Privacy Policy · Dovely

1. Who is responsible for your data

Dovely is operated jointly by KraftPixel Digital Solutions Pvt Ltd and DigitalCampfire Ventures LLP, both based in Mumbai, Maharashtra, India (collectively the "data fiduciaries"). This policy explains what we collect, why, and how to exercise your rights.

2. What we collect

From the couple / account holder

Account: email, phone, name, hashed password / OTP-only login records.
Wedding profile: couple names, dates, venues, events, branding.
Guest list: names, phone numbers, emails, household labels, side, tags, dietary preferences, allergies, plus-one info, addresses you choose to upload.
Payment metadata: subscription status, wallet balance, transaction IDs (handled by Razorpay — we do not store card numbers, CVV, or UPI VPAs).
Operational logs: login timestamps, broadcast audit trail, message-delivery receipts.

From your guests

RSVP responses, meal preferences, plus-one names, allergies, registry contributions.
Limited technical data when they open invites: timestamp, broad device class, country (no precise location).

3. Why we collect it

To operate the Service for you (sending invites, collecting RSVPs, allocating seats).
To provide receipts, billing, and customer support.
To prevent abuse, secure the platform, and comply with law.
To improve product quality (aggregated, not used for advertising).

We do not sell your data. We do not use your guest list for advertising.

4. Subprocessors we share data with

Appwrite — primary database & storage backend.
Razorpay — payment processing (subscription & wallet top-ups, registry contributions).
Meta WhatsApp Business Platform — when you send WhatsApp invites, the message body, recipient phone numbers, and template metadata pass through Meta's infrastructure.
Google Sheets — only if you explicitly opt-in to a Sheets sync; we read/write to the spreadsheet you authorise.
Cloudflare — CDN, DNS, and TLS termination for the website and custom domains.
Email delivery provider — for transactional email (login OTPs, receipts).

Each subprocessor receives only the minimum data needed for the function above and is bound by their own published terms. We review the list periodically.

5. How long we keep your data

Active accounts: for as long as the account is active.
After account deletion: we purge guest lists and personal data within 30 days, except for billing/financial records which we keep up to 8 years as required by Indian tax/audit law.
Operational logs: 90 days for delivery logs; longer for security-incident records.

6. Your rights

Subject to applicable law (including the Digital Personal Data Protection Act, 2023), you can request access to your data, correction of inaccuracies, erasure, withdrawal of consent for optional processing, and a copy of your data in machine-readable form. To exercise any of these, write to privacy@dovely.host from the email associated with your account. We respond within 30 days.

7. Security

We use TLS in transit, access-controlled databases, OTP-only login by default, and least-privilege admin access. No system is perfectly secure; in the event of a breach impacting your data, we will notify affected users and the relevant regulator without undue delay.

8. Children

The Service is not directed at children under 18. We do not knowingly collect data from minors. If a guest list you upload includes minors (e.g. children invited to events), you confirm you have lawful authority to share their basic details for the purpose of inviting them.

9. International transfers

Some subprocessors (Razorpay, Meta, Cloudflare, Appwrite) may store or process data outside India. By using the Service you consent to such transfers, subject to the safeguards each subprocessor provides.

10. Changes to this policy

We may update this policy. Material changes are notified via email or in-product banner. Continued use after the change constitutes acceptance of the updated policy.

11. Contact

Questions, deletion requests, or grievances: privacy@dovely.host. Postal: KraftPixel Digital Solutions Pvt Ltd / DigitalCampfire Ventures LLP, Mumbai, Maharashtra, India.