Privacy Policy

1. Introduction

Digiflyer Advertisement Services Private Limited ("we," "us," "our") operates DigiEvents, an AI-powered wedding and event planning software platform ("Platform"). This Privacy Policy explains how we collect, use, store, share, and protect information when you use our Platform, and describes your rights regarding your personal data.

By accessing or using DigiEvents, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

2. Who This Policy Applies To

• Event Planners / Administrators ("Planners"): Professional wedding and event planners who subscribe to DigiEvents and manage events on the Platform.
• Sub-Users / Team Members: Staff or coordinators added by the Planner to assist with event management.
• End Users / Guests: Wedding guests, couples, and clients whose information is entered into the Platform by the Planner.
• Visitors: Individuals who visit our website or marketing pages without creating an account.

3. Information We Collect

Information you provide directly: account details, guest information, wedding details, billing details processed through payment partners, and communications sent to us.

Information collected automatically: usage data, device and browser information, IP address, time zone, cookies, and session data.

Information from third-party integrations: WhatsApp Business API data, AI prompt data, uploaded venue/reference images for visualisation, and Google-authorised data where connected.

4. How We Use Your Information

• To provide, maintain, and improve the DigiEvents platform and its planning workflows.
• To send WhatsApp invitations, reminders, RSVP requests, and related wedding communications on behalf of Planners.
• To process AI assistant commands and update relevant event modules.
• To provide support, process billing, improve the product, comply with law, and protect security.

5. Legal Basis for Processing (GDPR / DPDPA 2023)

• Contractual Necessity: Processing required to deliver subscribed services.
• Legitimate Interests: Analytics, security monitoring, and service improvement where those interests are not overridden by your rights.
• Legal Obligation: Compliance with applicable Indian and international laws.
• Consent: For consent-based processing such as marketing communications, where applicable.

6. WhatsApp Data — Special Provisions

• Digiflyer acts as a Data Processor on behalf of Planners when processing guest WhatsApp data.
• WhatsApp data is used only for wedding-related communications such as invitations, RSVPs, reminders, and notifications.
• Guests may opt out at any time by replying STOP or contacting the Planner directly.
• We do not sell, rent, or share WhatsApp contact information or message data for unrelated commercial purposes.
• WhatsApp message logs are retained for 90 days after the wedding event date, then deleted.

7. Data Sharing and Disclosure

We do not sell your personal data. We share information only with trusted service providers such as cloud hosting vendors, Meta, OpenAI, fal.ai, payment processors, and analytics vendors under appropriate agreements; where legally required; during a business transfer; or with your explicit consent.

8. Data Retention

• Account data: retained during your subscription and for 12 months thereafter.
• Wedding and guest data: retained for 24 months after the wedding event date unless earlier deletion is requested.
• WhatsApp message logs: retained for 90 days after the wedding event date.
• AI conversation logs: retained for 30 days for debugging and quality improvement.
• Payment records: retained for 7 years as required under Indian law.
• Deleted account data: removed within 30 days except where legal retention applies.

9. Data Security

• Encryption in transit (TLS/HTTPS) and at rest (AES-256).
• Role-based access controls and multi-factor authentication for administrative access.
• Regular security audits and vulnerability assessments.
• Incident response procedures with notification within 72 hours of a qualifying breach.

No system is completely secure. If a breach affecting your rights occurs, we will notify affected users as required by law.

10. Your Rights

Depending on your location, you may have rights to access, correct, delete, port, object to, restrict, or withdraw consent for processing of your personal data.

To exercise these rights, contact rishabhdoshi@digiflyer.in. We respond within 30 days.

11. Children's Privacy

DigiEvents is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. Guest data for minors is managed by the Planner as Data Controller. If you believe data from a minor has been collected inadvertently, contact us immediately.

12. International Data Transfers

DigiEvents operates primarily in India. Where data is processed by international service providers such as OpenAI, Meta, or fal.ai, transfers are governed by appropriate legal transfer mechanisms including Standard Contractual Clauses where required.

13. Changes to This Policy

We may update this Privacy Policy periodically. Registered users will be notified of material changes by email or through the Platform at least 14 days before those changes take effect.

14. Contact Us

If you are in India and have unresolved complaints regarding data processing, you may approach the Data Protection Board of India once constituted under the Digital Personal Data Protection Act 2023.