1. Who we are and what this policy covers
Parvaya ("Parvaya", "we", "us", "our") designs, builds and hosts interactive digital invitations and celebration pages for weddings, engagements, birthdays, griha pravesh, naming ceremonies, festivals, corporate events and other occasions. We operate the website www.parvaya.com, the invitation links we publish (addresses beginning www.parvaya.com/invite/), the private editing links we send to customers, and a workspace used by event-management businesses who partner with us.
For the purposes of the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Information Technology Act, 2000 and the rules made under it, Parvaya is the Data Fiduciary for the personal data described in this policy, except where we say below that we process data on behalf of a host or a partner business.
This policy applies to you if you:
- visit our website or watch a template preview or live demo;
- send us an enquiry through the website or message us on WhatsApp;
- order an invitation from us (we call you the host or customer);
- open an invitation someone has shared with you (a guest);
- are named or pictured in an invitation a host has ordered;
- represent a business that enquires about, or uses, Parvaya for Partners (a partner).
It does not cover websites or apps run by others that our pages link to, such as WhatsApp, Google Maps, music platforms or a partner's own website. Those have their own privacy policies.
2. The information we collect
Information you give us
| When | What we collect |
|---|---|
| You enquire from a template, the pricing section or the website | Your mobile number and country code, your name if you choose to give it, the template or plan you were looking at, any Bespoke option you picked, and a reference code (like PV-3F9K) that links your enquiry to the WhatsApp chat that follows. |
| You chat with us on WhatsApp or email us | Your messages and anything you send us: event details, photographs, videos, voice notes, documents, screenshots and design references. |
| We make your invitation | The details that appear in it: names of the hosts, couple or person being celebrated and their families; event names, dates, times and venues; addresses and map links; your story, messages and quotes; photographs and videos; music choices; RSVP or contact numbers you ask us to display; dress codes and any other content you want included. |
| You use a private editing link | Everything you type or upload in the editor, and the optional note you leave when you press "I'm finished". We also record when the link was opened, last saved and submitted, so we know when your invitation is ready for us. |
| You pay us | The amount, date, payment method and transaction reference, and the payer name your bank or UPI app shows us. We do not ask for, receive or store card numbers, CVVs, UPI PINs, OTPs or net-banking passwords. |
| You enquire as a business (Parvaya for Partners) | Your name, company, type of business, city, mobile number, email address, approximate number of events a month and your message. |
| You or your team sign in to the partner workspace | Name, email address and role for each team member, your company name and logo, and the invitations and client details your team creates. Passwords are handled by our authentication provider and stored only as secure hashes. |
Information collected automatically
- Device and browser information such as browser type, operating system and screen size, and the page that referred you to us. We store the browser description and referring page with an enquiry so we can tell which page and device it came from.
- IP address. We use it briefly to prevent abuse (for example, to limit how often an enquiry or demo can be requested from one address). Our hosting provider also keeps short-lived server logs for security and troubleshooting.
- Usage information through Google Analytics: pages viewed, buttons pressed (such as "Continue on WhatsApp"), approximate location derived from your IP address (country and city level), and when an invitation is opened. We turn on Google's IP anonymisation, and we use this information in aggregate to understand what works; we do not use it to identify you.
- Invitation opens. We count how many times each invitation is opened so the host can see it is being viewed. We do not record which guest opened it.
- Cookies and local storage, described in Cookies and similar technologies.
Information about other people
Invitations naturally include details of people other than the person ordering them: a partner, parents, grandparents, children, other family members and sometimes guests. When you give us information about someone else, you confirm that you are entitled to share it with us for the purpose of making the invitation, and that the people concerned are aware that it will appear on a page that anyone with the link can open. If you are not sure a relative would be comfortable, please ask them first, or leave the detail out.
Information from guests
Guests do not need an account and we do not ask guests for any information to open an invitation. When a guest replies to an RSVP button, the reply usually opens WhatsApp and goes straight to the host's number; it does not pass through us. Where a plan includes collected RSVPs, wishes, game answers or guest photo uploads, we set these up and hold them on the host's behalf and only to hand them over to the host (see Our role for hosts and partners).
Sensitive details
Invitations can reveal things that some people treat as sensitive, such as religion or community (from the ceremony you are celebrating), or photographs of children at a birthday. We use these details only to make the invitation you asked for. We do not ask for health information, government ID numbers, caste certificates or financial account details, and please do not send them to us.
