Privacy Policy

When you use the Services, we collect:

• Account Information: name, email address, password (hashed), phone number, business name (for Vendors);
• Profile Information: profile photo, biography, business description, services offered (for Vendors);
• Wedding Information: wedding date, location, guest count, budget, preferences (for Couples);
• Vendor Business Information: services, pricing, portfolios, availability, business credentials;
• Photos and Files: images, documents, contracts, and other files you upload;
• Communications: messages exchanged between Vendors and Couples through the platform;
• Payment Information: billing address and payment details (processed by Stripe; we do not store full card numbers);
• Support Communications: information you provide when contacting customer support.

When you use the Services, we automatically collect:

• Device Information: device type, operating system, browser type, language preferences;
• Usage Information: pages visited, features used, time spent, click patterns, search queries;
• Log Information: IP address, access times, referring URLs, error logs;
• Cookies and Similar Technologies: see our Cookie Policy section below.

We may receive information about you from:

• Vendors who upload your information (for Couples);
• Authentication providers if you sign in via Google, Apple, or other SSO services;
• Payment processors (transaction confirmations from Stripe);
• Marketing partners and referral sources, where you've consented.

Altar AI uses artificial intelligence (“AI”) to enhance the Services. Our AI features are powered by Anthropic's Claude AI, accessed through Anthropic's commercial API. AI features may include suggested replies for Vendors, smart matching between Vendors and Couples, search assistance, and content drafting.

This is one of our most important privacy commitments. We do NOT use your data to train any AI model. Specifically:

• Altar AI does not train any AI model on your data;
• Our AI provider, Anthropic, does not use commercial API data (which includes your data) for model training. This is contractually guaranteed under Anthropic's Commercial Terms of Service;
• Your messages, profile information, wedding details, and communications are not used to teach the AI;
• The AI does not learn from you, retain memory of you across sessions, or accumulate information about you over time.

When you use an AI feature, the relevant content is sent to Anthropic's Claude API in real time, processed to generate a response, and returned to you. Anthropic retains API logs for a short period (currently 7 days under their commercial terms) for security and abuse prevention purposes only, after which the data is deleted. The AI processes your request and forgets it.

We do not sell, license, or share your data with AI companies for training purposes. Our relationship with Anthropic is strictly as a service provider — we send them your data temporarily to generate AI responses, and they are contractually prohibited from using it for any other purpose.

AI features are integrated throughout the Services. Examples include:

• Suggested message replies for Vendors;
• Recommendations based on your stated preferences;
• Search and discovery assistance;
• Content formatting or improvement suggestions.

AI features are a core part of the Services. Use of the Services constitutes consent to AI processing as described herein.

AI-generated content may contain errors, inaccuracies, or biases. AI suggestions are tools to help you — they are not professional advice and should not be relied upon for legal, financial, medical, or other professional decisions. You remain responsible for your own decisions and actions.

When Vendors use AI features to process information about Couples or other customers, the Vendor remains the data controller and must ensure they have proper consent from those individuals. Altar AI processes such data only as a service provider on the Vendor's behalf, subject to our Vendor Data Processing Agreement.

We do not sell your personal information for monetary consideration. For purposes of the CCPA/CPRA, we do not “sell” or “share” personal information as those terms are defined under California law.

To facilitate the Services:

• Couples' inquiries are shared with the Vendors they contact;
• Vendors' public profile information is visible to Couples browsing the platform;
• Messages exchanged between Vendors and Couples are visible to both parties.

We share information with trusted third-party service providers who help us operate the Services, including:

• Hosting and infrastructure providers (Vercel, Supabase, Firebase);
• AI service provider (Anthropic, for Claude AI features) — contractually prohibited from training on your data;
• Payment processors (Stripe);
• Email and communication providers;
• Analytics providers;
• Customer support tools;
• Security and fraud prevention services.

These providers are contractually bound to protect your information and use it only for the purposes we specify.

We may disclose information when we believe in good faith that disclosure is necessary to:

• Comply with applicable laws, regulations, or legal process;
• Respond to lawful requests from public authorities;
• Protect the rights, property, or safety of Altar AI, our Users, or others;
• Detect, prevent, or address fraud, security, or technical issues;
• Enforce our Terms & Conditions.

If Altar AI is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

You have the right to:

• Access: request a copy of the personal information we hold about you;
• Correct: request correction of inaccurate or incomplete information;
• Delete: request deletion of your personal information (subject to legal exceptions);
• Withdraw Consent: withdraw consent for processing where consent is the legal basis;
• Object: object to certain processing activities;
• Portability: request a copy of your information in a portable format;
• Complain: file a complaint with us or with the applicable privacy regulator.

Canadian residents may exercise privacy rights under PIPEDA. Quebec residents have additional rights under Law 25, including the right to be informed of automated decision-making, the right to data portability, and the right to be forgotten.

If we do not resolve your concern, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca).

California residents have the right to:

• Know what personal information we collect, use, and disclose;
• Delete personal information (with exceptions);
• Correct inaccurate personal information;
• Opt out of the sale or sharing of personal information (Altar AI does not sell or share);
• Limit the use of sensitive personal information;
• Non-discrimination for exercising privacy rights.

To exercise any privacy right, contact us at privacy@altarai.co. We will respond within thirty (30) days (or as required by applicable law). We may need to verify your identity before processing your request.