Privacy policy
This policy explains what personal data Toran Invites collects, why, and how you can control it. It is written to meet the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025 and the Information Technology Act, 2000 of India.
Who we are
“Toran Invites”, “we” and “us” mean BRANDSWOT Consultancy, a sole proprietorship of Gowtham Sai, GSTIN 37BHAPG2573A1ZV, at 1-133, Ground Floor, 1st Road, 1st Cross, Anantapur 515001, Andhra Pradesh, India. Toran Invites is a brand of BRANDSWOT Consultancy. We are the data fiduciary for the personal data described here. Contact: gowtham@brandswotconsultancy.com · +91 63092 80333.
What we collect
- Enquiries: your name, WhatsApp number, occasion, event date, city, preferred languages, any offer, partner or campaign code that brought you to us, and anything you write to us (website form, WhatsApp, Instagram, calls). We record the time you ticked the consent box and which version of this notice you saw.
- Orders: the names, family names, event dates, times and venues you ask us to put on your invitation, photographs and audio you send us, the billing name, address and GSTIN you give for an invoice, and payment records (amount, method, reference). Card and UPI details are handled by our payment partner; we never see or store your card number or UPI PIN.
- Guest lists: names, phone numbers, sides, groups, seat counts and invited events that a family uploads so we can create personal invitation links.
- RSVPs: the replies guests send through their personal link: attendance per event, number of people, food preference, travel note and blessing, and when the link was first opened.
- Reviews: words you choose to share about your order, only with your tick, and you can withdraw them.
- Technical data: basic server logs (IP address, browser, pages requested) kept for security and to stop abuse.
Our sales website does not use analytics, advertising cookies or tracking pixels. If we add any, we will ask first with a clear choice to say no. Couple websites use one functional cookie only when a family opens a private preview link.
Why we use it
- To reply to your enquiry and send you a free preview (your consent, given with the tick on our form or when you message us).
- To make, deliver and host your invitation, website and guest links, and to show the family their RSVP numbers (the service you asked for).
- To issue GST invoices and keep accounting, tax and payment records (legal obligation).
- To protect our services from fraud and misuse.
We do not sell personal data. We do not use guests’ details to market to them. A guest who taps the “Made with Toran Invites” line on an invitation is only contacted if they enquire themselves.
Guests’ data
When a family uploads a guest list, the family confirms they may share their guests’ names and numbers with us for the invitation. Every guest page has a “Remove my details” link: it erases the guest’s name, number and messages at once, and the family sees only an anonymous count. Guests can also use the form below with the invitation link.
Who we share it with
- Google Cloud / Firebase (hosting, database, file storage, sign-in): data is stored in Google’s Mumbai region (asia-south1).
- Cloudflare (delivers couple websites quickly and securely).
- Razorpay (online payments, when used).
- WhatsApp / Meta (when we message you on WhatsApp).
- Our own designers and quality checkers, only for the orders they work on, under confidentiality.
- Authorities, where Indian law requires it.
How long we keep it
- Enquiries that do not become orders: deleted 12 months after our last conversation.
- Couple websites stay live for the period of your package, then show an “ended” page. Guest lists, RSVPs and site files are deleted 90 days after that.
- Invoices and payment records: for the period GST law requires (currently 72 months from the due date of the annual return for that year).
- Security logs: one year, as the law requires.
Your rights
You can ask us to show you your personal data, correct or update it, erase it, withdraw consent, or nominate someone to act for you if you cannot. Use the form below, or write to gowtham@brandswotconsultancy.com. We acknowledge within 48 hours, confirm it is you on WhatsApp, and complete the request within 30 days. Withdrawing consent is as easy as giving it; it does not undo work already done, and invoices must be kept by law.
Make a request
Security
Data is encrypted in transit and at rest by our cloud providers. Staff access is role-based: designers see only the orders assigned to them, and every sensitive action is logged. Guest links contain an unguessable code. If a breach affects you, we will tell you without delay what happened and what to do, and report it to the Data Protection Board and CERT-In as the law requires.
Children
We take orders only from adults (18 or over). Invitations may include children’s names when a parent or guardian provides them, for example for a birthday or naming ceremony; the parent or guardian gives that consent on the child’s behalf. We do not knowingly collect data from children directly.
Grievance officer
Gowtham Sai, Grievance Officer, BRANDSWOT Consultancy, 1-133, Ground Floor, 1st Road, 1st Cross, Anantapur 515001, Andhra Pradesh. Email: gowtham@brandswotconsultancy.com. Phone and WhatsApp: +91 63092 80333. We acknowledge complaints within 48 hours and resolve them within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.
Changes
We will post any changes on this page with a new date and notice version. Material changes will be told to active customers on WhatsApp.