InviBloom

Privacy Policy

Effective date: August 18, 2026

Introduction

This Privacy Policy explains how VAPU ABDUL RAHMAN, trading as InviBloom ("InviBloom", "we", "us", or "our"), collects, uses, stores, shares, and protects personal information when you use invibloom.com, the invitation builder, published invitation pages, RSVP tools, and related services (collectively, the "Service").

By using the Service, you acknowledge the practices described in this Policy. This Policy should be read with our Terms and Conditions.

Information we collect

Depending on how you use InviBloom, we may collect:

  • Account information: name, email address, profile photograph, authentication provider, email-verification status, and account or login timestamps.
  • Invitation content: couple and family names, photographs, audio, stories, event dates, venue and map information, guest-facing messages, and design choices that a creator enters or uploads.
  • Guest and RSVP information: attendance choice and, when a guest chooses to provide them, name and phone number.
  • Purchase information: product selected, amount, currency, Razorpay order and payment identifiers, payment status, and verification records. Razorpay processes full card, bank, wallet, or UPI credentials; we do not receive or store those complete credentials.
  • Support information: messages and contact details you provide when requesting help through email, WhatsApp, or another support channel.
  • Usage and technical information: pages visited, feature interactions, referring pages or campaigns, browser and device information, approximate location derived from an IP address, cookie or advertising identifiers, and diagnostic or security logs. Firebase Analytics and, where enabled, the Meta Pixel help collect some of this information.

How we use information

We use information to:

  • authenticate users and maintain accounts;
  • save drafts, publish and host invitations, process RSVPs, and provide creator dashboards;
  • process, verify, reconcile, and support payments, disputes, and reversals;
  • send service, security, payment, RSVP, and support communications;
  • personalise and improve the Service, understand usage, and measure marketing campaigns;
  • prevent fraud, abuse, security incidents, and violations of our Terms; and
  • comply with legal, accounting, tax, and regulatory obligations and enforce our rights.

We process information as needed to provide the Service and perform our agreement with you, with consent where required, for legitimate interests such as security and service improvement, and to comply with law. You may withdraw consent where processing depends on consent, but this will not affect earlier lawful processing.

Public invitations and creator responsibilities

A published invitation is accessible to anyone who has its link and may be reshared or indexed depending on how it is distributed. Information a creator chooses to publish—including names, photographs, dates, venues, and stories—is therefore not private account data. Creators should publish only information they are authorised to share and should avoid sensitive or confidential details.

RSVP responses are intended for the invitation creator and authorised service personnel, not for display on the public invitation. If a creator collects personal information from guests, the creator is also responsible for giving appropriate notice and using that information lawfully.

How we share information

We do not sell or rent personal information. We may share it with:

  • Service providers: Google Firebase for authentication, databases, hosting-related functions and analytics; Cloudinary and Firebase Storage for uploaded media; Razorpay for payments; Resend or another configured email provider for service notifications; Meta for advertising measurement; and infrastructure, security, or support providers that help operate InviBloom.
  • Invitation creators and guests: creators can view RSVP information submitted to their invitations, and published invitation content is available to people who receive the link.
  • Authorities and legal recipients: where disclosure is required by law, legal process, or a valid government request, or is reasonably necessary to protect rights, safety, security, users, or the public.
  • Business-transfer recipients: in connection with a merger, financing, reorganisation, acquisition, or sale of all or part of the business, subject to appropriate confidentiality and legal safeguards.

These providers may process information in India or other countries where they operate. When required, we use contractual and other safeguards for cross-border transfers.

Cookies and analytics choices

We and our service providers may use cookies, pixels, local storage, and similar technologies for sign-in, security, preferences, analytics, and campaign measurement. Browser settings can block or delete cookies, and device or provider controls may limit advertising measurement. Blocking essential storage may prevent account or builder features from working correctly.

Data storage and security

Account, invitation, RSVP, and payment-reference data is primarily stored using Google Firebase. Uploaded media may be stored with Cloudinary or Firebase Storage. We use reasonable administrative, technical, and organisational safeguards designed to protect information, including access controls and encrypted transmission. However, no internet transmission or storage system can be guaranteed to be completely secure.

Data retention

We retain account and invitation information while your account is active or as needed to provide the Service. RSVP data and uploaded media are generally retained with the related invitation until the creator or an authorised person requests deletion. Payment, transaction, fraud, complaint, and legal records may be kept longer where required for tax, accounting, dispute, or regulatory purposes. Backup copies may remain for a limited period before being overwritten or securely deleted.

Your rights and choices

Subject to applicable law and verification of your request, you may ask us to access, correct, update, export, or delete personal information; withdraw consent; or raise a concern about our processing. Account holders can edit much of their invitation information through the builder and dashboard.

To request account or personal-data deletion, email invibloom.info@gmail.comfrom your account email and identify the account or invitation involved. Guests may also contact the invitation creator, who can manage the relevant RSVP. We may ask for reasonable verification and may retain limited information where law requires it or where needed to prevent fraud, resolve disputes, or enforce agreements.

Children's privacy

Accounts and purchases are intended for people aged 18 and older. We do not knowingly permit children under 18 to create accounts or make purchases. Invitation creators must have a parent's, guardian's, or other appropriate authority before submitting a child's personal information. If you believe a child's information was provided without proper authority, contact us so we can review and remove it where appropriate.

Changes to this policy

We may update this Policy to reflect changes in the Service, law, or our data practices. We will post the revised Policy here with a new effective date and, for material changes, take reasonable steps to notify account holders.

Contact

For privacy questions, complaints, or rights requests, contact:
VAPU ABDUL RAHMAN, trading as InviBloom
Email: invibloom.info@gmail.com
Website: invibloom.com