Privacy Policy | Celeva

1. Information we collect

1.1 Information you give us

To create and use an account:

Email address (required) — this is how you sign in and how we reach you.
Name (optional) — shown to your guests and co-hosts as the person the invitation comes from. If you do not give one, your email address is used instead.
Confirmation that you are 18 or older (required) — a statement by you, recorded with the date. We do not verify your age.
Birth year (optional) — kept only as context; it is never the basis of the age decision.
Your agreement to these documents (required for accounts created on or after 4 September 2026), recorded with the date and the version you agreed to.
Consent to AI drafting (optional) — recorded with the date. Declining is a permanent, legitimate answer and costs you nothing else.
Time zone and a home address or venue (both optional) — used to default new Moments sensibly.
Your phone’s contacts — only if you choose to use them. On the mobile app, a host can pick guests from their address book. The address book is read on the phone; only the people you select are sent to Celeva, and the rest never leave your device.

Celeva never asks for a phone number to create or use an account. There is no phone number on a Celeva account. A phone number only enters Celeva if you add one to a guest list, or if somebody gives one to a host — and it is optional there too: a guest can be added with a name alone, or with an email address and no number.

When you use the Service, we also store what you create in it:

Moments — names, dates, times, venues, descriptions, schedules, tasks and budgets.
Guest lists — the names, and any email addresses or phone numbers, that you or your co-hosts enter. Phone numbers and email addresses are each optional per guest.
Replies — whether a guest is coming, how many people they are bringing, and anything they write in the reply box. A dietary or allergy note is kept only if the guest ticks a box agreeing the hosts may see it.
Photographs and files you or your guests upload.
Messages you send through Celeva — invitations, reminders and notes, with their delivery outcome.

1.2 Information collected automatically

IP address, used to keep sessions secure, to rate-limit abuse and to debug faults.
Browser and device information — type, version and operating system.
Server and access logs, including which pages were requested and when.
Whether an invitation was opened. When a guest opens the link in their invitation we record that it was opened and when, and show the host “opened” beside that guest’s name. We do not record where it was opened from, and a link preview generated by a messaging app is not counted as an open.
A push notification token for your device, if you allow notifications, used only to deliver Celeva’s own notifications to you.

We do not currently geo-block or verify your location from your IP address. Celeva is offered to residents of the United States and India, and you confirm you are one when you accept the Terms, but that is a statement by you rather than a check we perform.

Precise location — only if you switch it on. Celeva’s Live feature can share your position with others at a Moment, and while it is on we store latitude, longitude and an accuracy figure. This is *sensitive personal information*. It is never collected unless you start sharing, every share has an expiry you choose, and it stops at that expiry. If you also turn on Keep my routes (off unless you switch it on), the positions you share are kept as a route that the same people who can see your live position on that Moment can see; you can erase your route on a Moment at any time, and it is erased when you close your account and otherwise on the schedule in section 7. See your rights for how to limit and delete it.

On the Celeva mobile app, sharing continues while the app is closed or your phone is locked, until the expiry you chose or until you stop it. While it runs, your phone shows a notification saying that your location is being shared.

1.3 Information from other people

From a host. If somebody invites you to their Moment, they give us your name and however they intend to reach you — an email address, a phone number, or neither. You do not need a Celeva account to be a guest.
From Google. We use Firebase Authentication to sign you in, which tells us your email address and, if you sign in with Google, your display name and profile picture.

2. How we use your information

2.1 Running the Service

Creating and maintaining your account, and keeping you signed in.
Letting you build and manage Moments, guest lists, schedules and budgets.
Delivering invitations and collecting replies.
Storing and serving your photographs and files.
Sending you transactional email — confirming your address, resetting your password, and similar.

2.2 AI drafting

If you consent, Celeva can use Google’s Gemini API to draft parts of a Moment for you. What you type into Celeva AI, and details of the Moment it is open in, are sent to Google to produce that draft.

This is off unless you turn it on, and there are two separate settings on your profile: whether AI drafting may be used at all, and whether your conversations are kept afterwards. With keeping turned off, the conversation is held only long enough to answer and is never written down — “we do not store it” means the row is never created, not that it is created and deleted later.

A draft is a suggestion. Nothing it produces is sent to anybody, or changes your Moment, until you accept it.

2.3 Text messages

Where text messaging is enabled for a Moment, we use Twilio to send invitations, reminders and updates about that Moment to numbers a host has provided. See section 6 for how consent and opt-out work.

2.4 Legal and compliance

Recording that you confirmed you are 18 or older, and which version of our documents you agreed to.
Enforcing our Terms of Service.
Responding to lawful requests from government agencies and to legal process.

2.5 Security, and improving the Service

Detecting and preventing fraud, abuse and security incidents.
Diagnosing faults and understanding which parts of the Service are used, so we can improve them.

3. Who we share it with

4. Your rights, and how to use them

These are the rights California residents have under the CCPA as amended by the CPRA. We extend the same controls to everybody who uses Celeva, wherever you live, because operating two standards is how the weaker one becomes the real one.

4.1 The right to know

You can ask what personal information we hold about you, where it came from, why we have it and who we have shared it with. Section 1 answers this for every category we collect.

4.2 The right to a copy

Profile → Your data → Download my data. The file is built and downloaded to your device while you wait. It contains your profile and the Moments you own, with their guest lists.

Nothing is emailed and we keep no copy. The alternative — building the file, storing it, emailing a link — leaves your personal information sitting in a bucket and in an inbox. Photographs are not in the file, because each Moment’s album downloads them properly and a JSON file full of base64 is not something anybody can read.

4.3 The right to delete

Profile → Close my account. You type a confirmation, and it happens straight away — not after a review, not after a waiting period.

In one step we delete your email address, your name and your profile picture; delete the link between your account and the way you sign in, so no credential can reach it again; delete the account Google holds for signing you in; revoke every invitation link your guests hold, on every Moment you created; and delete the photographs and files on those Moments from storage.

Revoking guest links reaches past you. If a co-host is still running one of your Moments, its guests lose the invitation they were sent, even though the Moment continues. We do it because an invitation link is a key to a Moment belonging to somebody who has asked to be forgotten — and we tell you before you press the button rather than after.

This is not reversible. What remains is a row holding an opaque identifier and the date of your request — which is what your surviving Moments point at, and cannot be traced to you. It is removed 30 days after your request, or, if a Moment you created still exists then, when the last such Moment is deleted.

Moments you created are not deleted, and that is deliberate. They keep their schedules, guest lists and replies, and a co-host can carry on running one — cascading a deletion through them would take a wedding away from everybody who built it. What leaves is every thread back to you. If you want a Moment gone as well, delete it before closing your account.

4.4 The right to correct

Edit your name, time zone and home location on your profile at any time. To change your email address, or to correct anything you cannot reach yourself, write to privacy@celeva.com.

4.5 The right to limit sensitive information

Some of what Celeva holds is sensitive personal information: precise location, while you share it through Live; the contents of replies and messages exchanged between hosts and guests; and your sign-in credentials, which Firebase Authentication holds for us. We use each of these only to provide the Service — never for advertising, and never to infer anything about you — so there is no further use to limit. You can stop a location share at any time from the Moment it belongs to, and every share expires on its own at the time you set.

Dietary and allergy notes. A guest can write a note about what they eat when they reply — an allergy, a preference. Because it can say something about a person’s health, we collect it only if the guest ticks a box agreeing that the hosts may see it; where a host adds a note on a guest’s behalf, the host confirms the guest agreed. It is shown only to the hosts of that Moment, it is never sent to the AI drafting service, and it is deleted with the Moment or when the guest is removed. A guest can clear it at any time by replying again with the note empty, or by asking us through the request form.

4.6 The right to opt out

AI drafting — turn it off on your profile. You can also keep it on while turning off the saving of conversations.
Text messages — reply STOP to any message. See section 6.
Email about a Moment — ask the host to remove you from the guest list, or write to us.

