Privacy Policy
Last updated: August 14, 2026
Who we are
Utsavly ("we", "us", "our") is an event-planning app operated by JRVR Technologies Private Limited, located at H, 8/149, Rd Number 6, Sivanarayana Puram Colony, Siva Sai Puram, Badangpet, Hyderabad, Telangana 500112. This policy explains what information the Utsavly app collects, why, and what you can do about it.
Contact: [email protected]
What we collect
| Data | Why we collect it | Where it goes |
|---|---|---|
| Host name | To identify who placed an order, shown to your assigned coordinator | Stored in our database |
| Event type, guest count, date, time | To generate your supply/ritual checklist and coordinate delivery | Stored in our database |
| Tradition profile (religion, regional/community selection) — optional, skippable | To personalize your ritual checklist and backdrop suggestions | Stored in our database |
| Checklist item selections | To build your order | Stored in our database |
| Free-text descriptions and chat messages you send to the AI assistant | To generate a personalized event plan or answer your question. Sent to Anthropic (our AI provider, see below) for processing; not used to train Anthropic's models per their API terms as of this writing — confirm current terms before relying on this. | Sent to Anthropic for processing |
| Order/setup status data | To power the live setup tracker | Stored in our database |
| Captain's precise location (Captain app only) | So the customer and Utsavly can see where the assigned Captain is while they're actively delivering an order — including in the background, if the Captain grants "Always Allow" location access, so tracking doesn't stop when they switch apps | Stored in our database as a single latest position (no location history/trail is kept); visible to the customer on that order and to Utsavly admin |
We do not currently collect: payment/financial information (checkout does not process real payments yet), any customer/host location beyond the venue address they type in (see the Captain row above for the one precise-location exception, which applies only to our own onboarded delivery staff), contacts, photos/camera access, or biometric data. If any of that changes before launch, this policy must be updated first.
A note on Captain location specifically
Only Captains (Utsavly's own onboarded verification staff, not customers or vendors) share live location. Sharing starts automatically once a Captain opens an order assigned to them — it is not something a Captain opts into per delivery, and there is no separate in-app toggle to turn it off while that order is active. It stops automatically once the order is cancelled. The device's own OS-level location permission prompt (including the separate "Always Allow" background prompt) is the consent step; a Captain who declines background access still shares location while the app is open in the foreground.
[JRVR Technologies Private Limited: confirm this section against Apple's and Google's background-location review requirements before submitting to either app store — given sharing is automatic rather than opt-in per delivery, double-check this satisfies Google Play's background location policy before submitting; don't assume this framing is sufficient without counsel review.]
A note on the tradition profile specifically
The optional "does your family follow a specific tradition?" step asks for religion and regional/community information — never caste — used only to personalize your own checklist. This field is entirely optional (skipping it doesn't limit what you can order), is never shown to vendors as anything beyond what's needed to do the job, and can be deleted, with consent withdrawn, at any time by contacting us. Under India's DPDP Act, 2023 (in force since 13 November 2025, DPDP Rules 2025 phasing in through 13 May 2027), this is personal data like any other field — the Act doesn't create a separate special-category regime the way GDPR does, but we still treat it as sensitive.
[JRVR Technologies Private Limited: formalize a written DPDP compliance program (data mapping, breach-response runbook, Significant Data Fiduciary assessment, Data Protection Officer if ever needed) with counsel — this document alone is not that program.]
Third parties we share data with
- Anthropic (Claude AI) — receives text from "Describe your event" and chat, plus order context, to generate responses. May involve processing outside India; DPDP permits cross-border transfer by default except to specifically restricted countries (none affect this vendor currently). See Anthropic's privacy policy.
- [HOSTING PROVIDER] — hosts our servers and database. Add once production hosting is chosen.
- We do not sell your personal data, and don't share it with vendors beyond what's operationally necessary.
Your rights
Under the DPDP Act, as a "Data Principal" you can ask us to:
- see what data we hold about your orders (access);
- correct or update inaccurate data (correction);
- delete your data subject to retention exceptions below, acted on within 90 days (erasure);
- withdraw any consent you previously gave as easily as you gave it;
- nominate another individual to exercise these rights if you die or become incapacitated (a DPDP-specific right); and
- register a grievance, escalating to the Data Protection Board of India if unresolved.
Contact [email protected] to exercise any of these.
Children's privacy
Utsavly is not directed at children and we don't knowingly collect data from anyone under 18 years old. We use 18 rather than 13 because the DPDP Act, 2023 itself defines "child" as under 18 for any Indian user — stricter than GDPR (13–16) or COPPA (13) — and requires verifiable parental consent plus bars tracking/profiling of anyone under that age; this app has no parental-consent flow, so 18 is the compliant floor. This also sets our Google Play "Target audience and content" declaration (adults, not children/Families).
Data retention
- Order, checklist, and setup-tracking data: kept 3 years from your event date or last activity, whichever is later, then deleted/anonymized — mirrors the DPDP Rules 2025's Third Schedule default for comparable digital marketplaces once they cross certain user-count thresholds; Utsavly is well below that threshold today but adopted the same period voluntarily as a reasonable baseline.
- AI assistant chat history: kept only as long as its order (see above); the pre-order "ask anything" chat isn't tied to any identity and isn't retained beyond the session.
- Payment, invoice, and tax records (incl. vendor commission/TDS records once real payments are live): kept 8 years per the Income Tax Act and Companies Act — a separate legal floor, independent of the 3-year window.
- Deletion requests: we'll delete what we're not legally required to keep within 90 days. Before any scheduled deletion, we'll notify you at least 48 hours ahead.
Grievance redressal
We maintain a grievance-redressal mechanism as required under the DPDP Act, IT Rules 2021, and Consumer Protection (E-Commerce) Rules 2020. Contact: [email protected].
[JRVR Technologies Private Limited: name a specific Grievance Officer here — name, designation, India-resident status — once appointed; until then this inbox is the functioning channel but the named-individual requirement isn't yet satisfied.]
We'll acknowledge within 48 hours and aim to resolve within 30 days. If unsatisfied or no timely response, escalate to the Data Protection Board of India (DPDP) or your local consumer forum (Consumer Protection Act, 2019).
Changes to this policy
We'll update the "Last updated" date above when this changes and notify you through the app for material changes.
Contact
[email protected]
JRVR Technologies Private Limited
H, 8/149, Rd Number 6, Sivanarayana Puram Colony
Siva Sai Puram, Badangpet
Hyderabad, Telangana 500112