Privacy Policy

Account data

• Name and email address (from Google OAuth or email registration)
• Profile photo URL (from Google, if available)
• Account creation timestamp

Invitation & greeting data

• Content you enter: names, event details, venue information, personal messages and letters
• Photos you upload for photo-enabled templates (Premium & Royal invitations, and Greetings) — see Section 3 for how these are protected and when they are deleted
• Template selection and customisation choices
• For Greetings: the purchase date (to apply the 30-day send window and send reminders), when you previewed it and generated its link, and how many of your free edits you have used

Greeting replies (only for greetings that ask a question)

• The answer the recipient chooses (for example Yes, No, Forgiven or Not yet)
• When they answered, the general type of device and browser used (for example "iPhone · Safari"), and simple play details such as how many times they tapped "Not yet"
• We do not ask the recipient to sign in, and we do not collect their name, email or phone number. The name shown on the card is the one the sender typed.

Guest data (only when you choose to add guests)

• Guest names (first name and optional spouse name)
• WhatsApp / mobile number (only if you explicitly enable phone collection and give consent)

Payment data

• Transaction ID and order ID from Razorpay (we do not store card numbers or bank details)
• Template and pricing tier purchased (Standard, Premium, Royal, or Greeting)

Usage data

• Whether a guest opened their invitation link (open status, timestamp)
• When you open a preview of your own card (to unlock a greeting's link)
• Basic server logs (IP address, user-agent) retained for up to 30 days

• To provide the service — render personalised invitation and greeting pages, generate unique links, process template purchases
• To communicate with you — transactional emails about your account or purchases, reminders to send a greeting before its 30-day window ends, and an email when a greeting's recipient answers (no marketing without explicit consent)
• To tell a greeting's sender how it was answered — the recipient's reply described in Section 1 is shown only to the sender, in their email and dashboard. The recipient is told on screen that their answer is on its way to the sender.
• To improve the service — aggregated, anonymised analytics to understand usage patterns
• To comply with legal obligations — as required by Indian law

We do not sell, rent, or trade your personal data to third parties.

Newsletter (optional). We send emails about new templates and features only if you tick the optional, unticked-by-default newsletter box when you sign up, or switch it on later in your account settings. We record when and how you gave this consent. You can switch it off at any time in your account settings, and it takes effect immediately. Account, purchase, greeting-reminder and answer emails are part of the service and are sent regardless of this choice.

Premium and Royal tier invitations and Greetings let you upload personal photographs — couple portraits, family pictures, or event photos — for your invitation's photo gallery, cinematic opening or greeting. Because these are often personal and sentimental images, we treat them with extra care:

• Photos are stored on encrypted, access-controlled Google Cloud Storage (via Firebase) — the same secure infrastructure used for the rest of your invitation data. See Section 5 for our full list of infrastructure providers.
• Photos are displayed only within your invitation page. We never list them in a public gallery, search index, marketing material, or share them with any third party, and we never use them to train AI or machine-learning models.
• Guests cannot download your photos through normal means. Every invitation page disables right-click "save image", text and image selection, and common browser shortcuts (view source, save page, print, select all, developer tools) for anyone viewing it as a guest.
• These are deterrents against casual copying, not an absolute guarantee — a determined guest could still capture a screenshot. No online platform can prevent this entirely, and we are upfront about that limitation (see Section 9, Security).
• You must own the rights to any photo you upload, or have the permission of every person shown in it, before uploading — the same responsibility described for guest data in Section 4.
• Photos are kept only while your link is live. They are permanently deleted from our servers 30 days after your link closes: for an invitation, 30 days after its last event date; for a Greeting, 30 days after you create its link (or when its 30-day send window ends, if it is never sent). They are deleted immediately if you replace or remove them, archive the invitation, or delete your account. Your invitation text and any replies stay in your dashboard for your reference.

• Phone numbers are collected only when you (the host) explicitly enable the "Collect phone numbers" toggle and provide informed consent.
• Numbers are used solely to construct a wa.me sharing link that you send manually from your own WhatsApp. We do not send WhatsApp messages on your behalf.
• You are responsible for obtaining consent from your guests before entering their numbers into EcoVite.
• Guest phone numbers are deleted when you archive the invitation or delete your account.

All data is stored on Google Cloud infrastructure (Firebase) in data centres that comply with ISO 27001 and SOC 2 standards.

• Active invitations and Greetings — text content retained while your account is active; uploaded photos permanently deleted 30 days after the link closes (see Section 3)
• Greeting replies — the answer your recipient sends (with its time and device type, e.g. "iPhone · Safari") is kept in your dashboard until you clear it or delete your account
• Archived invitations — uploaded photos deleted immediately on archive; guest names and phone numbers deleted immediately
• Unsent greetings — a greeting whose link is not generated within 30 days of purchase expires; its uploaded photos are deleted at that point
• Deleted accounts — upon account deletion, your uploaded photos are deleted immediately, and your name, profile photo, invitation and greeting content, greeting replies, and all guest data are permanently deleted within 30 days. Your email address is retained in payment records and consent records as required by Indian financial law and as evidence of your agreement to our Terms and Privacy Policy. You will not receive any marketing or transactional emails after deletion. This retained data is not used for any purpose other than legal compliance and dispute resolution.
• Server logs — retained for up to 30 days
• Payment records — retained for 7 years as required by Indian financial regulations (GST Act, IT Act 2000)
• Consent records — your record of accepting these Terms and Privacy Policy, and of each newsletter opt-in or opt-out, is retained permanently as proof of informed consent

Under applicable Indian data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated personal data. Upon deletion, all invitation content, guest data, and your profile are permanently removed. Your email address is retained only in payment and consent records as described in Section 6 above; this retention is required by law and cannot be waived.
• Grievance redressal — raise a complaint with our Grievance Officer

To exercise any of these rights, email us at support@ecovite.in. We will respond within 30 days.

EcoVite is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

We implement industry-standard security measures including HTTPS encryption, Firebase security rules, and server-side token verification for all API calls, alongside the guest-side anti-copy measures described in Section 3 for uploaded photos. However, no method of transmission over the internet is 100% secure, and no anti-copy measure can stop every form of copying (such as a screenshot); we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice at least 7 days before they take effect. The effective date at the top of this page indicates when the policy was last revised.

In accordance with the Information Technology Act 2000 and rules made thereunder, the name and contact details of our Grievance Officer are: