The short version: We collect only what we need to run your digital e-invitation. We never sell your data. Your guest list belongs to you, always. We do not ship physical products — our service is online only. This policy is written to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025.
1. Who we are
Aamantran is a brand under PLEXZUU. Aamantran ("we", "us", "our") is a digital wedding invitation service operated in India. Our platform enables couples to create, customise, and share digital (e-)invitations for their weddings and events. Purchases are for online access and features only; no physical products are delivered.
For the purposes of the DPDP Act, 2023, Aamantran (PLEXZUU) is the Data Fiduciary for your account, order, and website data. For guest information that you upload or collect through your invitation, we process it on your behalf and on your instructions (see Section 5).
For any question about how your personal data is processed, or to exercise your rights, contact our Grievance Officer at aamantran@plexzuu.com.
2. Information we collect
Information you provide directly
- Account information: Your username, email address, phone number, and a password (stored only as a secure cryptographic hash) when you purchase an invitation and create an account.
- Wedding details: Names of the couple and family members, photos you upload, event dates, venue names, and ceremony details needed to create your invitation.
- Guest information: Names, phone numbers, or email addresses of your guests if you use our guest management features. This data is provided by you and belongs to you.
- Payment information: The amount, order reference, and the email you enter at checkout. We do not store your card, UPI, or bank details — payments are processed by third-party providers (PayU / UPI) and are subject to their privacy policies.
- Communications: Messages you send us via WhatsApp, email, our contact form, or support tickets raised from your dashboard.
Information collected automatically
- Website analytics: On our marketing website we use first-party, cookie-less analytics: an anonymous session identifier, pages visited, referrer website, device type, browser, and approximate location (country/state level). No IP address is stored and this data is not linked to your identity.
- Invitation activity (shown to the host): When a guest opens an invitation link or submits an RSVP, we record that activity — including which guest's personal link was used — so that the host can see who has viewed the invitation and who has responded. This information is visible only to the event host and to us; it is never used for advertising or profiling.
- RSVP responses and wishes: When a guest submits an RSVP or a wish, we record their response, name, meal preference, and message as entered by them, and show it to the event host.
- Security logs: We keep logs of login and account-recovery activity to detect and investigate unauthorised access.
3. How we use your information
We use the information we collect only for the following specified purposes:
- Design, build, host, and deliver your digital invitation.
- Send you your invitation link and important transactional updates related to your order (order confirmation, onboarding, RSVP milestones, event reminders).
- Provide you with your RSVP dashboard and guest management tools.
- Process payments and maintain records required under Indian tax law.
- Respond to your questions, grievances, and support requests.
- Keep the platform secure and prevent fraud and abuse.
- Improve our templates, features, and overall service quality (using aggregated, de-identified data).
We do not send marketing emails without your consent, and we never sell your data.
4. Consent and how to withdraw it
We process your personal data on the basis of the consent you give when you purchase an invitation and create an account, and — for certain uses such as processing your payment and honouring your purchase — as a legitimate use permitted under the DPDP Act.
You may withdraw your consent at any time, with the same ease with which you gave it, by emailing aamantran@plexzuu.com from your registered email address. On withdrawal we will stop the related processing and delete the related personal data, except where we are required by law to retain it (for example, payment records under tax law). Withdrawing consent may mean we can no longer provide the service — for example, your invitation may need to be taken offline.
5. Guest data — your household use, our processing
Guest information (names, contact details, RSVP responses, wishes) uploaded or collected through your invitation is your data, shared by you for your personal and family event. We act as a processor of this data on your behalf and on your instructions. Specifically:
- We do not contact your guests for any purpose other than delivering the invitation and RSVP experience you have set up.
- We do not use guest data for marketing, advertising, or third-party profiling.
- Invitation-open and RSVP activity for each guest is shown only to you, the event host (see Section 2).
- By uploading guest details, you confirm you are entitled to share them with us for the purpose of managing your event.
- You can export your guest data at any time from your dashboard, and can request its deletion at any time by emailing us.
6. How long we keep your data
- Guest data (guest list, RSVPs, wishes, per-guest invitation activity): automatically deleted 90 days after your invitation expires (your invitation expires shortly after your last event date). We will email you at least 48 hours before deletion so you can export your guest list and RSVP report if you wish to keep it. Aggregate counts (for example, total RSVPs) may be retained.
