Privacy policy

• Your account. Your name and email address. If you use a password, we store only a one-way hash of it, never the password itself. If you sign in with Google, we get your Google account ID and profile photo. We also keep your light or dark theme choice.
• Signing in. For each device you sign in on, we keep a record of the browser and its IP address, to keep you signed in and to protect your account. We count wrong passwords to stop guessing.
• Your invitations. Everything you put in them: names, families, dates, venues, wording, and the photos and music you upload.
• Payments. Your mobile number, which our payment provider needs, and what you bought: the design, the link, the amount, how you paid (for example UPI) and the bank’s reference. Card numbers, UPI PINs and bank passwords go only to Cashfree, our payment provider. We never see them.

Guests don’t need an account to open an invitation. We don’t set cookies for them or track them. Like any website, our hosting providers keep standard server logs, such as IP addresses and the pages requested, to keep the service secure and running.

• To run the service: your account, the editor, publishing, and your invitation’s link.
• To take payments, and to send receipts and the emails that confirm your address or reset a password.
• To keep accounts and the service secure.
• To answer you when you write to us.
• To meet our legal and accounting obligations.

• Anyone with your invitation’s link. A published invitation shows what you put in it to whoever opens the link. We ask search engines not to list invitations, but the link isn’t secret: share it only with people you’re inviting.
• Companies that run parts of the service for us. They may use your data only to provide their service to us:
  • MongoDB Atlas, our database, in Singapore
  • Render, which runs our servers, in Singapore
  • Vercel, which serves the website
  • Cloudinary, which stores and resizes photos and music
  • Cashfree Payments, which processes payments
  • Resend, which sends our emails
  • Google, only if you choose to sign in with Google
• Authorities, when the law requires it, or to protect someone from harm.

Your data is mostly stored in Singapore. Some of these companies also process it in the United States and other countries.

• Your account and invitations: while your account exists. A published invitation’s link keeps working after the event, unless you ask us to take it down.
• Sign-in records: 30 days after the device was last used. Links in our emails stop working after 24 hours (confirming your email) or 1 hour (resetting a password).
• Orders and payment records: as long as Indian law requires us to keep accounting records, even after an account is deleted.
• Messages from our payment provider about payments: 180 days.

We use one cookie, wi_session, and only after you sign in: it keeps you signed in. Your theme choice is saved in your browser. Google’s sign-in button and Cashfree’s payment page are run by those companies, follow their own privacy policies, and may set their own cookies.

Woo Invites is for adults. Invitations for a baby shower or a naming ceremony may include a child’s name or photo: only the child’s parent or guardian should add them.

Under India’s Digital Personal Data Protection Act, 2023, you can ask to see the personal data we hold about you, to correct it, or to delete it, and you can name someone to do this for you if you can’t. You can change most details yourself, on your account page and in the editor. To delete your account, or for anything else, write to hello@wooinvites.in.

If you’re unhappy with how we handle your data, tell us first at the same address. You can also complain to the Data Protection Board of India.

Every connection to Woo Invites is encrypted, passwords are stored only as hashes, and payments are handled by Cashfree. No service is perfectly secure, but we work to protect your data and will tell you if a breach affects it.

When this policy changes, we update this page and its date. If a change matters to how we use your data, we’ll email you first.

Questions, requests and complaints about privacy: hello@wooinvites.in. See Contact us for other ways to reach us.