Privacy Policy

xensco ("we," "us," "our," or "Company") operates the xensco platform, including our website and mobile application (collectively, the "Services"). The Services may include vendor discovery and marketplace bookings, vendor business pages, planning dashboards, digital invitations and event webpages, a product Shop, community and inspiration features, communications tools, and related products. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit, use, or interact with our Services.

Please read this Privacy Policy carefully. By accessing and using xensco Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with our practices, please do not use our Services. This Policy should be read together with our Terms & Conditions.

1. Definitions

• "Personal Information" refers to any data that identifies or can reasonably be linked to an individual, including but not limited to name, email address, phone number, address, payment information, photos, voice recordings, and usage data. Personal Information does not include anonymized or de-identified data that cannot be linked to you.
• "User" means any person who registers, accesses, or uses our Services, including couples, event planners, and other individuals.
• "Vendor" means registered wedding professionals (photographers, caterers, venues, planners, etc.) who list their services on our platform.
• "Seller" means a person or business that lists products in the xensco Shop. A Seller is not the same as a Vendor, even if the same person operates both.
• "Host" means a user who creates, publishes, or shares a digital invitation or event webpage.
• "Guest" means a person who opens, views, RSVPs to, or contributes to an invitation or event webpage, whether or not they have an xensco account.
• "Collaborator" means a person invited into a Wedding HQ / planning workspace.
• "Managed Service Client" means any User who has booked the Managed Event Planning Service offered by xensco.

2. Personal Information We Collect

We collect various categories of Personal Information depending on how you interact with our Services:

2.1 Information You Provide Directly

• Account Registration: Name, email address, phone number, location, password, and account preferences. You may also sign in with Google, in which case we receive your Google account name, email, and profile photo as provided by Google.
• Anonymous or limited sessions: For some booking flows we may create a temporary anonymous session and later link it to a name, phone number, and optional email without a full sign-up.
• Vendor Profile Information: Business name, description, portfolio, pricing, service area, contact details, and payment or billing details used for commission invoices
• Seller Information: Store name, phone, WhatsApp, email, address, city, GST number, PAN, bank or UPI payout details, product listings, and related KYC or tax information
• Communication Data: Messages, enquiries, quotes, feedback, customer-support communications, reviews, and related files
• Payment Information: Transaction details and billing information processed through third-party payment providers such as Cashfree and PayPal. We do not store complete card numbers.
• Event Details: Wedding or event date, location, guest count, preferences, and other event-related information you share
• Shop Orders: Shipping name, phone, email, full delivery address, pincode, delivery notes, cart contents, and order/tracking history. Guest checkout may collect this without an account.

2.2 Additional Information Collected for Managed Event Planning Service

If you book our Managed Event Planning Service, we collect additional information to facilitate personalized planning support, including:

• Detailed event preferences, themes, style references, and special requirements
• Budget breakdown and spending priorities across vendor categories
• Guest list size, dietary requirements, accessibility needs, and other event logistics
• Vendor preferences, prior vendor experiences, and specific dislikes or requirements
• Communication history between you and your assigned planning coordinator
• Feedback and ratings on vendor suggestions provided to you
• Timeline preferences and key milestone dates for your event

Note: This information is collected solely to provide you with a tailored planning experience and is handled with the same protections as all other Personal Information described in this Policy.

2.3 Information Collected Automatically

• Device Information: Device type, operating system, browser type, unique device identifiers
• Network Information: IP address, internet service provider, location data (if enabled)
• Usage Information: Pages visited, content viewed, search queries, time spent on platform, clicks, scroll behavior
• Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to track user behavior and preferences

2.4 Information from Third Parties

• From Vendors when they provide client information
• From Google if you use Google Sign-In or Google Maps / Places features
• From payment processors (Cashfree, PayPal) and financial institutions
• From courier or logistics partners for Shop tracking updates
• From service providers and business partners

2.5 Information from Google Maps Platform

Our Services may display vendor listings sourced from the Google Maps Platform, including the Google Places API. When you search for vendors (for example, "photographer in Bangalore"), our servers may send a request to the Google Places API to retrieve publicly available business information, which may include:

• Business name
• Business address or service area
• Public ratings and reviews
• Publicly available photos
• Business contact details
• Business category information

This information is provided directly by Google Maps Platform and may originate from business owners or publicly available sources.

xensco does not control the accuracy, completeness, or reliability of this information. Vendors listed through Google Maps Platform may not be registered users of xensco.

