Privacy policy

This policy explains what Elvyte, operated by [set VITE_LEGAL_NAME], collects, why, and the choices you have. We follow India’s Digital Personal Data Protection Act, 2023.

What we collect

• Your account. Your name and email address. If you sign in with Google, the name, email address and profile picture Google shares with us. If you use a password, we keep only a one-way hash of it, never the password itself.
• Your invitations. Everything you enter: names, dates, venues, wording, photos, your guest list and your messages to guests.
• Guest replies. When a guest answers the RSVP: their answer, how many people are coming and any note they write.
• Link use. When a guest link is opened we record a random device identifier stored in that browser, so each link opens only on its permitted number of devices and you can see who has opened.
• Payments. The pass you bought, the amount, and the order and payment references from Razorpay. Card, UPI and bank details are handled by Razorpay and never reach us.
• Technical data. IP address, browser type and request logs, used for security, to prevent abuse such as mass sign-ups, and to fix problems.

How we use it

• To run your account and show your invitations to the guests you send them to.
• To process payments and keep the records the law requires.
• To send service emails, such as the code that confirms your email address.
• To keep the service secure and working.

We do not sell your data, show advertising, or use third-party analytics or tracking.

Who we share it with

Only the providers that help us run the service, and only what each needs:

• Razorpay, to take payments.
• Google, if you choose Google sign-in. Invitations may also load fonts from Google Fonts, which receives the viewer’s IP address.
• Brevo, to deliver service emails.
• Our hosting provider, which stores the data on our behalf.

We may also disclose data where the law requires it.

Your guests

Hosts add their guests’ names. Invitation pages are kept out of search engines and each link contains a long random code, so an invitation is seen only by the people the host sends it to. A guest who wants their details removed can ask the host, or contact us.

Cookies and browser storage

We use cookies only to keep you signed in and to protect forms from forgery. Your browser also stores small preferences, such as the theme, and the device identifier described above. There are no advertising or tracking cookies.

How long we keep it

We keep your account and invitations while your account is open. When you ask us to delete your account, we delete it and its invitations within 30 days, except payment records, which we keep for as long as tax and accounting law requires.

Your rights

You can ask to see, correct or delete your personal data, withdraw consent, and nominate someone to exercise these rights on your behalf. Write to [set VITE_SUPPORT_EMAIL] from your account’s email address. You may also complain to the Data Protection Board of India.

Security

Connections are encrypted, passwords are stored as one-way hashes, repeated wrong passwords lock an account for a while, and access to data is limited to running the service.

Children

Accounts are for people aged 18 and over. Children may appear on invitations their parents or guardians create.

Grievance officer and contact

[set VITE_LEGAL_NAME], [set VITE_SUPPORT_EMAIL], [set VITE_BUSINESS_ADDRESS]. We acknowledge complaints within 48 hours and resolve them within 30 days.