Stores copies of our database backups (Google Drive), supplies the fonts on our web pages (Google Fonts), and confirms who you are if you choose "Continue with Google". | |
| Razorpay | Takes online payments from photographers. Razorpay receives the payer's name, email and mobile number and the payment details typed in its window. |
| Your phone's notification service (Google, Apple or Mozilla) | Carries the phone notifications you allowed from us to your phone. |
| Telegram | Internal alerts to our own team, for example when a new photographer signs up (with their name, email and mobile) or when something breaks. |
| WhatsApp (Meta) | Sends your one-time sign-in code and gallery updates to your WhatsApp, and carries messages you choose to send us. |
| Brevo | Sends sign-in codes and other service emails. |
Some of these providers may store or process data outside India. We share data with anyone else only if the law requires it, for example a valid order from a court or government authority.
7. How long we keep data
- Live galleries stay live for the free period (3 months) or the plan the photographer chooses.
- After a plan ends guests can no longer open the gallery, and guests' selfie face patterns for it are removed. If the photographer renews within 2 weeks, it comes back as it was; after 2 weeks its photos and their face patterns may be deleted.
- Photos are not backed up by us. Photographers keep their own copy of every event.
- Selfies are not kept at all. The list of photos a selfie found is deleted with the gallery.
- Guest sign-in details (name, email, mobile) are kept so you can open galleries again, until you ask us to delete them. A phone stays signed in for 30 days.
- Accounts are kept while they are in use. When you ask us to close your account, we delete your data unless the law requires us to keep some of it.
- Booking enquiries are kept for the photographer to reply to, until you ask us to delete them.
- Invoices and payment records are kept for as long as tax law requires.
- Security and sign-in records are kept only as long as needed to protect the service.
- Backups. Deleted data can stay in our database backups for a short time until those backups are replaced.
8. Your rights
Under India's data protection law you can:
- ask what personal data we hold about you and how we use it;
- ask us to correct, complete or update it;
- ask us to delete it, including removing a photo of you from a gallery;
- withdraw consent you have given, as easily as you gave it. Withdrawing does not undo what was done before, and face search will stop working for you;
- name someone to act for you if you die or cannot act yourself;
- complain to us, and if you are not satisfied after using our process, to the Data Protection Board of India.
If you are in a photo and want it removed, you can also ask the couple or the photographer. They can hide it at once.
9. Children
Accounts are for adults only. Wedding photos often include children. A parent or guardian can ask the couple, the photographer or us at any time to remove a child's photo (which also removes its face patterns), and it will be done within 7 days. Before the camera opens, "Find my photos" asks you to confirm that you are 18 or over, or that you are the parent or guardian of the child taking the selfie and agree for them.
10. How we keep data safe
- All connections use encryption (HTTPS).
- Photos sit in private storage that is not reachable from the internet directly.
- Passwords are stored only in scrambled, one-way form. Our own team's accounts also need a second code from an authenticator app.
- Our team's access to studios' and couples' views is logged.
- If a breach affects your data, we will tell you without delay: what happened, what it may mean for you, what we are doing and what you can do. We will also report it to the Data Protection Board of India and to CERT-In as the law requires.
No system is perfectly secure, but we work to protect your data and fix problems quickly.
11. Cookies
We use only the cookies and browser storage needed to run the service: to keep you signed in (a guest's phone for 30 days), to remember that you entered a gallery's password, a random id for your phone so that wrong gallery codes are counted per phone (never shared or used to track you), and to remember choices like closing the "Add to home screen" message. We do not use advertising or tracking cookies.
12. Changes to this policy
If we change this policy, we will update the date at the top. If the change matters, we will tell photographers and couples before it takes effect.
13. Contact and grievances
Grievance Officer: Bharat Kumar, Proprietor
CeleBrat Ventures, Ajmer, Rajasthan, India
Email: privacy@cele-brat.com
WhatsApp: +91 88263 83922
We acknowledge complaints within 24 hours and resolve them within 15 days. If you are not satisfied, you can complain to the Data Protection Board of India.