Vendor listings obtained from Google Maps Platform are displayed for discovery purposes only and do not imply endorsement or verification by xensco.

Use of Google Maps Platform services is subject to Google’s own privacy policy and terms: https://policies.google.com/privacy

2.6 Marketplace Messages, Quotes, and Bookings

When you use in-app messaging or marketplace booking tools, we may collect:

• Chat messages, including original text and a masked or filtered version
• Names, phone numbers, and emails associated with a booking (stored privately until contact unlock where that workflow applies)
• Event date, city, guest count, service type, quotes, inclusions, amounts, and booking status
• Flags that a message appears to share contact details, UPI IDs, social handles, or bypass phrases

2.7 Invitations, Event Webpages, and Guest Contributions

If you are a Host, we may collect event names, dates, venues, addresses, maps links, WhatsApp numbers, photos, videos, music files, billing email/phone, and host-dashboard tokens. If you are a Guest, we may collect your name, wish or message, uploaded photo, voice recording, and similar memory-wall contributions. We may also store a visitor identifier on your device to count views, shares, reactions, and voice plays.

Invitation and event pages may be reachable by anyone with the link. Hosts should avoid publishing sensitive personal information and should obtain consent before uploading photos or recordings of other people, including children.

2.8 Custom Business Websites

For Vendor business pages we may collect page content (about, services, packages, portfolio, team, blog, testimonials), booking-request / enquiry-form submissions from visitors, page-view and click analytics, subscription and promo-code records, and prompts or drafts used with Xen AI content tools. Direct public phone and WhatsApp buttons are generally not shown on the live page; contact details stored in the Vendor account may still be used after contact unlock under the marketplace booking rules. Optional public social links (such as Instagram) may be displayed if the Vendor adds them.

2.9 Wedding HQ and Planning Workspaces

If you use Wedding HQ or planning tools, we may store tasks, timelines, budgets, expenses, guest lists (including names, RSVP status, dietary notes, and seating), moodboards, notes, documents, collaborator names or emails, and links to your invitations. This workspace is intended to be private to you and people you invite. You are responsible for having a right to store guest and family information you enter.

2.10 Social, Inspiration, and Community Content

If you submit or interact with social or inspiration content, we may collect photos, videos, captions, hashtags, city or location, comments, likes, saves, shares, author display mode (named, anonymous, or xensco-branded), and moderation status. Approved posts may be shown publicly.

2.11 Done-for-You Design and Advance Payments

For Done-for-You requests we may collect event details, WhatsApp, email, photos of identifiable people, partner portraits, videos, music, style notes, and payment records, which authorised staff use to design and deliver your invitation or event page. For advance payments toward a Vendor we may collect amount, event date, phone, notes, and payment-processor references.

2.12 Xen AI Assistant

If you use Xen, chat text and related context may be sent to our servers or cloud functions to generate replies and search vendors (including via Google Places). Do not include government ID numbers or other sensitive data in Xen chats unless necessary.

3. How We Use Your Personal Information

We use collected Personal Information for the following purposes:

3.1 Service Delivery and Platform Operations

• Creating and maintaining your account (including Google Sign-In or anonymous booking sessions)
• Providing vendor matching, recommendation services, and vendor discovery through both registered vendors and publicly available business listings obtained from trusted third-party sources such as Google Maps Platform
• Generating and sharing leads between users and vendors according to the applicable workflow, including hiding full contact details until official-quote acceptance and/or a verified payment step where protected booking applies
• Operating in-app messaging, official quotes, booking records, contact unlock, and commission invoices
• Processing payments and calculating vendor or Shop commissions
• Hosting Vendor business pages, invitations, event webpages, Shop orders, Wedding HQ workspaces, and community content
• Providing analytics, Xensco Score or similar performance metrics, and dashboard insights to Vendors
• Filtering or masking messages to reduce off-platform contact leakage before booking confirmation
• Providing coordination and planning assistance (where applicable)
• Sending transactional notifications (booking confirmations, order updates, commission invoices, status updates)

