Privacy Policy — InviteMitra
Last updated: 24 August 2026
1. Who we are
InviteMitra ("we", "us") is a digital invitation service operated by Abhijeet Gawde from Mumbai, Maharashtra, India.
Website: https://invitemitra.com
Grievance Officer Name: Abhijeet Gawde Designation: Founder Email: support@invitemitra.com Location: Mumbai, Maharashtra, India
We respond to privacy requests within 30 days.
2. What we collect
Invitation content you type. Names, dates, times, venue addresses and any other text you enter into a template. This is the main personal data we hold, and it often includes details about people other than you — a bride and groom, a child, family members, a venue.
The invitation we generate. The image file, and where you choose a video design, the video file. We store these so your invitation can be shared and re-opened.
Basic technical data. Your IP address and browser type, recorded automatically by our hosting providers as part of serving the site securely.
Usage analytics. Named product events (template opened, edit started, share, invite opened, and similar). These include template id, occasion and language only — never the text you type on an invitation. Events are processed by PostHog and, when advertising measurement is enabled, by the Meta (Facebook) Pixel — both in the United States (see §9).
Your email address or phone number — only if you give it. We ask for this when you buy something, so we can send you a receipt and your download link. You may also choose, separately and optionally, to hear about new designs. See §4.
Payment information. When you pay, the transaction is handled by Razorpay. Your card, UPI or bank details go directly to Razorpay and we never see or store them. We store only the payment reference, the amount, the date, and whether it succeeded — the minimum needed to give you what you paid for, issue refunds, and keep lawful accounts.
We do not collect: your contacts, your precise location, invitation content in analytics, or any card or bank details.
3. Why we use it, purpose by purpose
| What | Why | Lawful basis |
|---|---|---|
| Invitation content | To generate your invitation and display it when someone opens the link | Your consent |
| Generated image / video | So the invitation can be shared and re-opened later | Your consent |
| IP address, browser | Security, abuse prevention, keeping the service running | Legitimate use |
| Usage analytics | To understand which designs work and improve the product | Your consent |
| Ad measurement (Meta Pixel) | To see which of our ads bring people who create invitations | Your consent |
| Email / phone, if given | To send your receipt and your download link | Performing what you asked for |
| Email, if you opt in | To tell you about new designs | Separate, optional consent |
| Payment reference and amount | To deliver what you bought, handle refunds, keep lawful accounts | Legal obligation and contract |
We do not sell your data. We do not build profiles of you for sale to others. We use the Meta Pixel only to measure whether our own ads led someone to create an invitation — not to send Meta your invitation text, name, email or phone.
4. Your consent — and the two separate choices
You give consent by an affirmative action — typing your invitation details and choosing to save or share. We do not use pre-ticked boxes.
These are two different things, and you can say yes to one and no to the other:
- Giving us your email so we can send your receipt and download link. This is necessary for us to deliver what you paid for. If you do not want to give it, do not buy — you can still browse, personalise, and preview without any contact details.
- Hearing from us about new designs. Entirely optional, never required to buy anything, and off unless you actively turn it on.
You can withdraw either consent at any time, by emailing our Grievance Officer or using the unsubscribe link in any message we send. Withdrawing is as easy as giving it. Withdrawing marketing consent does not affect anything you have already bought.
5. Invitation links are public to anyone who has them
This matters, so please read it.
When you share an invitation, it gets a web address like
invitemitra.com/i/6138eb3f-0d81-.... That page is not password protected. Anyone who
has the link can open it and see everything on the invitation — names, the date, and the
venue address.
The address contains a long random identifier, so it cannot realistically be guessed. But it can be forwarded, screenshotted or posted by anyone you send it to, exactly like a paper invitation can be passed on.
Do not put anything on an invitation you would not be comfortable with a stranger seeing.
6. Children's information
Birthday and naming-ceremony invitations often contain a child's name and date of birth.
If you are creating an invitation involving a child, you confirm you are that child's parent or legal guardian, or have their permission. We do not knowingly allow anyone under 18 to use the service directly.
