Last updated 27 October 2026

Privacy Policy

Written to be read, not to be scrolled past. If anything here is unclear, we will fix the wording.

The short version Creating and downloading an invitation happens entirely in your browser — nothing is sent to us. Only if you choose to host it online for ₹99 do we receive the invitation, publish it at its own link and email you that link.

1. Who this policy covers

This policy applies to the InviteAura website and to the invitations hosted through it. It covers two kinds of people: hosts, who create invitations, and guests, who open a link somebody sent them. There are no accounts and no sign-in.

2. Creating and downloading (free)

While you build an invitation, everything stays in your own browser. Nothing you type or upload is sent to us until you choose to host it.

Information kept in your own browser

  • Your invitation draft — the details, photos, music and settings, saved in localStorage under the key inviteaura:draft.
  • Your favourites — the list of templates you have hearted, under inviteaura:favorites.
  • Your theme choice — light or dark, under inviteaura:theme.

Clearing your browser storage — or pressing Start over in the editor — deletes this permanently and immediately. A card picture (JPG) or page (.html) you download is made on your device and saved straight to it.

Photographs and music you select

Photos are read with the browser's FileReader and resized on your own device; music is read the same way. They stay in your browser unless you host the invitation.

3. Hosting your invitation online (₹99)

When you pay to host an invitation, the following is sent to our server and kept:

  • The invitation itself — the details you entered (names, date, time, venue, address, message, contact number if you added one) and the photos and music you uploaded. It is published as a web page at its own address.
  • Your email address — used only to send you the confirmation email with your invitation link. It is not shown on the invitation and not placed in the published page.
  • A hosting record — the invitation's id and address, its event type and title, when it was published, and the Razorpay payment reference.

Anyone who has the link can open a hosted invitation, and they can see everything on it — that is what makes it shareable. Only add details, such as a phone number or an address, that you are happy for your guests to see.

Payments

Payments are handled by Razorpay, a PCI-DSS compliant payment provider. Your card number, CVV and UPI PIN go directly to them and are never seen, transmitted or stored by InviteAura. We receive the payment reference and a signed confirmation that the payment succeeded.

Where hosted invitations are kept

The website and its server functions run on Vercel. Hosted invitation pages, their media and the hosting records are stored in a GitHub repository that the site reads from when a guest opens a link. They are kept until 31 days after your event, then the pages and their media are deleted automatically; a short hosting record (invitation id, dates and payment reference) is kept for our accounts. Confirmation emails are sent through our email provider's mail server.

Information about guests

Guests do not give us any information. Opening an invitation needs no account, and we do not collect guest lists. We do not sell, rent or share data about hosts or guests.

4. Cookies and tracking

This site sets no cookies. There is no analytics script, no advertising pixel, no session tracker and no third-party tag manager.

Third-party requests

  • Google Fonts serves the typefaces used by the site and the invitations. Loading a font sends your IP address and browser details to Google, as any request to any server does.
  • Vercel hosts the site and keeps standard web server logs.
  • Razorpay loads its checkout only when you choose to pay for hosting.
  • A public script CDN (jsDelivr) serves the image library used to save the card as a picture.

Share buttons do not silently contact WhatsApp, Facebook or Telegram. They only build a link, and nothing is sent until you click one and the platform's own page opens.

5. Children

InviteAura is intended for adults organising events. Invitations frequently feature children — a first birthday, a naming ceremony — and the adult host is responsible for having the right to share those photographs.

6. Your rights and deletion

Under Indian data protection law and comparable regulations elsewhere, you may request access to your data, correction of anything inaccurate, deletion of a hosted invitation and its media, and a copy of what you submitted. Because there are no accounts, write to us from the email address you used when hosting and include the invitation's link, so we can confirm it is yours. Data that only ever lived in your browser can be deleted by you at any time, as described above.

7. Security

The site and every hosted invitation are served over HTTPS. Payments are verified on our server before anything is published, and the credentials that write to storage never reach the browser. No system is perfectly secure, and we would rather say so than imply otherwise.

8. Changes to this policy

Material changes will be reflected here with a new date at the top of the page. Continuing to use the service after a change means you accept the revised policy.

9. Contact

Questions about privacy, and deletion requests, can go to privacy@inviteaura.in.

Read the Terms & Conditions