There is no opt-out of sale or of targeted advertising to offer you, because we do neither.

4.7 No discrimination

We will not deny you the Service, charge you differently, or give you a worse experience because you exercised any of these rights.

4.8 Making a request

Most of these you can do yourself, immediately, from your profile. For anything else, use the request form — it works without an account, which matters if you were a guest at somebody else's celebration and never signed up. It is logged with the date it arrives. You can still write to privacy@celeva.com if you prefer; it reaches the same people.

We will acknowledge within 10 business days.
We will respond within 45 days, and may extend once by a further 45 days if we tell you why.
We may need to verify that the account is yours, usually by emailing the address on it.
An authorised agent may act for you with written permission from you.

If we refuse a request we will say so and why. You may appeal by replying to that message; we will answer an appeal within 45 days.

5. Children

Celeva accounts are for people 18 and over. You confirm your age when you sign up. This is your statement; we do not verify it.

We do not knowingly collect personal information from anybody under 13. The Children’s Online Privacy Protection Act (COPPA) governs children under 13, which is a separate matter from our 18+ account rule. If we learn that we hold information about a child under 13, we will delete it.

Guests are a different case, and worth being plain about. Celebrations include children, and a host may put a child’s name on a guest list. If you are a host, you are responsible for having the right to share the details of anybody you add — including a parent’s permission where the guest is a child.

If you believe a child under 13 has given us information, tell us through the request form or write to privacy@celeva.com, and we will remove it.

6. Text messages

6.2 What we send

The invitation, and reminders about it.
Requests for a reply, and confirmation of the reply you give.
Updates from the host about that Moment — a change of time or place, for example.

6.3 Stopping messages

Reply STOP to any message. UNSUBSCRIBE, END, QUIT, CANCEL, HALT and OPTOUT work the same way. We stop immediately and confirm once. Reply START to begin again, or HELP for contact details.

You can also write to privacy@celeva.com. We keep a record of numbers that have asked us to stop, so that we can honour it — that record exists for no other purpose.

6.4 Rates, frequency and carriers

Message and data rates may apply. Message frequency varies with the Moment. Carriers are not liable for delayed or undelivered messages. Messages are delivered by Twilio.

7. How long we keep it

Each kind of record has a period, and a nightly job enforces the ones a job can enforce. These periods are set in the code that runs Celeva, so this table and the product cannot disagree.

Your account — while it is open. When you close it, your identity is erased at once; the opaque row left behind is removed after 30 days, or when the last Moment you created is deleted if that is later — see section 4.3.
Moments, guest lists, photographs and everything inside a Moment — until you delete the Moment, or 24 months after the Moment's date if nothing in it has been changed since. They are not deleted when you close your account.
Precise location — only for the length of the share you started, which expires at the time you chose; stale coordinates are erased within 1 day.
Stored routes (only if you turn on “Keep my routes”) — 7 days after the Moment ends, unless the organizer of a premium Moment chose a different period; always erased when you close your account.
Anonymous guest sessions — 30 days, unless you create an account and keep what you made.
Celeva AI conversations — 90 days after the last message, or not at all if you have turned saving off.
Privacy requests — 24 months after the request is closed, so we can show how it was handled.
Delivery records for messages, and records of consent and of your agreement to these documents — for as long as we may need to show what happened and what you agreed to — a stop request in particular cannot be lost.
Audit records of changes in a workspace — at least 24 months. Nobody in the product, including us, can edit or remove an audit record before then.
Server and access logs — a short period for security and fault-finding.

8. Security

Everything travels over HTTPS/TLS.
Databases and file storage are encrypted at rest by the providers that hold them.
Passwords are handled by Firebase Authentication; Celeva never sees or stores one.
Guest links are stored as one-way hashes, so the database does not contain a usable key.
Contact details collected for a text-messaging campaign are encrypted by Celeva with a key we hold, on top of the provider's own encryption.
Access to production systems is restricted.

Ordinary guest details — the name, email address and phone number on a guest list — are not separately encrypted by Celeva. They are protected by the database's own encryption at rest and by the access controls above, which is the same protection as the rest of your Moment. We say so rather than implying more, because the extra layer described above exists only for messaging-campaign contacts.

No system is impenetrable, and we will not tell you otherwise. We cannot guarantee the security of your information, and you should not treat any online service as though we could.

9. Cookies

Celeva sets one cookie, to keep you signed in. It is essential to the Service and there is nothing to opt out of, because we do not set advertising or cross-site tracking cookies.

10. Do Not Track

There is no agreed standard for how a service should answer a Do Not Track signal, so we do not respond to one. It makes no practical difference here: we do not track you across other websites.

11. Other websites

A host can put links in an invitation, and Celeva pages may link elsewhere. This policy does not cover those sites and we are not responsible for what they do.

12. Where your data lives

Celeva is offered to residents of the United States and India, and your account, Moments and guest lists are stored in the United States — in Google Cloud’s us-central1 region in Iowa, wherever you live.

Photographs and files are stored separately, on Cloudflare R2. Cloudflare operates a global network and does not guarantee that an object stays in one country, so we do not promise that your photographs never leave the United States. Everything else does stay in the US region named above.

Both providers encrypt what they hold at rest and in transit.

13. Where you live

Everything in this policy applies to you wherever you live. Some countries give you additional rights, or require us to tell you particular things — those additions are below, by country. Where your information is stored does not change: see section 12.

If you are in the United States

California — the rights in section 4 are the CCPA/CPRA rights, and that section is written to satisfy them.

Virginia, Colorado, Connecticut, Utah, Montana, Texas, Oregon and other states with comprehensive privacy laws — you have comparable rights to know, access, correct, delete and appeal, and to opt out of targeted advertising, sale and profiling. We do none of those three. Exercise any of these the same way, at privacy@celeva.com, telling us which state you live in.

Nevada — we do not sell personal information as Nevada defines it, and you may still write to us to say you do not want us to.

If you are in India

Smart Solution LLC processes your personal information under the Information Technology Act, 2000 and the rules made under it — including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 — and, from the dates they take effect, the Digital Personal Data Protection Act, 2023 and the rules made under it.

Sensitive information. The only sensitive personal data under the 2011 Rules that Celeva may hold is a dietary or allergy note that says something about a guest’s health. We collect one only when the guest ticks a box consenting to it, and the guest may withdraw that consent at any time by clearing the note or asking the Grievance Officer. Passwords are held by Firebase Authentication, never by Celeva. We protect what we hold with the practices described in section 8.

Grievance Officer. Meenakshi Rai, Grievance Officer, Smart Solution LLC. Email: grievance@celeva.com. Postal address: 12 Butterfield Ln, Westford, MA 01886, United States. We acknowledge every complaint within 24 hours and resolve it within 7 days. A request to remove content that breaks section 3A of the Terms is acted on within 36 hours, and an intimate, morphed or impersonating image of you shared without your consent is removed within 2 hours. If you are not satisfied with the decision, you may appeal to the Grievance Appellate Committee at [gac.gov.in](https://gac.gov.in) within 30 days. There is a page of their own at /legal/grievance.

Everything in section 4 applies to you in the same way: download your data, correct it, close your account, and withdraw consent to AI drafting at any time.

When the Digital Personal Data Protection Act’s duties take effect (13 May 2027), you will also be able to nominate somebody to exercise your rights if you die or become unable to, and — once you have used our grievance process — to complain to the Data Protection Board of India.

Text messages. Celeva does not currently send SMS to Indian mobile numbers. Invitations to Indian guests go by email, by WhatsApp where an organization has connected its own account, or by a link the host shares.

14. Changes to this policy

We may update this policy. The version and date at the top of the page always say which text you are reading. If a change materially reduces your rights or widens what we do with your information, we will tell you before it takes effect rather than relying on you to notice.

15. Contact us

Smart Solution LLC, which operates Celeva, is the business responsible for the personal information described here.

Write to privacy@celeva.com with any question about this policy, or to exercise any right in it.