Privacy Policy

1Information We Collect

To create, customize, and deliver your digital invitation, we collect the following categories of information:

• Event & Customization Data: Names of the bride, groom, celebrants, or hosts, event dates, ceremony timings, venue addresses, custom love stories, dress codes, and Google Maps location URLs.
• User Account Details: When you sign in via Google OAuth or phone authentication, we receive your verified email address, full name, and authentication user ID managed securely by Supabase Auth.
• User-Uploaded Photos: Portrait photos and gallery images uploaded to personalize your template.
• Guest RSVP Data: Guest names, attendance confirmation (Attending / Regret), attendee count, and optional congratulatory wishes submitted via the live RSVP module.
• Technical Telemetry: Anonymized browser type, operating system, and IP address for security, rate-limiting, and error diagnosis.

2How We Use Your Information

We use your information strictly for legitimate operational purposes:

• To host, render, and publicly display your interactive digital invitation to the guests with whom you share your unique link (webinvites.shop/i/[slug]).
• To enable real-time features including live countdowns, 1-tap Google Maps navigation, and RSVP collection.
• To provide customer support, verify order statuses, and facilitate post-publish edits from your user dashboard.
• To prevent spam, abuse, fraudulent activity, and ensure website security.

3Payment Processing & Financial Security

When upgrading to our Lite (₹399) or Pro (₹799) plans, all transactions are processed via Razorpay, India's leading RBI-authorized and PCI-DSS Level 1 compliant payment gateway.

Web Invites never sees, processes, or stores your Credit/Debit Card numbers, CVVs, Net Banking passwords, or UPI PINs. We receive only a cryptographic transaction confirmation token (razorpay_payment_id) to unlock your premium features.

4Photo Storage & Media Privacy

Photos uploaded to Web Invites are compressed client-side and saved into secure cloud storage buckets. We do not use your wedding portraits for advertising, marketing, or AI model training without your explicit prior written consent.

You maintain full intellectual property rights and ownership over all media uploaded to your account.

5Third-Party Service Providers

We work with industry-standard, secure infrastructure partners to run our service:

• Supabase (PostgreSQL Cloud): Encrypted database and user authentication infrastructure with Row-Level Security (RLS).
• Razorpay Software Pvt. Ltd.: Secure payment gateway for UPI, Cards, and Net Banking.
• Google Maps & Google Fonts: For venue location routing and typography rendering.
• Google Analytics (Consent-Aware): Anonymized site usage statistics, activated solely when accepted via our cookie banner.

6Cookies & Local Storage

Web Invites uses cookies and browser local storage to deliver a seamless experience:

• Essential Cookies: Required for secure authentication sessions, draft saving across page refreshes, and CSRF protection.
• Preference Cookies: Remembers your music mute preference and cookie consent choices.
• Analytics Cookies: Optional Google Analytics cookies that help us understand page loading speeds and device performance. You can accept or decline these at any time via the cookie banner.

7Data Retention & Permanent Deletion Rights

Under the Indian Digital Personal Data Protection (DPDP) Act, GDPR, and international data standards, you have full control over your personal data:

• Right to Rectification: You can edit event details, timings, and photos anytime via your dashboard or customer support.
• Right to Erasure: You can request complete, permanent deletion of your hosted invitation, photos, and associated account data by emailing our support team.
• Unpublished Drafts: Incomplete anonymous drafts are periodically purged to maintain database hygiene.

8Contact Us

If you have any questions, privacy inquiries, or wish to request data deletion, please contact our support team: