Privacy policy

What we collect

From hosts, the people who make invitations:

• Your phone number, or your name, email address and picture from Google, depending on how you sign in.
• The name and language you choose on your profile.
• What you put on your invitations: names, family names, dates, times, venues, addresses, dress codes, wording, music and photos.
• Your guest list: the names, phone numbers, email addresses, groups and notes you add.
• Co-hosts you invite, by phone number or email address.

From guests, the people who open an invitation:

• The reply you send: your name, whether you are coming, how many adults and children, your message, and answers to the host's questions such as meal choice or arrival date.
• When your personal invitation link was first opened, so the host knows it reached you.

From everyone who visits:

• Your email address and occasion if you join the waitlist.
• Anonymous visit counts, such as which pages are viewed and from which kind of device. These never include the address of an invitation, so they cannot tell whose invitation you opened.
• Technical details when something breaks, such as the page, browser and error message, so we can fix it.

Why we use it

• To sign you in and keep your invitations in your account.
• To show an invitation to the guests the host shares it with, and to pass their replies to the host and co-hosts.
• To keep the service working, safe and fast, and to fix what breaks.
• To tell waitlist members when Shubh Invitation opens to them.

We do not sell personal data, show advertising, or use invitations or guest lists to train software.

Hosts decide about their guest lists

A host who adds guests is responsible for having their permission to do so, the same way they would when writing names on paper cards. The host and their co-hosts can see, change and delete guest details and replies at any time.

Guests can ask the host to change or remove their details, or write to us and we will do it.

Who else handles it

We use a few companies to run Shubh Invitation. They handle data only to provide their service to us:

• Supabase stores accounts, invitations, guest lists, replies and photos, in its Mumbai data centre in India.
• Vercel serves the website from data centres around the world and counts anonymous visits.
• Google signs you in if you choose Google.
• Google's typing service spells a name typed in English letters in your card's script, when you make a card in an Indian language. Only that name is sent, from our server, and nothing that identifies you.
• Anthropic writes suggested wording when you ask for it. Only the words on the invitation's pages, with the names on them, and the occasion are sent; never your account, phone number or guest list.
• A text message provider sends sign-in codes to your phone.

Invitations are shared by hosts themselves on WhatsApp or elsewhere; we do not send messages to guests on the host's behalf. Anyone with an invitation link can open that invitation, so share it only with the people you invite.

We share data with authorities only when Indian law requires it.

Cookies and storage on your device

We use a small number of cookies and your browser's storage only to keep you signed in, remember your language and colour theme, and keep an unfinished invitation safe until you save it. We use no advertising or tracking cookies.

How long we keep it

Invitations, guest lists and replies stay until the host deletes them or their account. Waitlist entries stay until you ask us to remove them or Shubh Invitation opens to you. Technical error details are kept for at most 30 days.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can:

• Ask what personal data we hold about you and who we shared it with.
• Have it corrected or completed.
• Have it deleted, and withdraw any permission you gave.
• Name someone to act for you if you cannot.
• Complain to us, and if you are not satisfied, to the Data Protection Board of India.

Hosts can change their profile and invitations, and delete their whole account, from their profile page. For anything else, write to us at the address below.

Keeping it safe

Everything travels encrypted. Each invitation's guest list and replies are open only to its host and co-hosts, and every guest's personal link is a long random code. If we learn of a breach that affects you, we will tell you and the Data Protection Board as the law requires.

Children

You must be 18 or older to make an account. Children may be named on invitations and may reply to one they receive, under the care of the family that invited them.

Changes

If we change this policy, we will update the date at the top, and tell hosts before a change that affects how we use their data.