Privacy Policy & Data Protection

1Preamble, Legislative Scope & Legal Framework

At WedPoint (the online wedding directory marketplace, technology platform, and vendor discovery portal owned, engineered, hosted, and operated exclusively by SAS TECHNOLOGY), we recognize that your privacy is a fundamental constitutional right. This comprehensive Privacy Policy and Data Protection Charter (hereinafter referred to as the "Privacy Policy" or "Policy") governs the collection, storage, processing, transfer, encryption, retention, and erasure of personal and commercial data across all digital touchpoints on wedpoint.in, its sub-domains, web interfaces, and backend database APIs.

This document is published in full compliance with Section 43A and Section 72A of the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the statutory obligations mandated under India's landmark Digital Personal Data Protection Act, 2023 (DPDP Act). By using WedPoint, registering as a vendor partner, requesting price quotes, or engaging with our WP Stories magazine, you express your explicit and unreserved consent to the data practices defined herein.

2Identification of Data Fiduciary & Data Controller

Under the DPDP Act 2023, the legal entity acting as the primary Data Fiduciary and Data Controller responsible for determining the purpose and means of processing your data is:

3Categories of Personal Data Collected from Couples & Clients

When prospective couples, event planners, or clients interact with WedPoint to discover wedding service providers, we collect personal details necessary to facilitate direct communication:

• Contact Identification: Full Name, 10-digit primary mobile phone number, WhatsApp contact handle, and email address.
• Event Specifications: Proposed wedding date, celebration venue city/district (e.g. Ambikapur, Raipur, Bilaspur, Durg, Jagdalpur), estimated guest count, and budgetary preferences.
• Service Requests: Specific vendor categories inquired about (Photographers, Venues, Bridal Makeup, Decorators, Caterers, DJs, Choreographers).
• Saved Preferences & Wishlists: List of bookmarked vendor storefronts, saved quotes, and custom checklist progress data.

4Categories of Business Data & KYC Collected from Vendors

For commercial vendor establishments registering a business profile on WedPoint, SAS TECHNOLOGY collects commercial and verification data:

• Business Identification: Registered Studio/Establishment Name, Owner/Director Full Name, Official Studio Phone, Business Email, and Postal Address.
• Portfolio & Media Assets: High-resolution portfolio photographs, sample video reel links (YouTube/Vimeo/Instagram), package price tiers, and service descriptions.
• KYC Verification Identity Proofs: Permanent Account Number (PAN), Goods and Services Tax Identification Number (GSTIN), Trade License, or Aadhaar details submitted voluntarily for verified blue tick certification.
• Bank Account Details: Bank Name, Branch IFSC Code, Account Number, and UPI ID for Razorpay settlement disbursements and tax invoice generation.

5Automated Telemetry, Cookies & Hardware Analytics

When accessing wedpoint.in, our web servers automatically collect non-personally identifiable technical telemetry to optimize performance:

• Device Telemetry: Internet Protocol (IP) address, browser user-agent string, operating system version, and screen resolution.
• Geolocation Approximations: District and city level location approximations derived from network IP routing.
• Session Analytics: Pages visited, duration of stay, search query parameters, click-through rates on call/WhatsApp buttons, and error logs.
• Local Storage Tokens: Technical tokens stored in client browsers to cache active login sessions, user city filters, and wishlist items.

6Lawful Grounds & Specific Purposes of Processing

SAS TECHNOLOGY processes collected data strictly on lawful grounds specified under Section 4 of the DPDP Act 2023:

7Inquiry Lead Transmission & WhatsApp Integration

When a client uses the "Send Inquiry" or "Chat on WhatsApp" features on WedPoint, the client explicitly authorizes SAS TECHNOLOGY to transmit their submitted contact name, phone number, and event details to the specified vendor.

Vendors receiving client lead data agree to use such information solely for responding to the requested wedding inquiry and agree not to sell, trade, or send unsolicited spam broadcasts to clients.

8Razorpay Payment Gateway Data Protection

All online monetary payments for PRO subscriptions, search rank sponsorships, and banner ads are processed through our PCI-DSS Level 1 certified banking aggregator Razorpay Software Private Limited.

SAS TECHNOLOGY does NOT store full credit/debit card numbers, CVVs, or NetBanking passwords on our servers. All sensitive financial authentication is handled directly within Razorpay's encrypted bank checkout popups.

9AES 256-bit Security Architecture & Data Storage

SAS TECHNOLOGY employs strict administrative, technical, and physical security measures to safeguard user information:

• SSL/TLS Transport Encryption: All data transmitted between user browsers and backend servers is encrypted using 256-bit SSL certificate security.
• Encrypted Storage: Sensitive KYC identification documents and hashed account credentials are stored in encrypted cloud storage buckets.
• Zero Data Selling Guarantee: SAS TECHNOLOGY strictly guarantees that client personal numbers and email lists are NEVER sold or rented to unverified third-party brokers.

10Rights of Data Principals under DPDP Act 2023

Under Section 11, 12, and 13 of the Digital Personal Data Protection Act 2023, every user and vendor partner possesses statutory rights:

• Right to Access Summary: Request a summary of personal data held by SAS TECHNOLOGY and processing activities undertaken.
• Right to Correction & Updating: Request correction of inaccurate, incomplete, or outdated business profiles and contact information.
• Right to Erasure / Account Deletion: Request deletion of your user account, wishlist, or business storefront by contacting our privacy desk.
• Right to Withdraw Consent: Withdraw consent for marketing emails or promotional broadcasts at any time.

11Data Retention & Statutory Erasure Schedules

SAS TECHNOLOGY retains personal data only for as long as necessary to fulfill the operational purposes for which it was collected or to comply with mandatory tax and accounting statutory retention periods (e.g., maintaining payment ledger invoices for 7 financial years under Indian GST and Income Tax laws).