Privacy policy

Who is responsible

Sufiyan Ahmed, House No.1827 Tall Mohalla, Mhow, MP, IN, 453441, runs Envitly and decides how your data is used. Write to support@envitly.com about anything on this page.

What we collect

• Your account: your email address, and your name if you sign in with Google. Passwords are stored only as secure hashes by our sign-in provider.
• Your invitation: what you type and upload, such as names, families, ceremonies, venues, photos and music.
• Your guests: the family names, phone numbers and email addresses you add, and each family's replies. These belong to you.
• Wishes: the name, relation and message a guest leaves on your wishes wall.
• Payments: the plan, amount, date and Razorpay's order and payment ids. We never see or store card or bank details; Razorpay handles them.
• Spam checks: when a guest leaves a wish, we store their IP address only as a keyed hash, which can't be turned back into the address, to limit repeated posts.

Who keeps it for us

• Supabase: our database and sign-in.
• Cloudflare: hosting the site, storing photos and music, and Turnstile spam checks on the wishes form.
• Razorpay: payments.
• Google: only if you choose to sign in with Google.

These providers process data for us under their own security and privacy terms. Supabase, Cloudflare and Razorpay may store data on servers outside India.

What we use it for

To run your invitation, show it to people who have its link, let families reply, take payment, answer your messages and keep the site safe. We don't use your data for advertising and we don't sell or rent it to anyone.

Cookies

We set only the cookies sign-in needs, to keep you signed in. No analytics or advertising cookies. Guests opening an invitation get no cookies from us.

Your guests' data

The guest list and replies are yours. You can export them as a spreadsheet at any time. If a guest asks us to remove their details, we will tell you and help you do it.

How long we keep it

We keep your account and invitations until you ask us to delete them. Your guests' names and replies are deleted within 90 days after an invitation goes offline, or sooner if you ask. Payment records are kept as long as tax and accounting law requires, even after deletion.

Your choices

• Ask for a copy of your data, a correction, or deletion of your account and invitations by writing to support@envitly.com. We reply within 7 days.
• You must be 18 or over to make an account.

Grievance officer

Sufiyan Ahmed, House No.1827 Tall Mohalla, Mhow, MP, IN, 453441. Email support@envitly.com. We acknowledge a complaint within 48 hours and resolve it within one month.

Changes

If we change this policy, we will update the date at the top. We will email you before a change that affects how we use data you have already given us.