1. Overview

Celebrant Central Pty Ltd (“we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at app.celebrantcentral.co (“the Service”). We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

2. Information We Collect

We collect the following types of information:

• Account information: name, email address, phone number, and profile picture when you register.
• Ceremony data: client names, ceremony details, dates, locations, and related documents you enter into the Service.
• Financial data: invoice and payment records you create within the Service. Payment processing is handled by Stripe; we do not store your credit card details.
• Usage data: browser type, IP address, pages visited, and feature usage to improve the Service.
• Communications: messages exchanged through the Service’s messaging feature.

3. How We Use Your Information

• To provide and maintain the Service
• To process your transactions and manage your subscription
• To send you service-related notifications and updates
• To provide customer support
• To monitor and analyse usage to improve the Service
• To detect and prevent fraud or security incidents

4. Data Storage and Security

Your data is stored on secure servers hosted by Amazon Web Services (AWS) in the Asia-Pacific (Sydney) region (ap-southeast-2). We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and regular security audits. Access to your data is restricted to authorised personnel only.

5. Third-Party Services

We use the following third-party services that may process your data:

• Stripe: Payment processing
• Google: OAuth authentication, Calendar integration, and Gmail integration (if you choose to connect these services)
• Amazon Web Services: Cloud hosting and file storage
• Sentry: Error monitoring (anonymised usage data only)

6. Google API Services

Celebrant Central’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect Google services (Gmail, Google Calendar), we access only the data necessary to provide the requested functionality:

• Gmail: We use Gmail API access solely to send emails on your behalf from your connected Gmail account. We do not read, store, or process the content of your emails beyond what is necessary for sending.
• Google Calendar: We use Calendar API access to create and manage ceremony-related events in your Google Calendar. We do not access or store calendar data beyond what is necessary for this integration.

You can disconnect Google services at any time through your account settings, which will revoke our access to your Google data.

7. Cookies

We use essential cookies to maintain your session and keep you signed in. We do not use tracking cookies or third-party advertising cookies. By using the Service, you consent to our use of essential cookies.

8. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances: with your consent, to comply with legal obligations, to protect our rights, or with service providers who assist us in operating the Service (under strict data processing agreements).

9. Your Rights

Under the Privacy Act 1988, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate information
• Request deletion of your personal information
• Export your data in a portable format
• Withdraw consent for optional data processing

To exercise these rights, contact us at privacy@celebrantcentral.co.

10. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain certain records.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The updated policy will be effective when posted.

12. Contact Us

If you have questions or complaints about this Privacy Policy, please contact us at privacy@celebrantcentral.co.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.