3.2 Managed Event Planning Service Operations

When you book the Managed Event Planning Service, we additionally use your Personal Information to:

• Assign a dedicated planning coordinator to your account and share relevant event details with them
• Shortlist, evaluate, and present suitable vendors based on your preferences, style, and budget
• Communicate with vendors on your behalf, which involves sharing your event requirements (but not sensitive personal data beyond what is necessary)
• Build and maintain your personalized event plan and timeline
• Contact you promptly after booking confirmation to begin planning coordination
• Track progress, coordinate follow-ups, and manage vendor communications throughout your planning journey

Important: xensco uses your information to coordinate and facilitate planning support only. We do not guarantee error-free vendor performance. Please refer to Section 7A of our Terms & Conditions for full details on service scope and limitations.

3.3 Marketing and Promotional Activities

• Sending promotional emails, SMS, and notifications about new vendors, offers, and services
• Creating targeted advertising based on your preferences and activity
• Promoting vendor content on our social media platforms
• Conducting market research and analytics

3.4 Safety and Fraud Prevention

• Verifying user identity and preventing unauthorized access
• Detecting and preventing fraudulent transactions, fake listings, COD abuse, and commission circumvention
• Investigating complaints and disputes
• Enforcing contact-unlock, ranking, and non-circumvention rules
• Securing our platform and protecting user data
• Complying with legal obligations

3.5 Platform Improvement

• Analyzing usage patterns to improve user experience
• Developing new features and services
• Conducting A/B testing and analytics
• Creating aggregated and anonymized reports

4. Lead Generation and Sharing

A core function of our platform is connecting users with vendors through enquiries, messages, quotes, and related tools.

4.1 Lead Collection

When you submit enquiries, booking requests, or express interest in vendor services, we collect information about your event and preferences. This constitutes a "lead" on our platform.

4.2 Lead Sharing with Vendors

How much we share depends on the workflow:

• Open enquiries (including some directory or business-page forms): we may share your name, contact details, event date, location, preferences, and budget with the relevant Vendor so they can respond.
• Protected marketplace bookings: we may share limited information first (for example a first name, event basics, or masked contact). Full phone and email may remain hidden from the Vendor until you accept an official quote and/or complete another designated unlock step shown in the product (which may include a verified Cashfree advance / token payment).

By using these tools, you consent to the applicable sharing. We may share:

• Your name and contact details (immediately or after contact unlock, depending on the flow)
• Event date, location, and basic details
• Service preferences and requirements
• Budget information (if provided)

4.3 Vendor Use of Your Information

Once we share your information with vendors, they are responsible for managing your data according to their own privacy policies and applicable law. We are not responsible for vendors' use of your Personal Information beyond lead matching.

4.4 Managed Service Lead Sharing

For Managed Service Clients, we share additional event details with shortlisted vendors during the coordination process on your behalf. By booking the Managed Event Planning Service, you expressly consent to the sharing of relevant event details with shortlisted vendors as part of delivering this service. Vendors who receive your information through this process are bound by the same data responsibilities as described in Section 4.3 above. xensco is not responsible for how vendors use or manage your data once it has been shared.

4.5 Opting Out of Lead Sharing

You may request to opt out of lead sharing by contacting us at xensco.com@gmail.com. However, opting out may limit the effectiveness of our Services, and may make it impossible for us to deliver the Managed Event Planning Service.

5. Commission and Payment Processing

xensco may earn commissions from Vendors for transactions facilitated through our platform, Shop commissions from Sellers, and fees for paid products such as website publishing, invitation unlocks, Done-for-You design, and Managed Event Planning.

5.1 Payment Information We Collect

Card and bank details are processed by third-party payment providers. We may collect or store:

• Transaction amounts, order IDs, payment status, and billing name, email, or phone
• Vendor commission invoices and related Cashfree payment references
• Seller payout or bank/UPI details provided for Shop settlements
• Shop order totals, online payments processed through Cashfree (or another gateway shown at checkout), COD flags, and refund or cancellation status
• Subscription and publish-plan records processed through Cashfree or PayPal
• Managed Event Planning, invitation, event-webpage, Done-for-You, and advance-payment records

xensco is not a bank or escrow agent unless a specific product says otherwise. Remaining wedding-service payments between a customer and a Vendor may occur off-platform after contact unlock.

