Privacy Policy

1. Introduction

Welcome to Mangalyam. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights.

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you:

• Identity Data (name, username)
• Contact Data (email address, phone number)
• Technical Data (IP address, browser type, device information)
• Usage Data (how you use our website)
• Wedding Data (event details, guest information, photos)

3. How We Use Your Data

We use your personal data to:

• Provide and maintain our services
• Manage your account and wedding website
• Send you important updates and notifications
• Process payments and prevent fraud
• Improve our services based on usage patterns

4. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way. We limit access to your personal data to employees and third parties who have a business need to know.

5. Your Rights

Under GDPR, you have the right to:

• Request access to your personal data
• Request correction of your personal data
• Request erasure of your personal data
• Object to processing of your personal data
• Request transfer of your personal data
• Withdraw consent at any time

6. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service. Types of cookies we use:

• Essential cookies: Required for the website to function properly
• Preference cookies: Remember your settings and preferences
• Analytics cookies: Help us understand how visitors use our site

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. When you delete your account, your personal data will be permanently deleted within 30 days, except where we are required to retain certain information for legal or business purposes (e.g., transaction records for tax purposes).

8. Third-Party Services

We may share your data with the following third-party service providers:

• Stripe: Payment processing (PCI-DSS compliant)
• Cloudinary: Image storage and processing
• Inngest: Background job processing
• Neon: Database hosting (EU region available)

All third-party providers are bound by data processing agreements and must comply with GDPR requirements.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or reliance on the recipient's certification under an approved certification mechanism.

10. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at: privacy@mangalyam.app