Privacy notice

Who is responsible

The Celebhours operator will be the data controller or equivalent responsible organization for personal information handled through this website. Its legal identity and address are not yet finalized. Until they are published, you can contact the team through the privacy request form. We do not currently identify a Data Protection Officer or EU/UK representative. Whether one is legally required depends on the final business setup and how the service operates in each country.

Information we handle

• Talent access and brand enquiries: name, email, role, organization, any phone number supplied, and the message you choose to send.
• Talent accounts and profiles: account email and authentication identifiers; public name, biography, profile photo, social links, featured cards, and planned offer descriptions and availability selected by the talent or authorized team. Saving a profile publishes the selected profile and offer information to visitors. Photo files submitted through the profile editor are routed through our onboarding service and, when configured, stored and delivered by Cloudinary.
• Invitations: invited email, display name, invitation status and timestamps. An invitation link expires after seven days; its database record is not automatically deleted when it expires.
• Fan accounts and follows: name and email address or phone number used to sign in, authentication identifier, and the talent accounts followed. Google sign-in can provide basic account profile details. Passwords and phone verification are handled by Firebase Authentication; they are not stored in enquiry records.
• Privacy requests: name, reply email, request type and optional details. Do not send passwords, payment details or government identification numbers through the form.
• Service and security data: technical data generated by hosting, authentication, phone verification, abuse prevention and error troubleshooting. Exact logs and retention periods depend on each provider’s configuration.
• Optional analytics: Firebase Analytics is not started until you choose “Allow analytics.” If enabled, Google may receive usage, device and event data. You can withdraw that choice using Privacy settings; doing so stops further analytics collection by this site.

How and why we use information

• To respond to a message, review an access request and route brand or licensing enquiries to the talent or team named by the sender.
• To create and protect requested accounts, verify sign-ins, let talent manage public profiles and support fan follows.
• To send talent invitations and account verification messages, prevent abuse, troubleshoot and protect the service.
• To handle privacy requests, maintain necessary business records and meet legal requirements.
• To understand site use only if you separately opt into optional analytics.

Where data protection law requires a legal basis, we generally rely on steps requested by you or the account service you ask us to provide; our legitimate interests in operating, securing and responding about the service, where those interests are not overridden by your rights; consent for optional analytics; and legal obligations where applicable. We will explain any materially different purpose before using information for it. We do not currently sell personal information or use it for cross-context behavioral advertising.

Public profiles and enquiries

Talent profile fields and offers that a talent saves for publication are visible to the public and may be copied, indexed, linked to or reshared by others. Do not publish information you want to keep private. Talent can edit or remove profile details while signed in; cached or third-party copies may take time to disappear. A brand or licensing enquiry is collected so it can be reviewed and routed, but submitting it does not guarantee delivery to or a response from a particular person.

Providers and disclosures

We use service providers to run the features above. Depending on configuration and the feature used, they may process relevant information on our instructions:

• Google Firebase: account authentication, Firestore database, phone verification and optional Analytics.
• Cloudflare: the talent invitation and profile-photo onboarding service.
• Cloudinary: profile photo storage and delivery when configured for the upload service.
• EmailJS: email notifications for submitted enquiries and privacy requests when configured.
• Netlify: website hosting and delivery.

Providers may process information in countries other than yours. The precise storage regions, contractual transfer safeguards and configuration depend on the relevant provider accounts. Contact us through the form for current transfer information. We do not claim that every international transfer mechanism has been independently assessed. We may also disclose information when required by law, to protect people or the service, or in a business restructuring subject to appropriate safeguards.

We do not currently use a payment processor. If we introduce checkout, ticketing, memberships, donations or digital delivery, this notice and the terms will be updated before those features launch.

Retention and deletion

We retain information for as long as needed for the purpose it was collected, account operation, security, dispute handling or legal obligations. We do not currently have automatic deletion configured for enquiry records or expired invitation records. Administrators must review and delete those records manually. Talent invitations expire after seven days, but expiry does not itself erase the record. Profile and account deletion requests may require an administrator to remove related Firestore records, the Firebase Authentication account and any stored profile image. Some limited records may be kept where law permits or requires, and backups or provider logs may persist for a limited period under provider retention settings. We will explain any applicable exception when responding to a verified request.

Security

We use HTTPS, Firebase access rules and restricted staff access to protect the service. Public profile information is intentionally public; submitted enquiry records and unpublished profile data are access-controlled. No internet service can guarantee absolute security. General anonymous forms do not currently have Firebase App Check enforcement enabled, and our retention and deletion processes are partly manual. We are continuing to improve those controls.

Your choices and rights

Your rights depend on where you live and which law applies. They may include asking for access, correction, deletion, a portable copy, restriction or objection; withdrawing consent where processing relies on it; and complaining to a privacy regulator. Some rights have legal limits. You can change optional analytics consent using Privacy settings at the bottom of this page or the website. This site does not make decisions about you solely through automated processing that have legal or similarly significant effects.

People in the EEA or UK can contact their local data protection authority. People in India can use the request form to exercise rights available under applicable Indian data protection law and to raise a grievance. US state privacy rights, where applicable, may include access, correction, deletion, portability and opting out of certain sale, sharing or targeted-advertising processing; this site does not currently sell data or use cross-context targeted advertising. Other countries may provide additional rights. A request will be verified proportionately before we act.

For UK privacy complaints, use the form below and select “Complaint or other privacy question.” We will acknowledge complaints within 30 days and respond without undue delay, subject to applicable law.

To submit a request or complaint, use the form below. It creates a record for the Celebhours team; it is not an instant support channel. We will use the email you provide to verify and respond.

Children and age limits

The current account experience is not designed for children. The site does not currently perform reliable age verification or provide a parental-consent workflow. Do not create an account for a child or submit a child’s personal information through these forms. If you believe a child’s information has been submitted, a parent or guardian can contact us through the form below. Before opening accounts or paid experiences to minors, we must implement age-appropriate safeguards and any required parental-consent process for the countries served.

Contact, requests and complaints

The legal operator identity and dedicated privacy email are not yet available. For now, submit your request here. We will verify it and handle it under applicable law. Do not use this form to send sensitive identity documents unless we specifically request a secure method.

Updates to this notice

We will update this notice when our information practices or services change. We will publish a new effective date and, where required, give additional notice or ask for consent. Review this page periodically, especially before using future commerce or paid features.