- Account and invitation content: retained while your account is active, and deleted when you ask us to delete your account.
- Payment records: retained for the period required by Indian tax and accounting law, even after account deletion, in de-linked form where possible.
- Website analytics: raw event data is deleted after 90 days; only aggregated daily statistics are kept.
- Security logs: retained for at least one year, as required by the DPDP Rules, 2025.
7. Data sharing
We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:
- Service providers (Data Processors): We work with trusted third-party services — cloud hosting, media storage (Cloudflare), payment processing (PayU), and email delivery — who handle data only as needed to provide their services and are contractually bound to protect it with reasonable security safeguards.
- Legal requirements: We may disclose data if required by law, court order, or a lawful request from a government authority, or to protect the rights and safety of our users or the public.
- Advertising measurement (with your consent only): If you accept advertising cookies, the Meta Pixel shares your website interactions with Meta — see Section 14.
8. Where your data is stored
Our primary database is hosted in India. Some of our service providers (such as our content-delivery and media-storage provider) operate global infrastructure, so copies of uploaded media and cached content may be stored or served from outside India. Any such transfer is carried out in accordance with the DPDP Act and any restrictions notified by the Central Government, and our providers are bound to protect your data wherever it is processed.
9. Your rights under the DPDP Act
As a Data Principal under the DPDP Act, 2023, you have the right to:
- Access: obtain a summary of the personal data we hold about you and how it is processed.
- Correction and updating: correct inaccurate or incomplete data — most of it directly from your dashboard.
- Erasure: ask us to delete your personal data, subject to legal retention requirements.
- Withdraw consent: at any time, as described in Section 4.
- Nominate: nominate another individual to exercise your rights on your behalf in the event of your death or incapacity. Email us to record a nominee.
- Grievance redressal: raise a complaint with us about how your data is handled (see Section 10).
To exercise any of these rights, email aamantran@plexzuu.com from your registered email address, mentioning your username so we can verify your identity.
10. Grievance redressal and complaints
If you have a concern about how your personal data is handled, contact our Grievance Officer at aamantran@plexzuu.com. We will acknowledge your grievance within 7 business days and resolve it within 30 days — well within the 90-day period prescribed under the DPDP Rules, 2025.
If you are not satisfied with our response after exhausting this process, you have the right to file a complaint with the Data Protection Board of India, which functions as a digital office and accepts complaints online.
11. Children
Our service is intended for adults. You must be at least 18 years old to purchase an invitation or create an account. Guest lists uploaded by hosts may incidentally include the names of minors (for example, family members); this data is provided by the host for their personal event, is never used by us for tracking, behavioural monitoring, or advertising, and is deleted on the schedule in Section 6.
12. How we protect your data
We take reasonable security safeguards as required by the DPDP Act and Rules, including: encryption of data in transit (HTTPS), passwords stored only as strong one-way hashes, role-based access controls with two-factor authentication for administrative access, rate limiting, security event logging and monitoring, and regular data backups.
13. Data breach notification
In the unlikely event of a personal data breach affecting you, we will inform you without delay through your registered email — describing what happened, the likely consequences, what we are doing about it, and what you can do to protect yourself — and will report the breach to the Data Protection Board of India within the timelines prescribed under the DPDP Rules, 2025.
14. Cookies and advertising pixels
Essential cookies: the platform uses only the cookies needed to function (session management, authentication). Our own website analytics are cookie-less and anonymous.
Advertising (Meta Pixel) — only with your consent: on our marketing website we use the Meta (Facebook) Pixel to measure the effectiveness of our advertising. The Pixel sets third-party cookies and shares your interactions with our site (such as pages viewed and purchases) with Meta, whose use of this data is described in Meta's Privacy Policy. The Pixel is never loaded unless you click "Accept" in our cookie banner. If you decline, no advertising cookies are set. You can change your choice at any time using the "Cookie Preferences" link in the website footer — withdrawing is as easy as accepting. The Pixel is not used on invitation pages viewed by your guests.
15. Changes to this policy
We may update this policy from time to time. If we make significant changes, we will notify you by email or by placing a prominent notice on our website. The date at the top of this page indicates the most recent revision.
16. Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact our Grievance Officer at aamantran@plexzuu.com.