3. How and why we use your information
We use personal data only for the purposes below. Under the DPDP Act we rely on your consent, which you give when you send us an enquiry, message us, place an order or give us content for your invitation, and on the legitimate uses the Act allows, such as complying with law and responding to a request you have made.
| Purpose | What it involves |
|---|---|
| Answering your enquiry | Replying on WhatsApp, sending you designs, prices and samples, and matching your enquiry to the template or plan you were looking at. |
| Making and delivering your invitation | Designing, building, proofreading, publishing and hosting your invitation, making corrections and sending you your link. |
| Running features you paid for | Setting up RSVP collection, photo uploads, wishes, reminders and update messages to guests who opted in, and handing the results to you. |
| Payments and records | Confirming payment, issuing invoices and keeping the accounting and tax records Indian law requires. |
| Support and service messages | Telling you your invitation is ready, that your link is about to expire, or that something needs your attention. |
| Keeping the service safe | Preventing spam, fraud and abuse, protecting our designs from bulk copying, securing accounts and editing links, and investigating problems. |
| Improving Parvaya | Understanding, in aggregate, which pages, templates and features people use so we can make better ones. |
| Legal obligations | Responding to lawful requests from courts and authorities and enforcing our Terms of Service. |
What we do not do
- We do not sell or rent personal data to anyone.
- We do not use a real customer's invitation, names, photographs or story in our portfolio, website, social media or advertising without that customer's written permission. The previews and demos on our website use invented sample data.
- We do not add you to WhatsApp broadcast lists or send promotional messages unless you have agreed to hear from us. You can ask us to stop at any time by replying "STOP" or telling us in the chat.
- We do not message your guests unless your plan includes guest messages and the guest has opted in on your RSVP form.
- We do not make decisions about you by automated means that have legal or similarly significant effects.
4. Your invitation is shared by link
A published invitation is designed to be shared. Anyone who has the link can open it and see everything on it, and can forward the link to others. Please keep that in mind when you decide what to include.
- Invitation pages tell search engines not to index them, and are left out of our sitemap, so they should not appear in Google or other search results.
- Photographs and videos on an invitation are delivered from our storage provider at long, unguessable web addresses. Anyone who has one of those addresses, for example because a guest copied it, can open that file directly.
- Guests can take screenshots or screen recordings of an invitation, and we cannot control what they do with them.
- If you would rather not publish something such as a home address, a phone number or a photograph of a child, tell us and we will leave it out or replace it.
- You can ask us to take an invitation offline at any time. We will unpublish it promptly, usually within one working day.
5. Who we share information with
We share personal data only with the service providers we need to run Parvaya, only as much as they need, and under terms that require them to protect it and use it only on our instructions.
| Who | Why |
|---|---|
| Supabase | Our database, sign-in and file storage provider. It stores enquiries, invitation content, uploaded photographs and partner accounts. |
| Our hosting and content delivery provider | Serves the website and invitation pages and keeps short-lived security logs. |
| Google Analytics measures how the website is used. Google Fonts delivers some of the typefaces on our pages, which means your browser requests them from Google. Google Maps opens when you or a guest taps a venue's map link. Where a host's plan uses a Google Form, Sheet or Drive folder for RSVPs or photo uploads, that data is held in Google's services. | |
| WhatsApp (Meta) | We talk to customers and, where a plan includes it, to opted-in guests on WhatsApp. Messages are subject to WhatsApp's own terms and privacy policy. |
| Banks and UPI apps | To receive payments and make refunds. |
| Professional advisers | Accountants, lawyers and auditors, under a duty of confidentiality, where needed for tax, legal or accounting purposes. |
We may also disclose personal data:
- to the host, if you are a guest and have submitted an RSVP, wish, answer or photo through their invitation;
- to a partner business, if that business ordered the invitation you are named in or is managing your event;
- where required by law, a court order or a lawful request from a government or law-enforcement authority in India;
- to protect the rights, safety or property of Parvaya, our customers, guests or the public, including to prevent fraud;
- to a buyer or successor if Parvaya's business is sold, merged or reorganised, who will be bound by this policy for the data they receive.
6. Our role for hosts and partners
When a host asks us to collect RSVPs, wishes, game answers or photographs from their guests, the host decides what is collected and what it is used for, and we process it on the host's behalf. The same applies when a partner business uses Parvaya to make invitations for its own clients: the partner is responsible to its clients for that data, and we act on the partner's instructions.
If you are a guest or a partner's client and want to access, correct or delete information collected through an invitation, please contact the host or the partner first. If you cannot reach them, contact us and we will help.
7. Where your information is stored
Our service providers run data centres in India and in other countries. Your information may therefore be stored or processed outside India. Wherever it is processed, we require our providers to protect it to the standard this policy describes, and we will comply with any restriction on transfers that the Government of India notifies under the DPDP Act.
