Privacy policy
This policy explains, in plain words, what personal data Cherished collects when you make an invite or reply to one, why we need it, who helps us process it and the rights you have under India’s Digital Personal Data Protection Act, 2023.
Last updated
Who we are
In this policy, “we” and “us” mean the people who run Cherished. We decide how your personal data is used, which makes us the “data fiduciary” under the Digital Personal Data Protection Act, 2023. You can reach us at support@cherished.in.
- Business address
- 20, CGF Indus Satellite GreensIndore, Madhya Pradesh 453771India
- support@cherished.in
What we collect
- A draft without an account: what you type into it. You can start an invite before giving an email; we keep it in a temporary guest account until you sign in.
- Your account: your email address. Each time you sign in, we email you a one-time code.
- Your invites: the names, family details, dates, venues, messages and other text you add.
- Photos you upload: we store them on our servers so your invite can show them.
- Your guest list: the household names you add and, if you add them, phone numbers and the notes you keep for each family.
- Guests’ RSVPs: the name a guest gives, whether they will come to each function, how many people are coming and any message they write.
- Payment references from Razorpay: order and payment IDs, the amount, the plan and whether the payment succeeded. Your card, UPI and bank details go to Razorpay, not to us. We never see or store them.
- Technical data: IP address, browser type and server logs, which we use to keep accounts secure, limit abuse and fix errors.
Why we use it
- To build, show and share your invites and collect RSVPs for you.
- To sign you in and keep your account safe.
- To take payments, publish and unlock the invite you paid for and keep a record of payments.
- To send the emails the service needs: your sign-in code, and a receipt when you pay. We do not send marketing emails.
- To answer your messages and complaints.
- To prevent abuse and fix problems.
We do not sell personal data, and we do not use your invites or photos for advertising.
If you received an invite
The family who invited you added your name and, perhaps, your phone number. When you reply, your answer goes to that family. Guests never need an account. To change or remove your details, ask the family or write to us at support@cherished.in.
Who we share data with
We share personal data only with service providers who process it for us, to run Cherished:
- Razorpay, to take payments.
- PostShiba, to send sign-in codes and payment receipts by email.
- Our hosting and database providers, who run our servers and store accounts, invites and photos.
- Google, for Google Analytics and, while advertising is on, ad measurement and personalisation (see “Analytics and advertising” below).
- Error-monitoring and log services, only if we switch them on, to help us find and fix problems.
We may also share data when the law requires it. Anyone who has the link to an invite can see that invite, including its photos, so share links only with the people you are inviting.
Analytics and advertising
We use Google Analytics 4 on our public pages, on the sign-in pages and inside your account, for example at checkout. It never runs on invite pages, so guests are never measured, and it runs only on our live site.
What it collects: the pages you visit, your device and browser type, your approximate location (country and city, which Google works out from your connection; Google Analytics does not store IP addresses), and these steps: creating an account or signing in, opening checkout (plan and price), completing a payment (payment reference, plan and amount) and sharing an invite on WhatsApp. We never send your name, email address, phone number, invite text, guest details or invite links, and addresses inside your account are shortened so they identify no invite. When a payment completes while analytics is on in your browser, our server may also send that payment record (payment reference, plan and amount) to Google Analytics, so it is counted even if an ad blocker stopped your browser from sending it.
Advertising: while advertising is on, Google may use this data to measure our ads and to personalise ads, for example to show our ads to people who visited this site (Google Ads remarketing). We do not use any other advertising or tracking tag.
Defaults: outside the European Economic Area, the UK and Switzerland, analytics and advertising are on by default. Visitors in those countries, and visitors whose country we cannot tell, start with both off and can switch them on.
Changing your choice: open “Cookie settings” at the bottom of our public pages and switch Analytics and Advertising on or off at any time. Your browser remembers the choice. Switching analytics off stops Google Analytics at once and deletes its cookies.
For analytics, Google processes this data for us as our service provider. For advertising, Google also uses it under its own privacy policy (policies.google.com/privacy).
Cookies and similar storage
- A sign-in cookie keeps you signed in. The service needs it, so it cannot be switched off.
- A cookie that lasts one day records your broad region, only to decide whether analytics and advertising start on or off.
- Your browser remembers your choice from “Cookie settings”, if you made one.
- While you pay, your browser briefly remembers the payment so the page can confirm it if it reloads.
- Google Analytics cookies, only while analytics is on, as described under “Analytics and advertising”.
How long we keep it
A draft started without an account is deleted 30 days after it was started, unless you sign in first. We keep your account, invites, photos, guest lists and RSVPs while your account is open, so your invites keep working for you and your guests. When we delete your account at your request, your invites, photos, guest lists and RSVPs are deleted with it. Razorpay keeps its own payment records, and we keep any record of a payment that the law requires us to keep.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- ask what personal data we hold about you and how we use it;
- ask us to correct, complete or update it;
- ask us to delete it, including your whole account and invites, except what the law requires us to keep;
- withdraw consent you gave, for example by switching analytics or advertising off in “Cookie settings”;
- nominate someone to use these rights for you if you die or cannot act yourself;
- complain to our Grievance Officer (below).
To use any of these rights, email support@cherished.in from the address you sign in with. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Grievance Officer
If you have a complaint about how we handle your personal data, write to our Grievance Officer. We will acknowledge your complaint within 48 hours and resolve it within 30 days of receiving it.
- Name
- Anant Sharma
- Designation
- Grievance Officer
- Postal address
- 20, CGF Indus Satellite GreensIndore, Madhya Pradesh 453771India
- support@cherished.in
How we protect it
Data travels over encrypted connections (HTTPS). Sign-in codes expire after 10 minutes and are stored only in scrambled (hashed) form. Access to our systems is limited to the people who run the service, and invite pages are kept out of search engines. No system is perfectly secure, so please keep your email account safe and share invite links only with your guests.
Children
Cherished is for adults. You must be 18 or older to create an account or pay. Families sometimes add children’s names to an invite; we use them only to show that invite.
Changes to this policy
If we change this policy, we will update this page and the date at the top. If a change is significant, we will also email account holders.