We do not use children's data for analytics, profiling, targeted content or marketing. We will never send marketing email to an address we have reason to believe belongs to a child.
7. Where your data is stored, and for how long
Invitation records, images and videos are stored on servers in Singapore:
- Invitation records — Neon (managed PostgreSQL)
- Generated images and videos — Fly.io
- The website — Vercel, served from locations worldwide including India
Payments are processed by Razorpay, in India.
Product analytics events (template id, occasion, language — not invitation text) are processed by PostHog in the United States, and when the Meta Pixel is enabled, by Meta Platforms in the United States (see §9).
Some data is therefore transferred outside India. India's DPDP Act permits this except to countries the government specifically restricts; Singapore and the United States are not restricted at the time of writing.
How long we keep things:
| What | How long |
|---|---|
| Invitations, images and videos | While the service operates, so your shared links keep working. Ask us to delete and we remove it within 30 days. |
| Email address given for a purchase | While we may still need it for support or a refund, then deleted |
| Marketing list | Until you unsubscribe, or after 24 months with no engagement — whichever is first |
| Transaction records (reference, amount, date) | 8 years, because tax law requires us to keep accounts. These are not deleted on request — we are required to keep them. |
| Aggregate analytics that cannot identify you | Indefinitely |
8. Your rights
Under India's Digital Personal Data Protection Act, 2023, you may:
- Access the data we hold about your invitation
- Correct anything inaccurate
- Erase your invitation — this breaks any links already shared
- Withdraw consent, including marketing consent, at any time
- Nominate someone to exercise these rights if you die or become incapacitated
- Complain to our Grievance Officer, and to the Data Protection Board of India if you are not satisfied with our response
To exercise any of these, email our Grievance Officer at support@invitemitra.com with the invitation link. We will need the link to identify which invitation is yours, since there are no accounts.
One limit, so it is not a surprise: we must keep records of payments for the period tax law requires, even if you ask us to delete everything else. Those records are the reference number, amount and date — not your card details, which we never had.
9. Cookies and tracking
We use PostHog (posthog.com) as a processor for product analytics. The browser loads a small PostHog script that sends named usage events only — for example when a template is opened, when you start editing, when you share, when someone opens a hosted invite link, or when they click through to create their own.
Those events include template id, occasion and language. They do not include invitation content (no names, dates, venues or other text you typed). We do not use session recording, heatmaps, or automatic click/input capture.
We also use the Meta (Facebook) Pixel when advertising measurement is turned on. It is
there so we can tell which of our ads bring people who actually create invitations. The Pixel
receives the same kind of named events (for example that a template was viewed, or that a
video purchase completed) with template id, occasion, and purchase amount in the currency
charged (Indian rupees or US dollars). It does
not receive invitation content, names, email addresses or phone numbers. Meta may set a
cookie such as _fbp in your browser as part of how the Pixel works.
When you make a payment, Razorpay sets cookies necessary to process the transaction securely and prevent fraud. These are required for the payment to work.
PostHog and Meta process these analytics events in the United States. We do not sell your data to advertisers, and we do not use Advanced Matching (hashed email or phone) with Meta.
Opting out: you can block the PostHog and Meta scripts with a browser content blocker, or email our Grievance Officer (see §12) and ask us to note your preference — we will stop associating future analytics with any identifier we can match. There is no in-product cookie banner today. We still do not send personal invitation content to analytics.
10. Security
We use encrypted connections (HTTPS) throughout, and our databases are encrypted at rest. Payments are handled entirely by Razorpay, so card and bank details never reach our systems.
No system is perfectly secure, and we cannot guarantee absolute security — which is another reason not to put sensitive information on an invitation.
If a breach affects your personal data, we will notify you and the Data Protection Board of India as the law requires.
11. Changes to this policy
We will update this page if our practices change, and update the date at the top. Material changes will be highlighted on the site.
12. Contact
Abhijeet Gawde, Grievance Officer support@invitemitra.com Mumbai, Maharashtra, India
This policy is available in English. If you would prefer it in Hindi or Marathi, email us and we will provide a translation.