Your wedding, your guests, your data.

Playful Invite is run by The PxH (“we”, “us”), based in India. Under India's Digital Personal Data Protection Act, 2023, The PxH is the “data fiduciary” for the information described here.

For anything about your data, write to privacy@playfulinvite.com. This address handles all privacy requests and complaints.

If you create an invitation (hosts):

• Your email address and password. Passwords are stored hashed; we can never see them.
• What you put in the invitation: the couple's names, family names, event names, dates, times and venues, Google Maps links, your story, your message, the photos you upload, and your template, game and music choices.
• If you upload your own music: the audio file, its file name, and a record of the rights confirmation you gave when uploading it (the wording, the date and time, and your account).
• Payment records: the amount, any coupon used, and the order and payment IDs from Razorpay. Card, UPI and bank details go straight to Razorpay. We never see or store them.

Before you sign up, your draft is saved only in your own browser (local storage). It reaches our servers only when you choose to save it to an account.

If you open an invitation (guests): you can read it without giving us anything. If you RSVP, we collect your name, your response, how many people are coming, your food preference (optional) and any message you write. If the host has turned on the game leaderboard and you choose to join it, we collect the name you enter and your game time.

Everyone: we measure page views with Vercel Web Analytics. It uses no cookies and does not identify you. It records the page, the referring site, your country and your device and browser type. Our hosting providers also keep short-lived technical logs, which include IP addresses, to run and secure the service.

• To run your account, build your invitation, and show it to the guests you share it with.
• To pass RSVPs and leaderboard entries to the host of that invitation.
• To take payment, prevent fraud, and keep the records tax law requires.
• To send emails you need: sign-up confirmation, password resets, and your “your invitation is live” link.
• To send occasional offers, only if you opt in. Every promotional email has an unsubscribe link, and saying no never affects your invitation.
• To understand which pages people use, and to keep the site secure and working.

We rely on your consent when you sign up, RSVP or join a leaderboard, and on legitimate uses the law allows (such as keeping payment records and securing the service). We do not sell personal data, and we do not use it for advertising.

• Anyone with the invitation link can see the invitation itself: names, family names, events, venues, story and photos, and can play any music you uploaded. Only share details you are happy for your guests to see, and only upload photos of people who are happy to be shown.
• The host sees every RSVP and leaderboard entry for their own invitation. Other guests never see your RSVP.
• Other guests see the top 10 leaderboard names and times, but only when the host has turned the leaderboard on and you chose to join it.
• No one else. Invitations are not listed or searchable on our site, and we ask search engines not to index them.

We use a small number of providers to run Playful Invite. Each gets only what it needs:

• Supabase: database, sign-in, and photo and music storage.
• Vercel: website hosting and cookieless analytics.
• Razorpay: payments. Razorpay handles your payment details under its own privacy policy.
• Resend: sending our emails.
• Google Maps: the venue map inside an invitation loads from Google. When a guest views it, Google receives some data from the guest's browser, which it handles under its own privacy policy.

Some of these providers store data on servers outside India. We only use providers that protect it with encryption and access controls, and we will follow any transfer restrictions the Indian government sets. We will also share data if the law requires it, for example in response to a valid order from a court or government authority.

• Your account and invitations: until you delete your account. Deleting a draft removes it straight away.
• Published invitations: the link stops working when the invitation expires. The invitation's content, RSVPs and leaderboard entries stay in your account, so you can still look them up, until you delete your account.
• Invitation photos and uploaded music: deleted 30 days after the invitation expires, or when you delete the draft or account they belong to. Music you remove from an invitation is deleted when you save the change.
• Music rights confirmations: kept after the music itself is deleted, for as long as we may need them to answer a copyright complaint.
• Payment records: for as long as Indian tax and accounting law requires, even after you delete your account.
• Backups and logs: deleted data can remain in encrypted backups and technical logs for a short time before they are overwritten.

We use only the cookies needed to keep you signed in. There are no advertising or tracking cookies, and our analytics use no cookies at all, so there is nothing to opt out of. Your browser's local storage holds your unsaved draft on your own device; clearing your browser data removes it.

You can ask us to:

• tell you what personal data we hold about you, and who we have shared it with;
• correct or update it;
• delete it, including your whole account;
• withdraw consent you gave earlier, such as for promotional emails;
• nominate someone to act on your behalf if you die or become unable to.

Email privacy@playfulinvite.com from the address on your account and tell us what you would like. We will reply within 30 days. Guests can ask us to remove their RSVP or leaderboard entry; please include the invitation link and the name you used. You can also ask the host directly.

You must be 18 or older to create an account or buy an invitation. Guests of any age can open an invitation. RSVPs are usually sent by an adult for their household. If you believe a child has given us personal data without a parent's consent, write to privacy@playfulinvite.com and we will delete it.

Data is encrypted in transit, and our database only lets each host read their own invitations, RSVPs and payments. No system is perfect, though. If a breach ever affects your data, we will tell you and the Data Protection Board of India as the law requires.

If something doesn't feel right, write to privacy@playfulinvite.com first and we will try to fix it within 30 days. You can also contact our Grievance Officer, Payaswani Rao, at payaswani@playfulinvite.com. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

When we change this policy, we will update the date at the top. If a change affects how we use data you have already given us, we will email account holders before it takes effect.