5.2 Secure Processing

Payment-card information is processed through secure third-party payment gateways and is not stored as complete card numbers on our servers. Online payments may be processed through Cashfree Payments (a licensed payment aggregator in India) and/or PayPal, depending on the product. Shop checkout may also offer cash on delivery (COD) where enabled. By paying online, you acknowledge that your payment data is handled by those providers under their own privacy policies. We encourage you to review Cashfree's policy at cashfree.com and PayPal's policy at paypal.com.

6. Vendor Content and Intellectual Property

6.1 Vendor Content

Vendors grant us a non-exclusive license to:

• Display vendor portfolios, photos, and descriptions on our platform
• Promote vendor services through our website, mobile app, and marketing channels
• Use vendor testimonials, reviews, and case studies
• Feature vendor content on our social media platforms
• Create aggregated analytics and reports using vendor data

6.2 Attribution

We will provide attribution to vendors when using their content in promotional materials. Vendors retain ownership of their original content.

6.3 Copyright and Infringement

Vendors warrant that all content they provide does not infringe upon third-party intellectual property rights. Vendors are solely responsible for ensuring they have rights to use and license their content to xensco.

7. How We Disclose Personal Information

7.1 With Vendors, Sellers, and Service Providers

• To Vendors for lead matching, enquiries, quotes, and (after contact unlock where applicable) coordination
• To assigned planning coordinators under the Managed Event Planning Service
• To shortlisted vendors during coordinator-managed vendor outreach (Managed Service Clients only)
• To Shop Sellers and courier or logistics partners as needed to fulfil an order
• To payment processors including Cashfree and PayPal
• To hosting providers and cloud storage services, including Firebase / Google Cloud
• To Google for Maps/Places discovery, Google Sign-In, and (where enabled) advertising or analytics such as Google AdSense
• To WhatsApp or similar apps when you choose to contact a Host, xensco support, or another party through those buttons (Custom Business Websites generally do not expose public Vendor WhatsApp / call buttons)
• To marketing and analytics partners
• To customer support and authorised xensco staff, including access to chats where needed for disputes, fraud, or commission enforcement
• We may use Google Maps Platform services (such as the Google Places API) to retrieve publicly available business listings when users search for vendors.

7.2 Business Partners and Marketing

We may share aggregated or de-identified information with business partners for marketing and advertising purposes. We do not sell Personal Information in the sense of a data-broker sale. We may use advertising cookies, sponsored listings, or Google AdSense as described in Section 12. You can control some of these technologies through your browser or Google ad settings.

7.3 Legal and Compliance

We may disclose Personal Information when required by law, regulation, or legal process, including:

• Compliance with court orders, subpoenas, or government requests
• Enforcement of our Terms of Service and other agreements
• Protection of legal rights, privacy, safety, or property
• Investigation of fraud or violations of law

7.4 Business Transfers

If xensco is acquired, merges with another company, or undergoes bankruptcy or insolvency, Personal Information may be transferred as part of the business transaction.

7.5 User Consent

We may disclose Personal Information when you explicitly consent or request such disclosure.

8. Data Security and Retention

8.1 Security Measures

We implement appropriate technical and organizational security measures to protect Personal Information, including:

• Encryption of data in transit (HTTPS/SSL)
• Secure authentication and access controls
• Regular security audits and testing
• Secure password storage practices
• Firewalls and intrusion detection systems

Disclaimer: While we implement robust security measures, no online system is completely secure. We cannot guarantee absolute security against all cyber threats. You are responsible for maintaining the confidentiality of your login credentials.

8.2 Data Retention

We retain Personal Information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy. Retention periods may vary based on:

• Legal or regulatory requirements
• Necessity to maintain your account and Services
• Resolution of disputes and claims
• Business purposes and analytics

Upon account deletion request, we will delete Personal Information within 30 days, subject to legal retention obligations. We may retain longer where needed for tax, accounting, chargebacks, commission disputes, or legal claims. For Managed Service Clients, event planning records, coordinator communications, and vendor coordination data may be retained for up to 12 months after service completion for quality assurance and dispute resolution purposes, after which they will be deleted. Shop orders, commission invoices, and booking records may be retained for the period required by tax and consumer-protection law. Public invitation or event pages remain available until the Host unpublishes them or we remove them under our Terms. Guest contributions on those pages are stored with the page.

