Privacy policy

We collect the least we need to run an invitation. Invite Studio (placeholder legal entity) (“we”) is responsible for this data and runs Invite Studio. This policy is written for India’s Information Technology Act 2000, the IT Rules 2021 and the Digital Personal Data Protection Act 2023. Contact: hello@example.com.

What we collect

• From you, the host: your email address and, if you give it, a phone number, used to send your links and to support you; and the invitation content you enter: names, parents’ and family names, events, venues, messages, photos and music choice.
• From your guests: only what they type into the reply form: name, whether they will attend, number of guests and an optional message. We do not ask guests for an email or phone number. Wishes (a guest’s name and message) are shown to everyone who has the invitation link; the host can remove a message at any time.
• Contact form: your name, email address and message, used only to reply to you.
• Abuse prevention: we temporarily process a one-way hash of your IP address to limit repeated submissions. We do not store raw IP addresses with your data.
• Counts, not people: a daily total of how many times an invitation was opened.
• Payment: card, UPI and bank details go straight to the payment gateway. We receive only a confirmation and an order reference.

Cookies

• lang: remembers English or Malayalam.
• consent: remembers your cookie choice.
• Admin session: a signed cookie that only our staff receive.
• Analytics: only if you choose “Allow analytics” and only when we have switched analytics on. Analytics never run on invitations, the edit pages, checkout or the creation flow. You can change your choice any time with “Cookie settings” in the footer. We do not use advertising cookies.

How we use it

• To show your invitation to the people you share the link with.
• To show guest replies to you through your private edit link.
• To email you your links, receipts and important service notices.
• To prevent abuse and keep the service secure.

Who processes it for us

We do not sell personal data. These processors handle it on our behalf: our web hosting provider (stores the site, database and photos), our email (SMTP) provider (delivers your links and replies to the contact form) and, when online payments are enabled, the payment gateway (processes your payment). Guest replies are visible to you and to our administrators only when needed to give support.

How long we keep it

An invitation stays online for the period of your plan. 60 days after it expires we delete its content, photos, guest replies and view counts, and remove the email address and phone number from the order. We keep the bare order record (amount, date, plan) where tax and accounting rules require it. Contact-form and other emails are deleted from our mail queue after 30 days.

Your rights

You can access, correct or delete your data. Most of it you can change yourself through your private edit link. For anything else, including deleting an invitation early or removing a guest reply, write to hello@example.com with the invitation link. Guests can ask us to remove a reply they submitted. We answer within 30 days.

Grievance officer

Under the IT Rules 2021 and the DPDP Act 2023, complaints about personal data can go to our grievance officer: to be named before launch; until then write to hello@example.com. We acknowledge complaints within 24 hours and resolve them within the period the law allows. You may also approach the Data Protection Board of India.

Postal address: Kerala, India (placeholder address). See also the terms of use.