Privacy Policy

1. Who operates Mehfill

Mehfill.in (“Mehfill”, “we”) is a digital invitation service that creates online invitations for weddings, engagements, birthdays, anniversaries and other celebrations.

Operator: Ayan Shaikh — individual operator of an unregistered sole-proprietorship business trading as Mehfill.in
Location: Nashik, Maharashtra, India
Support email: mehfill.in029@gmail.com

If you have any question about your personal information, write to us at the support email above.

2. What data we collect

We collect only what the service actually needs:

• Account details — name, email address, mobile number and password (stored securely) when you sign up or sign in.
• Order & event details — event type, event date, venue name and address, city, state, pincode, and names/photos you share for your invitation.
• Payment details — UPI transaction ID (UTR), amount, plan, and the payment screenshot you upload so we can verify your payment manually. We never ask for your UPI PIN or bank password.
• Support messages — what you share with us on WhatsApp, email or chat.
• Technical data — pages you visit on our site (page path only). Our hosting/authentication provider may additionally process standard server data such as IP addresses for security purposes.
• Demo RSVP entries — names entered in demo invitation previews stay in your own browser and are not sent to us.

3. Why we collect it

• To create your account and keep it secure.
• To design, personalise and host your digital invitation.
• To process your order and verify your UPI payment.
• To contact you about your order on WhatsApp, email or phone.
• To prevent fraud and keep the service safe.
• To understand which pages are visited so we can improve the site.
• To meet accounting and legal record-keeping needs where applicable.

4. Data sharing & third parties

We do not sell your personal information. It is processed through these services:

• Supabase — authentication, database and file storage (account, order and screenshot data).
• Vercel — website hosting.
• Razorpay — payment processing for card, net-banking and UPI checkout payments (when enabled). Razorpay receives the amount and your payment instrument details as required to process the transaction; we receive the payment status and IDs.
• WhatsApp — order communication, when you message us or we confirm your order.
• api.qrserver.com — generates the UPI payment QR image in your browser (it receives the payment details encoded in the QR request).
• Google Fonts — loads site fonts.

We do not use Google Analytics, Meta Pixel, Hotjar or any advertising trackers. If that changes, this policy will be updated first.

5. How long we keep data

• Account and order records — kept while your account is active and for a reasonable period afterwards for support, accounting and dispute handling.
• Payment screenshots and transaction records — kept as proof of payment for a reasonable period.
• Uploaded invitation content — kept while your invitation is hosted, plus a reasonable backup period.
• Page-visit logs — kept in aggregate for site improvement.

Exact retention schedules are being finalised with professional advice. You may request deletion of your data at any time (see section 6) — we delete what the law allows us to delete.

6. Your rights

Under India's Digital Personal Data Protection Act, 2023 and applicable law, you may:

• Ask what personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data (subject to legal record-keeping duties).
• Withdraw consent for optional communications at any time.
• Raise a grievance about how your data is handled.

To exercise any of these, email mehfill.in029@gmail.com with the subject “Privacy Request”. We aim to respond within a reasonable time.

7. Children

Mehfill accounts and orders are meant for adults (18+). Event details may of course mention children (for example birthdays), provided by the ordering adult.

8. Changes to this policy

If we change this policy, the “Last updated” date above will change. Significant changes will be highlighted on the website.

9. Legal review

This policy is a good-faith, plain-English description of actual practices. It is not legal advice. Data-protection, e-commerce and tax obligations depend on the final business structure — professional legal review is recommended before treating this page as final.