Privacy policy (draft)
Draft for review — not yet legal advice.
VivaahFlow is software that wedding photography businesses use to manage their work. Each business is the data fiduciary (controller) for the information it stores about its couples, families and crew; VivaahFlow processes that information on the business's behalf and only to provide the service.
What we store: account details of the people who sign in (name, email, hashed password), business profile and billing details, and the records each business enters (enquiries, weddings, events, payments, notes, deliverables).
How it is protected: each business's records are separated at the database level, traffic is encrypted, passwords are stored as salted scrypt hashes, and every change is written to an audit log.
We do not sell personal data and do not use business records to train AI models. Sub-processors (hosting, email delivery, payment processing) are listed on request.
Retention and deletion: a business can export its data at any time. After an account is closed, data is deleted within 90 days unless law requires longer retention.
Contact: [grievance officer name and email to be added before launch].