Privacy policy
How we look after your photos and data
Last updated 26 September 2026
The short version
- We use wedding photos only to run the gallery. We never sell them, never use them for advertising and never use them to train AI models.
- Face search works on number patterns made from faces, not on the pictures themselves. A face pattern is used only inside the one gallery it came from.
- Guests sign in once with their name, email and mobile number. The photographer of that gallery can see these details.
- A guest's selfie is used for the search and then thrown away. We do not store selfies. We keep only the list of photos the search found, so the guest can come back without a new selfie.
- Face patterns are sensitive biometric data, and we treat them that way.
- The couple decides who sees what. They can hide any photo, add a password, and ask us to delete the whole gallery at any time. Galleries are not on Google.
- When a gallery ends, it goes to the archive. After 3 months there, its photos and face data are deleted.
- You can ask us to see, correct or delete your data at any time: privacy@cele-brat.com.
1. Who we are
Cele-Brat AI Gallery (cele-brat.tech) is run by CeleBrat Ventures, Ajmer, Rajasthan, India ("Team Cele-Brat", "we", "us"). This policy explains what personal data the gallery handles, why, and the choices you have. It is written to follow India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
Photographers, couples and us
The photographer chooses which photos to upload and who the gallery is for. We decide how face search works and how guest selfies are handled, and we are responsible for that, for accounts and for this website. For requests about the photos themselves you can contact us or the photographer. We act on requests about face patterns and selfies ourselves, and pass a request on only where the photographer must decide.
2. What we collect
| Who | What, and why |
|---|---|
| Photographers | Name, studio name, email, mobile number, password (stored only in scrambled, one-way form), and anything you add to your studio profile: logo, website, Instagram and WhatsApp. When you sign up we record that you accepted the Photographer Terms, with the date, IP address (your device's internet address) and browser. Why: to run your account, sign-in and support, and to show we have your agreement. |
| Couples | Name and email (given to us by your photographer to invite you), your password in scrambled form, and your gallery choices: what guests can see, hidden photos and any gallery password. Why: to let you control your gallery. |
| Everyone in the photos | The wedding photos the photographer uploads, and a face pattern for each face our system finds in them (see section 3). The copies shown in the gallery have camera and location details removed. Why: to show the gallery and run face search inside that gallery only. |
| Guests | Your name, email and mobile number, which you give to open a gallery, and a one-time code we send you by WhatsApp or email (stored only in scrambled form, and useless after 10 minutes). We record that you agreed to this policy, when you signed in and which galleries you opened. The selfie you take for "Find my photos" is used for one search, then deleted. Before the camera opens we ask for your consent, including that you are 18 or over or a parent or guardian, and keep a record that you agreed (the time and the gallery), never the selfie. We keep the list of photos the search found. Why: to let only real guests in, to show you your photos, and to show we have your agreement. |
| Everyone | Technical data: IP address, browser type, sign-in attempts, and when pages were opened. Why: to keep the service safe and fix problems. |
If you message us on WhatsApp or by email, we receive what you send us.
3. How face search works
- When photos are uploaded, our system finds the faces in each photo and turns each face into a face pattern: a list of numbers that describes the face. The pattern is not a picture and is not designed to recreate one, but we still treat it as sensitive biometric data.
- The face patterns of a gallery are used only inside that gallery. We do not compare faces across galleries, build profiles of people, or try to find out who anyone is.
- When a guest takes a selfie, the selfie is turned into a face pattern, compared with the patterns in that one gallery, and then deleted straight away. We do not keep the selfie or its pattern. We keep only the list of photos it found in that gallery, so you can see them again without a new selfie; a new selfie replaces the list.
- Face search runs on our own servers. We do not send faces to outside face-recognition services.
- Hiding a photo keeps it and its face patterns. Deleting a photo or a gallery removes both.
4. Why we use your data
- To run the gallery: store and show the photos, run face search, and let the couple and photographer control it.
- To run accounts: sign-in, invitations to couples, and help when you ask for it.
- To keep the service safe: stop misuse, protect accounts, and look into problems.
- To meet legal duties, such as keeping records the law requires or answering lawful requests from authorities.
We use account data with your consent when you sign up. Face patterns are biometric data, which the law treats as sensitive, and we create them only for face search in the gallery they come from. For the people in the photos we rely on the photographer, who agrees in our Photographer Terms to upload only photos they have the right to share and to tell their clients that guests can find their photos with a selfie. For guests who take a selfie, we rely on their own consent. If you are in a gallery and do not want your face used for face search, tell us (section 8) and we will delete your face patterns from that gallery. We never sell personal data, never show advertising in galleries, and never use your photos or faces to train AI models.
