Privacy Policy

1. Introduction

Welcome to Invitation in Marathi ("we," "our," or "us"), accessible at invitationinmarathi.in. We are committed to protecting your privacy and personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services to create digital invitation cards in Marathi. Please read this policy carefully. By using our services, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

When you use our services, we may collect:

• Account Information: Name, email address, phone number, and password when you register an account
• Profile Information: Profile picture (if you sign in with Google)
• Invitation Data: Names, dates, venues, and other event details you enter to customize invitation templates
• Payment Information: Payment is processed through Razorpay; we do not store your card numbers, CVV, or banking credentials. We only retain transaction IDs for order tracking
• Communications: Messages you send via WhatsApp, email, or our contact form

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, screen resolution
• Usage Data: Pages visited, time spent, click patterns, referral sources
• Cookies: See our Cookie Policy for details

2.3 Information from Third Parties

If you sign in via Google OAuth, we receive your name, email address, and profile picture from Google according to the permissions you grant. We do not receive your Google password.

3. How We Use Your Information

We use the collected information for:

• Service Delivery: Creating and delivering your customized digital invitation cards
• Account Management: Authentication, password resets, order history
• Payment Processing: Facilitating transactions through our payment partner Razorpay
• Communication: Sending order confirmations, password resets, important updates, and (with consent) promotional offers
• Support: Responding to inquiries via email, WhatsApp, or phone
• Service Improvement: Analyzing usage patterns to enhance user experience
• Legal Compliance: Meeting tax, accounting, and other legal obligations under Indian law
• Fraud Prevention: Detecting and preventing fraudulent transactions or misuse

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to provide and improve our services. Cookies are small data files stored on your device.

4.1 Types of Cookies We Use

• Essential Cookies: Required for login, session management, and core functionality
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Advertising Cookies: Used by Google AdSense to display relevant advertisements
• Preference Cookies: Remember your settings (language, login state)

You can control cookies through your browser settings. Note that disabling essential cookies may prevent certain features from working. For detailed information, see our Cookie Policy.

5. Third-Party Services

We work with carefully selected third-party services:

5.1 Google AdSense

We use Google AdSense to display advertisements on our website. Google may use cookies to serve ads based on your visits to this and other websites on the Internet. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our sites and/or other sites on the Internet.

You may opt out of personalized advertising by visiting Google Ads Settings. For more information about how Google uses data, see Google's Privacy & Terms.

5.2 Razorpay (Payment Gateway)

All payment transactions are processed by Razorpay Software Private Limited, a PCI-DSS Level 1 certified payment gateway. We do not store, transmit, or have access to your full card number, CVV, or banking credentials. Razorpay's privacy policy is available at razorpay.com/privacy.

5.3 Google OAuth (Authentication)

We offer Google Sign-In as an optional authentication method. Use of Google Sign-In is governed by Google's Privacy Policy.

5.4 Email Service Providers

We use SMTP services (such as Gmail/SendGrid) to deliver transactional emails like account verification, password resets, and order confirmations.

5.5 Hosting & Analytics

Our website is hosted on secure servers. We may use Google Analytics to understand site usage. Google Analytics may collect anonymized usage data.

6. Data Security

We implement reasonable security measures to protect your information:

• Passwords stored using bcrypt hashing (industry standard)
• HTTPS/SSL encryption for data in transit
• CSRF protection on all forms
• Email verification for account creation
• Time-limited password reset tokens (1 hour expiry)
• Session security with HTTP-only cookies
• SQL injection prevention via prepared statements

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your password.

7. Your Rights

Subject to applicable Indian law, you have the right to:

• Access: Request a copy of personal data we hold about you
• Correction: Update or correct inaccurate information via your account
• Deletion: Request deletion of your account and associated data
• Withdraw Consent: Opt out of promotional communications at any time
• Data Portability: Request your data in a machine-readable format
• Object: Object to certain processing of your personal data

To exercise these rights, email us at connect.technovision@gmail.com. We will respond within 30 days.

8. Data Retention

We retain your personal information only as long as necessary to:

• Provide our services to you
• Comply with legal obligations (tax records: 7 years per Indian law)
• Resolve disputes and enforce our agreements

Account data is retained until you request deletion. Generated invitation files are retained for 90 days after creation, after which they may be automatically deleted.

9. Children's Privacy

Our services are not directed to children under 13 years of age (or 16 in some jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete such information.

10. International Data Transfers

Your information is primarily stored on servers located in India. Some third-party services we use (such as Google) may store data on servers in other countries. These transfers are protected by standard contractual clauses and other appropriate safeguards.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this policy will be revised. Material changes will be communicated via email or a prominent notice on our website. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, contact us: