Privacy policy

Amantrit is operated by Harsh Kathpal. For the information you and your guests give us, that business is the data fiduciary — the party responsible for it. India's Digital Personal Data Protection Act, 2023 is the law we are writing to; if you are reading this from outside India, your own local rules may give you more, and we will honour a reasonable request either way.

Our database and file storage are hosted on Supabase, and the site itself is served by Netlify. Both are third-party providers who process data on our instruction. Depending on the region a provider assigns, your data may be stored outside India.

Four separate groups of information, held for different reasons.

1. Your account. The email address you sign in with, and a display name and phone number if you enter one. We never see or store your password — sign-in is handled by the identity provider.

2. Your invitation. Everything you type into the editor: names, dates, venue addresses, family names, the story you write, and any photographs you upload. This is the document we publish for you.

3. Your guests' replies. When a guest RSVPs we store what the form asked for — their name, whether they are coming, how many people they are bringing, which events they will attend, dietary notes, a song request, and, when the invitation enables those questions, a phone number, an email address and free-text answers. Blessings left on the wall carry a name, a relationship and a message. These are your guests' details, collected by you, using our software. Tell them what you are asking for and why — especially if you turn on the questions that ask for a phone number.

4. Your payment. The amount, the payment reference we issued, the UPI transaction number (UTR) you give us, and the screenshot you upload. A screenshot of a bank app usually shows more than the payment — a balance, a phone number, other recent transactions. We ask for the UTR precisely so the screenshot is corroboration rather than the only evidence. We do not store card numbers, UPI PINs or bank credentials, and we never see them: the payment happens inside your own UPI app.

• Publish your invitation at the link you share with your guests.
• Show you your guests' replies in your dashboard.
• Check that a payment arrived, by matching the UTR and the reference against the money we actually received, and then put your invitation live.
• Email you about your own invitation: payment received, approved or declined, and a reminder before its time online runs out.
• Answer you when you contact support.

We do not sell anything to anyone, we do not run advertising, and there are no analytics or tracking pixels on this site. Your guests' phone numbers are used for nothing at all — they sit in your dashboard for you to read.

• You, for your own invitation — including every RSVP and blessing it received.
• Anyone holding your invitation's link. A published invitation is a public web page that is not listed in search engines and not linked from anywhere on this site, but it is not password-protected. Whoever you send the link to can forward it. Approved blessings are visible on that page; RSVP replies are not.
• Us, as the operator. Support and payment checking are done by hand, so a person at Amantrit can open your invitation and your payment screenshot. We look when there is a reason to — an approval, a problem you have reported, or a legal obligation.
• Our hosting providers, as the infrastructure the data sits on.

One thing to know about photographs. Images you upload are kept in a private store. They are not served over a public web address: every time one is shown, we check who is asking and then hand out a link that stops working after ten minutes. While your invitation is live, anyone with your invitation link can see its photographs — that is what an invitation is. Before you publish, and once it expires, is suspended or is taken down, only you and our team can. Payment screenshots work the same way and are never on the invitation at all.

• While your invitation is live, and after it expires. Expiry takes the invitation offline; it does not delete it. Your guests' replies are kept so that renewing brings the same link, the same design and the same responses back.
• Drafts stay in your dashboard until you delete them.
• Payment records — amount, reference, UTR and the screenshot — are kept as the record of a transaction, including after the invitation is deleted. This is the one category we will not remove on request while a tax or dispute period is running.
• Everything else is deleted when you ask. There is no automatic purge on a timer today; deletion is a request you make and we carry out. We would rather tell you that than publish a retention schedule we do not enforce.

You can have your invitation, your guests' replies and your uploaded photographs deleted at any time, whether or not your invitation is still live.

Request deletion → — that page tells you exactly what to send, what is removed, what is kept and how long it takes.

Deleting a live invitation takes it offline immediately. The link stops working for every guest who has it, and the RSVPs cannot be recovered afterwards, so download anything you want to keep first.

• See what we hold. Ask, and we will send you everything associated with your account.
• Correct it. Most of it you can edit yourself; for anything you cannot, ask us.
• Have it erased, as set out above.
• Complain. Write to us first — we would like the chance to fix it. Under the DPDP Act you may also raise the matter with the Data Protection Board of India.

If you are a guest, not a couple: the invitation you replied to belongs to the people getting married, and your reply is theirs. Ask them first. If you cannot reach them, contact us with the invitation's link and we will remove your reply.

Amantrit is sold to adults planning events. Do not create an account if you are under 18. Invitations for a child's birthday or naming ceremony frequently contain a child's name and photograph — those are published by the parent, and the parent decides who receives the link.

Sign-in is handled by our identity provider; we never hold your password. Guest replies and orders are protected by row-level rules in the database so that one customer's data cannot be read through another's session. Payment screenshots are in a private store reachable only through short-lived signed links. Traffic is encrypted in transit.

No system is perfect. If you believe something is exposed, tell us before you tell anyone else and we will treat it as urgent.

When this page changes materially, the date at the top changes with it and we email account holders with a live invitation. Continuing to use Amantrit after a change means the new version applies.

Email

Support email is currently unavailable

WhatsApp

Support WhatsApp is currently unavailable

When we answer

Support hours is currently unavailable

Full contact details, including what to do urgently, are on the contact page.