9. Your Rights and Choices (India-Specific)

Under Indian law, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, you have the following rights:

• 9.1 Right to Access: You have the right to request access to Personal Information we hold about you. We will provide this information within 30 days of your request.
• 9.2 Right to Correction: You may request correction of inaccurate or incomplete Personal Information. We will update your information within a reasonable timeframe.
• 9.3 Right to Deletion: You may request deletion of your Personal Information, subject to certain exceptions. We may retain information necessary for legal compliance, dispute resolution, or service continuity.
• 9.4 Right to Data Portability: You may request a copy of your Personal Information in a structured, commonly-used format for transfer to another service provider.
• 9.5 Right to Withdraw Consent: Where we process data based on your consent, you may withdraw that consent at any time by contacting us. Withdrawal will not affect the lawfulness of prior processing.
• 9.6 Right to Opt-Out of Marketing: You may opt out of promotional communications by using the unsubscribe option in our emails or by contacting us directly. We will honor such requests within 5 business days.

9.7 Exercising Your Rights

To exercise any of these rights, contact us at xensco.com@gmail.com with clear identification and details of your request. We may require verification of your identity before processing requests.

10. Children's Privacy

Our Services are not intended for children under the age of 18 to create accounts. We do not knowingly collect Personal Information from individuals under 18 years of age as account holders. If we become aware that we have collected such information, we will take steps to delete it promptly. Parents or guardians who believe their child's information has been collected may contact us immediately at xensco.com@gmail.com.

Hosts and Users may upload photos or recordings that include children (for example wedding guests). Those people remain responsible for obtaining any required consent before uploading. If you believe a child's image or voice was published without appropriate permission, contact us and we will review the content.

11. Third-Party Links and Services

Our Services may contain links to third-party websites and services, including payment gateways (Cashfree, PayPal), WhatsApp, Google services, social media platforms, courier tracking sites, video hosts, and vendor or seller websites. We are not responsible for the privacy practices, content, or security of third-party services. We encourage you to review the privacy policies of any third-party sites before providing personal information.

Our Services may also display vendor listings sourced from Google Maps Platform. These listings are provided by Google and may include businesses that are not affiliated with or registered on xensco.

12. Cookies and Tracking Technologies

12.1 Cookies

We use cookies to enhance your experience, remember preferences, and analyze usage patterns. Cookies are small files stored on your device.

12.2 Types of Cookies

• Essential Cookies: Required for platform functionality, security, login, and checkout
• Performance Cookies: Analytics and user behavior tracking
• Marketing Cookies: Targeted advertising and promotional content, including Google AdSense or similar ads where enabled

12.3 Local Storage and Visitor IDs

Invitation and event webpages may store a visitor identifier in your browser (for example localStorage) so we can count views, shares, reactions, and similar engagement for the Host's insights dashboard. This identifier is not used to create a marketing profile of guests, but it is stored on your device and sent with engagement events.

12.4 Cookie Control

Most browsers allow you to control cookies through settings. You may disable cookies, but this may limit platform functionality (including login and checkout). Advertising cookies may also be controlled through Google ad settings where AdSense is used. By continuing to use our Services, you consent to our cookie and similar-technology usage as described in this Privacy Policy.

13. International Data Transfers

13.1 Third-Party Service Providers

xensco is designed primarily for users in India. We use third-party service providers including Firebase (Google Cloud) and other international platforms for hosting, storage, and technical infrastructure. These service providers may process and store your Personal Information on servers located outside of India. Where international payment options such as PayPal are offered, payment data is also processed by those providers.

13.2 Data Storage and Processing

By using xensco Services, you acknowledge and consent that your Personal Information may be:

• Transferred to and stored on servers located outside of India
• Processed by service providers in jurisdictions outside of India
• Subject to data protection laws of countries where servers are located

Important Notice: Your data may be stored on Firebase (Google Cloud Infrastructure), Amazon Web Services (AWS), or similar cloud providers with data centers in the United States, Europe, and other countries outside India.

13.3 Data Protection Measures

While we engage these third-party providers, we ensure:

• Data is encrypted in transit (HTTPS/SSL)
• Data is encrypted at rest where technically feasible
• Service providers maintain industry-standard security measures
• Data processing agreements require compliance with applicable laws
• Access to Personal Information is restricted to authorized personnel only

13.4 User Consent

By registering and using xensco Services, you explicitly consent to the transfer of your Personal Information to countries outside of India for processing and storage by our third-party service providers. This is a condition of using our platform. We ensure reasonable safeguards are applied to such transfers as required under applicable Indian law, including the Digital Personal Data Protection Act, 2023, and shall update our practices as cross-border transfer rules evolve.

13.5 No Liability

xensco is not responsible for the data protection practices of third-party service providers beyond ensuring contractual compliance. Users understand that data transferred outside India may be subject to different legal protections than those available under Indian law.

13A. Privacy Protections Specific to the Managed Event Planning Service

13A.1 Coordinator Access to Your Data

When you book the Managed Event Planning Service, your assigned coordinator will have access to the event details, preferences, and contact information you have provided. Coordinators are bound by internal confidentiality obligations and may only use your data to fulfil service delivery. Your data will not be shared with any coordinator for purposes unrelated to your event.

13A.2 Vendor Data Sharing During Coordination

As part of coordinating on your behalf, your coordinator may share relevant event details (such as wedding date, location, guest count, style preferences, and budget range) with shortlisted vendors when making enquiries or negotiating on your behalf. By booking the Managed Event Planning Service, you consent to this targeted sharing. We do not share sensitive personal data such as your full address, national ID, or payment details with vendors during this process.

13A.3 No Responsibility for Vendor Data Practices

Once your information is shared with a vendor as part of the coordination process, xensco is not responsible for how that vendor stores, processes, or uses your data. Vendors operate independently and under their own privacy policies. We strongly encourage you to review the privacy practices of any vendor you engage directly.

13A.4 Daily Order Limit and Data Context

xensco accepts a maximum of 10 Managed Event Planning Service bookings per day. This capacity limit exists to ensure quality and dedicated attention. It does not affect your data rights in any way — your Personal Information is handled identically regardless of your booking slot.

13A.5 Coordinator Communications

All communications between you and your assigned coordinator through our platform may be logged and retained for quality assurance, dispute resolution, and service improvement purposes. These communications are stored securely and are accessible only to authorized xensco personnel. They will be deleted in accordance with Section 8.2 of this Policy.

13A.6 Feedback and Vendor Ratings

Feedback you provide on vendor suggestions during the Managed Service process (such as whether a suggestion matched your needs) may be used in anonymized form to improve our vendor matching and shortlisting algorithms. Such data is never attributed to you personally when used for platform improvement.

13B. Marketplace Messages, Contact Unlock, and Vendor Dashboards

In protected booking conversations, customer phone numbers and emails may be stored privately and shown to the Vendor only after the designated unlock step shown in the product (typically official-quote acceptance, and may also include a verified Cashfree payment step where required). Until then, xensco may scan and mask messages that appear to contain contact details, UPI IDs, social handles, or bypass phrases. Original and masked messages may be retained for security, dispute, fraud, and commission enforcement. Authorised staff may access conversations for those purposes. Message filtering is a protective measure and is not guaranteed to catch every disclosure.

Vendor dashboards may show analytics (views, clicks, enquiries), performance metrics such as Xensco Score, response times, conversion, cancellations, and off-platform flags. These metrics are generated from platform activity and are used to operate ranking, quality, and commission programs as described in our Terms.

13C. Custom Business Websites

Content you publish on a business page (including text, photos, videos, prices, testimonials, and blog posts) is public while the page is live. Booking / enquiry forms may send a visitor's name, contact details, and event information into xensco's protected booking tools for the Vendor. Direct public phone and WhatsApp buttons are generally not shown on the live Custom Business Website; optional social links such as Instagram may be public if added by the Vendor. Page-view and click analytics may be shown to the Vendor. Xen AI drafts may be processed by our systems or AI providers to generate suggested copy; Vendors remain responsible for what they publish. Subscription billing may be processed by PayPal or Cashfree, and promo codes may grant temporary publish access.

