Privacy policy

The short version

• We keep what your invite needs and the email you sign in with. Nothing more.
• No advertising, no selling data, and no analytics or tracking scripts.
• An invite is a web page that anyone with its link can open. Invites are kept out of search engines.
• You can take an invite offline or delete it at any time, and invites delete themselves 6 months after the wedding unless you choose otherwise.
• For any question or request, write to team@celebrationpost.com.

What we keep

If you make an invite

• Your account: your email address. If you continue with Google, Google shares your name and email with us. We never see your Google password.
• What you put on the invite: the couple's names, family names, dates, events and times, venue names and addresses, a hashtag, a line of your own, the RSVP contact you choose (a phone or WhatsApp number, or a link to your own form), and one photo if you add one.
• Other people's details: an invite often names family members or gives someone's number. Please add them only with their agreement.
• Before you publish, your draft stays in your browser tab and is not sent to us. The one exception is a photo you choose, which is uploaded straight away so the preview can show it.

If you open an invite

• We ask guests for nothing, and opening an invite needs no account.
• RSVPs go straight to the couple, by the phone, WhatsApp or form they chose. They never pass through us.
• Buttons on an invite such as directions, add to calendar or WhatsApp open those services, which then handle what you do there under their own terms.

From everyone, automatically

• The companies that host the site keep routine server logs (IP address, browser, time and page requested) to deliver it and protect it from abuse.
• We do not use analytics, advertising or tracking cookies, and no third-party cookies are set.

Cookies and browser storage

• Sign-in cookies, set only when you sign in, keep you signed in. Scripts on the page cannot read them.
• cp_session remembers the letter shown on the account button. It holds nothing secret.
• cp_next remembers, for 15 minutes after you ask for a sign-in code, which page to bring you back to.
• In your browser only, the tab keeps your unfinished draft and the names you typed on the homepage. Both clear when you close the tab.

Why we use it

To make, publish, show and let you edit your invite; to sign you in; to email sign-in codes and the reminder before an invite deletes itself; to keep the site secure and stop misuse; and to meet our legal obligations. We use your details with your consent, given when you sign in and publish. You can withdraw it at any time by deleting your invites or your account.

Who can see it

• Anyone with your invite's link can open it and see what you put on it. A private invite needs its full private link. Guests can take screenshots, download the share image or forward the link, and we cannot control those copies.
• Search engines: every invite is marked so that search engines do not list it, and its photo too.
• Companies that run parts of the site for us, acting only on our instructions: Vercel (hosting), Supabase (database and sign-in), Cloudflare (photo storage and delivery), Resend (emails) and Google (only if you choose to continue with Google). Some of them may store or process data outside India.
• No one else. We do not sell or rent personal data or share it for advertising. We would disclose information only where the law requires it or to protect someone's safety.

How long we keep it

• Invites stay until you delete them, or until 6 months after the wedding, whichever comes first. From Your invites you can keep one longer or keep it until you delete it.
• Taking an invite offline hides it from everyone but keeps it, so you can bring it back.
• Deleting an invite removes it and its photo from our systems straight away. Copies can remain in our providers' backups for up to 7 days before they are gone too.
• Photos no published invite uses, from drafts never published or photos you replaced, are deleted after 14 days.
• After an invite is deleted we may keep a one-way fingerprint of its address, never the names, for 30 days, so that an old link cannot open someone else's invite.
• Your account stays until you delete it. Deleting your account deletes every invite you made and their photos.
• Copies outside our control are not covered: link previews already shown in messaging apps, and images guests saved.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• See what we hold: everything about your invites is in Your invites, and we will send you a summary on request.
• Correct it: edit any invite at any time.
• Erase it: delete an invite or your whole account yourself, or ask us to.
• Withdraw consent: deleting your invites or account stops all use of your details.
• Nominate someone to use these rights for you if you die or cannot act yourself.
• Complain: write to us first. If we do not resolve it, you can complain to the Data Protection Board of India.

If an invite uses your name, number or photo without your agreement, write to team@celebrationpost.com with its link. We will take it offline while we look into it.

Children

Celebration Post is for people aged 18 and over. If you believe a child has given us personal details, write to us and we will delete them.

Keeping it safe

The site is served only over an encrypted connection. Sign-in cookies cannot be read by scripts on the page. The database is closed to browsers: only our server, holding keys that never leave it, reads and writes it. Private invite links cannot be guessed. No system is perfect; if a breach affects your details, we will tell you and the Data Protection Board as the law requires.

Changes to this policy

When we change it we will update this page and its date. If a change matters to how your details are used, we will say so on the site or email you.

Contact and grievance officer

HDR VENTURES, Bhopal, Madhya Pradesh, India. For privacy questions, requests to see, correct or erase your details, and complaints, write to the Grievance Officer at team@celebrationpost.com. We aim to reply within 7 days.

See also our terms of service.