Privacy Policy

Mangalarambh (mangalarambh.com) is operated by Chetan Mukund Jarande, who decides how your personal data is used (the “Data Fiduciary” under India's Digital Personal Data Protection Act, 2023). This policy also meets the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Questions go to [email protected].

The biodata you type, including names, family details and photos, is kept in your own browser. We do not store it on our servers. A free download is made entirely in your browser. For a paid download the document is sent to our PDF conversion provider, converted, returned to you and not kept.

For a paid download we keep only the record of the purchase:

• the order id, product, amount, status, times, download count and the payment provider's reference;
• a scrambled (hashed) form of a random id from your browser and of the re-download code on your receipt, never the values themselves, so a paid download can be found again.

An invitation has to be online for your guests to open it, so publishing one stores:

• Your account: you sign in with Google, which gives us your email address, name, profile picture link and Google account id. We use these only to sign you in and show who is signed in. We do not access your contacts, files or any other Google data. Our sign-in system also records when you signed in, from which IP address and browser, to keep your account secure.
• The invitation: the names, dates, venue, messages and photos you add. Photos are re-saved before upload, which removes hidden details such as GPS location.
• Your consent: when you agreed to publish it and to which version of this policy, kept with the invitation and deleted with it.
• The purchase: the order record described in section 2, linked to your account.

A published invitation can be opened by anyone who has its link, who can also save or forward it, and messaging apps may show a preview with its title and first photo. It is not listed on our site and we ask search engines not to index it. Taking it down stops us showing it, but cannot recall copies others have made. Drafts you save to your account are not shown to anyone else.

Other people in your invitation. When you add someone else's name, photo or details, you confirm that they have agreed, and for a child, that you are their parent or guardian. Please do not add ID numbers, financial or health details.

Some designs can use your microphone, only if you allow it (for example, to blow out candles). The sound is analysed on your device and is never recorded or sent to us.

When you RSVP, we store your name, whether you are coming, how many are coming, and anything you choose to add, such as dietary needs, a song request or a message. Only the host can see your reply, and they can download the replies to their invitation. It is deleted with the invitation.

To count views, your browser keeps a small cookie for 24 hours so that reloading the page does not count twice. To ask about or remove your reply, contact the host or write to us.

• to provide what you asked for: your PDF, or your invitation and its replies;
• to take and confirm payment, honour refunds and keep the records the law requires;
• to keep the service and your account secure, and to stop fraud and abuse.

We do not sell your data, show advertising, build profiles or send marketing email, and there are no tracking or advertising cookies on this site. We may use counts that identify no one, such as how many invitations were viewed, to run and improve the service.

• Service providers who run parts of the service for us (hosting, database, file storage and delivery, PDF conversion and scheduled maintenance), only to provide it and under our instructions;
• Razorpay or Cashfree Payments, whichever you pay through. What you enter on their checkout is handled under their own privacy policies;
• Authorities, when the law, a court order or a lawful government request requires it, or to prevent fraud or protect someone's safety;
• A successor, if Mangalarambh is transferred. They must honour this policy, and we will tell you first.

Some providers' servers are outside India. Some designs load sample music or pictures from public media libraries, which receive the usual technical details any website gets, such as your IP address. You can ask us which providers handled your data.

Payments are processed by RBI-authorised payment aggregators, Razorpay and Cashfree Payments, whose systems are PCI-DSS compliant. Your card, UPI and bank details are entered on their checkout, and we never store them.

We follow reasonable security practices suited to the data we hold: encrypted connections, access limited to what each part of the service needs, sign-in required to change an invitation, and guests' replies visible only to the host. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. If a breach affects your data, we will tell you and the authorities as the law requires.

• Published invitation (content, photos and replies): hosted for one year from payment, then taken offline and deleted about a week later. A refunded invitation is taken offline at once and deleted about a week later.
• Draft saved to your account: deleted about 30 days after your last change. Photos uploaded but never used are deleted within a few days.
• An invitation you delete yourself: removed from the service straight away. Copies held in browser or app caches may take a short while to expire, and a draft kept in your own browser stays there until you clear it.
• Your account: until you ask us to delete it. Deleting it takes your invitations offline and deletes them, their replies and photos within a few days.
• Purchase records: as long as tax and accounting law requires.
• Security and error logs: only as long as needed to keep the service secure and fix faults, or longer where the law requires. They never contain your biodata.

Deleted data may remain in routine backups for a limited time until they are overwritten.

We set cookies only to keep you signed in and to count invitation views once a day. Google, Razorpay and Cashfree may set their own cookies on their sign-in and checkout pages. Your browser's storage keeps your work in progress, a random device id and your purchase record with its re-download code. That stays on your device; clearing your browser data removes it.

You must be 18 or older to sign in. An invitation about a child, for example a birthday, must be published by their parent or guardian, who gives consent on the child's behalf. We do not track or advertise to anyone, children included.

Under the Digital Personal Data Protection Act, 2023 you can:

• ask for a summary of the personal data we hold about you, how we use it and who we shared it with;
• ask us to correct, complete or update it;
• withdraw your consent and have your data erased. You can delete an invitation yourself at any time from the account menu in the studio (“Delete this invitation”); for anything else, including your account, write to us;
• nominate someone to exercise these rights for you if you die or become unable to;
• raise a grievance with us, and then, if you are not satisfied, complain to the Data Protection Board of India.

Write from the email you sign in with, or quote your order id or re-download code, so we can confirm the request is yours. Withdrawing consent does not affect what was done before, and we cannot keep hosting an invitation without it. We may keep data the law requires us to keep, or decline a request that would affect someone else's rights.

Chetan Mukund Jarande, Grievance Officer, [email protected]. We acknowledge each grievance within 48 hours with a reference number and resolve it within 30 days. You can also use our Contact & Support page. This policy is available in English; write to us if you would like it in another language listed in the Eighth Schedule to the Constitution of India.

The date at the top shows when this policy last changed. If a change affects what publishing an invitation means for your data, we ask for your consent again the next time you publish. Our Terms of Service cover the rest of your use of the site, including governing law.