Once enquiry or unlocked contact data is shared with a Vendor, that Vendor is responsible for how they use it, subject to applicable law. Drafting and previewing a page does not require the same public exposure as publishing it live. By creating or saving a Custom Business Website, Vendors also agree that xensco may create or sync a linked directory / marketplace profile as described in our Terms (Section 7B.10).

13D. Digital Invitations, Event Webpages, and Guests

Hosts choose what personal information appears on an invitation or event webpage. Pages may be opened by anyone with the link or QR code. xensco does not control forwarding, screenshots, or further sharing by recipients.

Guest memory walls may collect guest names, messages, photos, and voice recordings, which are displayed on the Host's page and may appear in the Host insights dashboard. RSVP flows may redirect guests to WhatsApp; those conversations occur between the guest and the Host on WhatsApp, not as a complete RSVP database on xensco. Visitor IDs may be stored in the browser to measure views, shares, reactions, and voice plays.

Guests who submit content warrant they have the right to upload it. Hosts are responsible for moderating guest contributions and for obtaining consents for people appearing in media. Music files uploaded by Hosts must be lawfully used by the Host.

13E. Shop, Sellers, and Delivery

Shop checkout collects shipping name, phone, email, address, and order details, including for guest checkout. Online Shop payments may be processed through Cashfree (or another gateway shown at checkout). Where COD is offered, we still collect contact and address data to fulfil delivery. We share fulfilment information with the Seller of the product and with courier partners as needed to deliver the order. Seller GST, PAN, and payout details are used for onboarding, tax, and settlement, not for public display except as required (for example seller name on a product or invoice).

After an order is placed, the Seller is responsible for how they handle customer data for fulfilment, subject to applicable law. xensco may retain order records for support, refunds, fraud prevention, and legal compliance.

13F. Wedding HQ and Collaborators

Planning workspaces may contain guest lists, dietary information, budgets, documents, and family details that you enter. We treat this as account data for providing the tool. Collaborators you invite can see shared plan data. xensco does not use guest-list contents for vendor lead sharing unless you separately start an enquiry or booking that includes that information. You must only store information you have a right to store, and you should remove access when a Collaborator should no longer see the plan.

13G. Social and Inspiration Content

Community posts, comments, and inspiration submissions may be reviewed by admins before they go public. If you choose a named author mode, your display name (and photo, if provided) may appear with the post. Anonymous or xensco-branded posts hide your identity on the public feed, but we still associate the submission with your account internally for moderation. By posting, you allow us to host and display the content as described in our Terms. You should not post photos of other people without permission.

13H. Done-for-You Design and Advance Payments

Done-for-You files (photos, video, music, names, and notes) are accessed by authorised xensco staff to design and deliver your invitation or event page. Delivered pages may be public via a link. Source files are retained as needed to complete delivery, handle revisions, and resolve disputes, then according to Section 8.2.

Advance payments toward a Vendor share payment and event notes with xensco and the payment provider, and may notify the Vendor of the advance. That payment is toward the Vendor's services unless checkout says otherwise.

13I. Xen, Newsletter, and Careers

Xen chats may be logged to operate the assistant, improve responses, and search vendors. Newsletter emails collected in the footer are used to send inspiration and offers; you may unsubscribe as described in Section 9.6. If you apply for a job, information you send to the stated careers email is used only for recruitment.

14. Complaints and Grievance Redressal

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, a Grievance Officer has been designated to address complaints and concerns:

If you have concerns about our privacy practices or believe your rights have been violated, you may:

• Contact the Grievance Officer at xensco.com@gmail.com with full details of your complaint
• Lodge a complaint with the Data Protection Board of India or relevant authority
• Pursue legal remedies available under Indian law

We will acknowledge complaints within 48 hours and resolve them within 30 days, acting in good faith.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated to you through email or prominent notice on our website. Your continued use of our Services following notification of changes constitutes your acceptance of the updated Privacy Policy. The "Last updated" date at the top indicates when this policy was most recently revised.

16. Contact Information

If you have questions, concerns, or wish to exercise your privacy rights, please contact us:

xensco

Email: xensco.com@gmail.com