5. Who can see the photos
- Guests with the gallery link. The couple chooses whether guests see the whole gallery or only the photos they're in, can hide any photo, and can add a gallery password so a forwarded link is not enough.
- The couple and the photographer or studio that made the gallery.
- Guest details. The photographer or studio of a gallery, and Team Cele-Brat, can see the name, email and mobile number of each guest who signed in to it, when they opened it and whether they used Find my photos. The couple does not see guests' contact details.
- Team Cele-Brat, only when needed to give support, fix a problem or keep the service safe. Every time our team opens a studio's or a couple's view, it is recorded in an access log.
Galleries are not listed on our website and are not meant to appear in search engines. One cover photo per gallery may show as a preview when its link is shared, for example in WhatsApp.
6. Service providers
We use a small number of companies to run the service. They handle data only on our instructions and only for these jobs:
| Provider | What they do for us |
|---|---|
| Hostinger | Our servers, which run the website, the database and face search. |
| Cloudflare | Private storage for the photos. The storage is not open to the internet; photos reach you only through our website. |
| Stores copies of our database backups (Google Drive) and supplies the fonts on our web pages (Google Fonts). | |
| Telegram | Internal alerts to our own team, for example when a new photographer signs up (with their name, email and mobile) or when something breaks. |
| WhatsApp (Meta) | Sends your one-time sign-in code to your WhatsApp, and carries messages you choose to send us. |
| Brevo | Sends sign-in codes and other service emails. |
Some of these providers may store or process data outside India. We share data with anyone else only if the law requires it, for example a valid order from a court or government authority.
7. How long we keep data
- Live galleries stay live for the free month or the plan the photographer chooses.
- Archive. When the free month or a plan ends, the gallery moves to the archive and guests can no longer open it. If the photographer chooses a plan within 3 months, it comes back as it was. After 3 months in the archive, its photos and face patterns are deleted.
- Selfies are not kept at all. The list of photos a selfie found is deleted with the gallery.
- Guest sign-in details (name, email, mobile) are kept so you can open galleries again, until you ask us to delete them. A phone stays signed in for 30 days.
- Accounts are kept while they are in use. When you ask us to close your account, we delete your data unless the law requires us to keep some of it.
- Security and sign-in records are kept only as long as needed to protect the service.
- Backups. Deleted data can stay in our database backups for a short time until those backups are replaced.
8. Your rights
Under India's data protection law you can:
- ask what personal data we hold about you and how we use it;
- ask us to correct, complete or update it;
- ask us to delete it, including removing a photo of you from a gallery;
- withdraw consent you have given, as easily as you gave it. Withdrawing does not undo what was done before, and face search will stop working for you;
- name someone to act for you if you die or cannot act yourself;
- complain to us, and if you are not satisfied after using our process, to the Data Protection Board of India.
If you are in a photo and want it removed, you can also ask the couple or the photographer. They can hide it at once.
If you don't want your face found by face search in a gallery, tell us which gallery. With your permission we use a selfie once to find your face patterns, delete them, and then delete the selfie.
9. Children
Accounts are for adults only. Wedding photos often include children. A parent or guardian can ask us at any time to remove a child's photo or the child's face patterns, and we will do so within 7 days. Before the camera opens, "Find my photos" asks you to confirm that you are 18 or over, or that you are the parent or guardian of the child taking the selfie and agree for them.
10. How we keep data safe
- All connections use encryption (HTTPS).
- Photos sit in private storage that is not reachable from the internet directly.
- Passwords are stored only in scrambled, one-way form. Our own team's accounts also need a second code from an authenticator app.
- Our team's access to studios' and couples' views is logged.
- If a breach affects your data, we will tell you without delay: what happened, what it may mean for you, what we are doing and what you can do. We will also report it to the Data Protection Board of India and to CERT-In as the law requires.
No system is perfectly secure, but we work to protect your data and fix problems quickly.
11. Cookies
We use only the cookies and browser storage needed to run the service: to keep you signed in (a guest's phone for 30 days), to remember that you entered a gallery's password, and to remember choices like closing the "Add to home screen" message. We do not use advertising or tracking cookies.
12. Changes to this policy
If we change this policy, we will update the date at the top. If the change matters, we will tell photographers and couples before it takes effect.
13. Contact and grievances
Grievance Officer: Bharat Kumar, Proprietor
CeleBrat Ventures, Ajmer, Rajasthan, India
Email: privacy@cele-brat.com
WhatsApp: +91 88263 83922
We acknowledge complaints within 24 hours and resolve them within 15 days. If you are not satisfied, you can complain to the Data Protection Board of India.