8. How long we keep information
We keep personal data only for as long as we need it for the purposes above, and then delete or anonymise it.
| Information | How long we keep it |
|---|---|
| Enquiries that do not become an order | Up to 24 months after our last conversation, so we can pick up where we left off if you come back, unless you ask us to delete it sooner. |
| Invitation content and uploaded files | While your link is live (12 months on Classic, 18 months on Signature, 24 months on Grand, plus any extension you buy), and then for up to 90 days so you can renew or ask for a copy. After that we delete the content and files or anonymise them. |
| Private editing links | Sign-in sessions last at most 7 days. Links stop working when they expire or when we close them. |
| Payment and invoice records | For as long as tax and accounting laws require, which is generally up to 8 years. |
| Partner accounts | For as long as the partnership is active, and then up to 12 months unless the partner agreement says otherwise. |
| Analytics data | Held by Google Analytics for no more than 14 months. |
| WhatsApp chats | Chat history is kept in WhatsApp on our business phone. We delete a chat on request unless we need it to resolve a dispute or meet a legal obligation. |
We may keep information longer where the law requires it, or where we reasonably need it to establish, exercise or defend a legal claim.
9. How we protect your information
We take reasonable security practices and procedures, as required by the IT Act and the DPDP Act, to protect personal data against unauthorised access, use, change, disclosure or loss. They include:
- encryption in transit (HTTPS) on every page and link;
- strict access controls, so that each partner business can see only its own data and only authorised Parvaya staff can see customer content;
- private editing links protected by a separate 6-digit code, which we store only in hashed form, with automatic lock-outs after repeated wrong attempts;
- rate limits on enquiries, sign-in and demos to stop automated abuse;
- keeping editing links and demo links out of search engines, shared caches and referrer headers.
No website or storage system can be made completely secure. If a personal data breach happens, we will act quickly to contain it and will inform the Data Protection Board of India and the people affected, as the DPDP Act requires.
We will never ask you for an OTP, UPI PIN, card number or password on WhatsApp, by phone or by email. If someone claiming to be Parvaya asks for one, it is not us. Please report it to us.
10. Cookies and similar technologies
Cookies are small files a website stores in your browser. Local storage is a similar feature. We use very few of them, and none for advertising.
| Name or type | Purpose | How long |
|---|---|---|
| Sign-in cookies (Supabase, names begin sb-) | Essential. Keep partners and Parvaya staff signed in to the workspace. Not set for ordinary visitors or guests. | Until you sign out, or the session expires |
| Editing session cookie | Essential. Keeps you signed in to your private editing link after you enter your code. It cannot be read by scripts on the page. | Up to 7 days, and never beyond the link's expiry |
| Google Analytics (_ga, _ga_*) | Analytics. Distinguish visits so we can count visitors and understand how the website and invitations are used. | Up to 2 years |
| Offer bar preference (local storage) | Remembers that you closed the launch-offer strip so we do not show it again. | Until you clear your browser data |
You can block or delete cookies in your browser settings, and you can opt out of Google Analytics on every website with Google's opt-out browser add-on. Blocking essential cookies will stop sign-in and private editing links from working. Blocking analytics has no effect on how the website or your invitation works.
11. Your rights
Under the DPDP Act and other applicable law, you have the right to:
- Access: ask for a summary of the personal data we hold about you, what we do with it and who we have shared it with.
- Correction and updating: ask us to correct inaccurate or misleading data, complete incomplete data and update data that has changed.
- Erasure: ask us to delete your data when it is no longer needed for the purpose it was collected for, unless the law requires us to keep it.
- Withdraw consent: withdraw your consent at any time, as easily as you gave it. This does not affect what we did before you withdrew. If you withdraw consent for data we need to host your invitation, we will need to take the invitation offline.
- Grievance redressal: complain to our Grievance Officer and receive a response.
- Nominate: nominate another person to exercise your rights if you die or become unable to do so.
To use any of these rights, message us on WhatsApp at +91 70218 74064 or email hello@parvaya.com. If you have a reference code (PV-…), include it. We may ask you to confirm your identity, usually by replying from the number or email address we already have, before we act. We aim to respond within 30 days.
If you are not satisfied with our response, you can complain to the Data Protection Board of India once the Board's procedure is available to you.
12. Children
Our services are intended for adults. You must be at least 18 years old to enquire, order or create a partner account. We do not knowingly collect personal data directly from children.
Invitations for birthdays, naming ceremonies and similar occasions often include a child's name and photographs. These are given to us by a parent or lawful guardian, who consents on the child's behalf. We use them only to make the invitation, never for tracking, profiling or advertising, and a parent or guardian can ask us to remove them at any time.
13. Changes to this policy
We may update this policy as our services, or the law, change. The date at the top shows when it last changed. If a change materially affects how we use personal data you have already given us, we will tell you on WhatsApp or by email before it takes effect and, where the law requires it, ask for your consent again.
14. Contact and Grievance Officer
In line with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Consumer Protection (E-Commerce) Rules, 2020 and the DPDP Act, our Grievance Officer is:
- Soham Shirsat, Founder and Grievance Officer
- Email: hello@parvaya.com
- WhatsApp: +91 70218 74064
We will acknowledge your complaint within 48 hours and resolve it within one month of receiving it.