Privacy policy

Who we are

Indian Wedding Invites is run by Preet Software in Auckland, New Zealand, and we're responsible for the personal information described here. Send questions and requests to support@indianweddinginvites.com. We follow the New Zealand Privacy Act 2020 and, for people in the UK and the EU, the GDPR.

Two kinds of people use the service:

• Couples and co-hosts make an account, enter the wedding's details and add guests.
• Guests are added by a couple, open the link the couple sends them, and can reply. Guests never make an account. What this means for guests.

What couples give us

Your account

Your name, your email address and how you sign in. Our sign-in provider, Clerk, keeps your password in a form no one can read back, or, if you sign in with another account, the name, email address and picture that account shares. We also note when you last opened each wedding, so we can tell you what changed while you were away.

Your wedding

What you type to make your invitations: your names in English and in your family's script, family members' names (including those who have passed away), the contact numbers you choose to print, your events with their dates, times and venues, addresses, accommodation, gift wishes, notes, and the wording and design you choose.

Your photo

If you add a photo to your invitations, we keep it at four sizes made for screens. Making them removes everything else in the file, including where and when the photo was taken, and we don't keep the file you uploaded.

Your guests

For each guest: their name in English and, if you add it, in their script; their phone number, if you add one; which side of the family they're on; how many seats they have; which events they're invited to; when their link was marked as sent, and which of you marked it; when they first opened it; and which of you added them.

Payments

Paddle.com, our online reseller, takes your payment as the merchant of record. With your order we send Paddle your account's email address, the country your connection comes from, and when you accepted our terms and refund date. At checkout you give Paddle your name, your country or address and your payment details. Paddle keeps its own records under its own privacy policy. We never see or keep your card number. We keep what you bought, the amount and currency, your refund date, Paddle's reference for the payment and any refund.

If you're a guest

If a couple added you to their guest list, they gave us the details listed under “Your guests” above, so that we could make your personal invitation. The first time you open your personal link, we note when, so the couple can see it reached you, and we note nothing else about that visit. When you reply, we keep how many people are coming to each event and when you replied. You can change your reply on your link until the couple's guest list is erased.

• We never contact guests. The couple sends you your link themselves.
• Invitations set no cookies, and we don't track you on other websites.
• We erase your details and your reply 90 days after the wedding's last event, or sooner if the couple removes you, erases their guest list or deletes the wedding.
• To correct or remove your details, ask the couple, who can change them at any time. You can also email us, and we'll correct or delete them and let the couple know.

What every visitor sends

• Our hosting provider, Vercel, records each request to the service, including the IP address, browser and page, to keep the service secure and to find faults.
• Vercel also tells us which country each request comes from, worked out from the IP address. We use it to choose the currency of the prices we show you, and send it to Paddle with your order.
• To stop anyone guessing guests' links, we keep a scrambled form of the IP address for 10 minutes whenever someone tries a link that doesn't exist. We also count the replies sent from each link over 10 minutes.
• When an invitation shows a couple's photo, your browser fetches it from Cloudflare, which receives your IP address and browser with the request, as Vercel does.
• Signing in uses cookies that keep you signed in. We don't use advertising or analytics cookies.

How we use it

• To run the service: show you your weddings, show each guest their invitation, record replies, and let co-hosts edit with you.
• To price designs for the country you're in, take payments through Paddle, make refunds and keep the accounting records tax law requires.
• To keep the service and its links secure, and to fix faults.
• To answer you when you contact us.

We don't sell personal information, use it for advertising, or use a guest list for anything except that wedding's invitations.

For people in the UK and the EU, the legal grounds are: our contract with the couple, for running the service; the couple's legitimate interest, and the guest's, in sending invitations, knowing they arrived and recording replies, for guests' details; our legal duty to keep tax records, for payments; our legitimate interest in pricing by country, for the country a request comes from; and our legitimate interest in a secure service, for request records and link-guessing limits.

Who can see it

• You and your co-hosts see everything in the wedding, including the guest list and every reply. The owner can download the guest list.
• A guest on their personal link sees the invitation addressed to them, the events they're invited to and their own reply. Guests don't see each other's details or replies, unless the couple prints their names on the card.
• Anyone with the invitation's plain address, without a personal code, sees the invitation with all its events, venues and the names printed on it. Couples choose that address, so someone could guess it. We ask search engines not to list invitations.
• Anyone with a family preview link sees the invitation before it's published, as any guest would, for 14 days or until the couple turns the link off. Once the invitation is published, the link opens it.
• Apps that show link previews, such as WhatsApp, fetch a preview with the couple's names and design when a link is shared.
• Anyone with a photo's link can open the photo. Photos are served from iwiusercontent.com at long, random addresses that appear only on the couple's invitations, but anyone who has one can see the photo and pass the link on.
• Our service providers store and process information for us, and only as we instruct: Vercel (hosting), Neon (database), Redis (the link-guessing counters), Clerk (accounts and sign-in) and Cloudflare (storing and serving photos). Some of them keep information in the United States and other countries outside New Zealand. They are bound by contract to protect it, and information sent from the UK or the EU is covered by standard data protection clauses.
• Paddle.com, our reseller, receives what's listed under “Payments” above and uses it as the merchant of record, under its own privacy policy.
• Courts and authorities, when the law requires us to give it to them.
• Whoever buys the business, if it is ever sold. They would have to keep the promises in this policy.

How long we keep it

• Guests and replies: erased automatically 90 days after the wedding's last event, or sooner if the owner erases the guest list, a couple removes a guest, or the owner deletes the wedding.
• Wedding details: until the owner deletes the wedding or their account.
• Your photo: until you remove or replace it, or the wedding is deleted. It's gone from our storage and from Cloudflare's servers about two days after that.
• Your account: until you delete it.
• Payment records: seven years, as New Zealand tax law requires. Once a wedding is deleted, its payment records keep only what was bought, the amount, the refund date and Paddle's reference.
• Request records: for the limited time Vercel's own policy sets. Link-guessing counters: 10 minutes.

Deleted information can stay in our database provider's backups for up to 30 days, until those backups are overwritten.

Deleting and downloading

• The owner can erase the guest list, or delete the wedding with everything in it, at any time from the wedding's People page. Deleting a wedding removes its invitations, guests and replies, and its links stop opening. Its photo follows within about two days.
• Couples can change or remove any guest from the Guests page, and the owner can download the guest list and every reply as a spreadsheet.
• To delete your account, choose Delete account at the foot of Your invitations, which lists what happens to each wedding before you confirm. It deletes the weddings you own and takes you off any wedding you co-host. A wedding you own that has co-hosts passes to the co-host who joined first instead. You can also email us, and we'll do it for you.

Reporting a photo

iwiusercontent.com holds only the photos couples add to their invitations. If you find one there that shouldn't be, such as a photo of you that you didn't agree to, email support@indianweddinginvites.com with its link and we'll take it down.

Your rights

You can ask for a copy of the personal information we have about you, ask us to correct it, or ask us to delete it. In the UK and the EU you can also object to how we use it, ask us to limit it, and ask for a copy you can take elsewhere. Email us and we'll reply within 20 working days. We may need to check that the request comes from you.

If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Privacy Commissioner in New Zealand, the ICO in the UK, the data protection authority where you live in the EU, or the OAIC in Australia.

Children

Accounts are for people 16 and older. Couples sometimes put children's names on a card or a guest list. We treat them the same way, and erase guest details on the same schedule.

Security

Each guest's link has a code that is hard to guess, and we keep co-host invite links only in scrambled form. Everything travels over encrypted connections, and only the people the owner invites can edit a wedding. If a breach is likely to cause someone serious harm, we'll tell the people affected and the Privacy Commissioner, as the law requires.

Changes to this policy

We'll post any change here with a new date, and email everyone with an account before a change that significantly affects how we use their information. Our terms of service cover the rest of how the service works.

Contact

Preet Software, Auckland, New Zealand
support@indianweddinginvites.com