Privacy Notice

1. Who is responsible

Naqsh Digital Invites is operated by Mohammed Musaddiq, trading as Naqsh Digital Invites, India. References to “Naqsh”, “we”, “us” or “our” in this notice mean that business.

Operational/contact address: 328/11 TTK Road, Royapettah, Chennai 600014, Tamil Nadu, India.

2. Information from enquiries and bookings

Depending on how you contact or book with us, we may collect:

• your name, WhatsApp number, email address and optional Instagram username;
• the selected theme, event date, add-on choices, promotional code and booking preferences;
• booking and consent records, submission times, service status and communications with Naqsh; and
• information you include in a support, complaint, privacy or refund request.

3. Invitation content and uploaded files

To create an invitation, we may collect the names of the people being celebrated and relevant family members; event names, dates and timings; venue details and map links; schedules; invitation wording; dress-code, gift and other instructions; photographs; and music or media reference links.

We collect only the details you choose or are required to provide for the selected service. Please avoid including information that is not needed for the invitation, and make sure you have authority to provide another person’s details or content.

4. Guest responses and personalised guest features

If a customer selects an RSVP form, guest-wishes form or personalised guest-link feature, Naqsh may process guest display names, phone numbers where the form requests them, attendance choices, party or guest counts, names of accompanying guests, event selections, wishes or blessings, response timestamps and a unique link or response identifier.

Depending on the selected add-on, RSVP responses or guest messages may be stored in a private Naqsh-hosted dashboard or delivered to a restricted Google Sheet for the customer. A personalised link may display the intended guest’s name to anyone who has that link, so customers and guests should share it carefully.

Some guest-response implementations use a one-way hash derived from an IP address for rate limiting and abuse prevention. The application code does not use that hash to identify a guest. Hosting infrastructure may also create routine security or access logs under the hosting provider’s practices.

5. Payment information

Our records may include the amount, currency, payment status, Razorpay order ID, payment ID and refund information. Complete card or bank credentials, PINs and authentication codes are entered in Razorpay’s checkout and are not stored in the Naqsh booking record. Please never send us a password, PIN or one-time password.

6. Why we use information

We use information where reasonably necessary to:

• respond to enquiries and provide booking support;
• prepare payment orders and confirm, reconcile or refund payments;
• create, revise, host, maintain and deliver personalised digital invitations and selected add-ons;
• send booking confirmations, secure invitation-details links and service messages;
• receive, organise and provide RSVP responses or guest wishes to the relevant customer;
• maintain appropriate accounting, fraud-prevention, consent, dispute and service records;
• protect forms, customer information and infrastructure from misuse; and
• display completed work in a portfolio only when the customer separately chooses to permit this.

We do not sell customer or guest information.

7. Storage and service providers

Booking records, invitation details and uploads are stored in protected areas of Naqsh’s Hostinger hosting account. Structured booking information is synchronised to a restricted Google Sheet through Google Apps Script. Depending on the service selected, RSVP responses or guest wishes may be stored in a protected database on the hosting account or in a restricted Google Sheet.

Razorpay supports payment processing. Google supports Sheets, Apps Script and the fonts used on the public pages. The configured email-delivery provider, currently Resend where enabled, sends transactional booking messages. These providers process information only as needed to supply their relevant services and under their own terms and privacy practices.

We may also share limited information with professional advisers where reasonably necessary for accounting, security, legal advice or dispute handling, or disclose information where required by applicable law or a valid government request.

8. Third-party links and platforms

Invitations and website pages may contain links to Google Maps, WhatsApp, Instagram, YouTube, Spotify, Google Drive or other services chosen by the customer or used for communication. Opening or interacting with an external service is governed by that provider’s privacy practices. Naqsh does not receive all information those providers may collect from you.

Naqsh does not currently use a general advertising or behavioural-analytics integration in the reviewed public website code. If that changes, this notice should be updated before the new collection begins.

9. Photographs and portfolio use

Booking consent does not automatically give Naqsh permission to publish a customer’s invitation or photographs. Portfolio permission is separate and optional, and leaving it unchecked does not affect the booking.

If you grant portfolio permission, you may withdraw it before publication by emailing us. If material has already been lawfully published, we will take reasonable steps within our control in response to a valid withdrawal request, but complete removal from copies, shares or caches controlled by others may not always be possible.

10. Retention and deletion

Raw photographs uploaded through the invitation-details form are normally deleted within 30 days after the event date supplied in the booking, unless they remain reasonably necessary to finish the service, address a support or legal issue, investigate misuse or comply with law.

Invitation content and hosted pages are kept while reasonably needed to provide the agreed service. RSVP responses, guest wishes and personalised guest-link records are kept for the event-administration period and thereafter only while reasonably needed by the customer, to support the service, resolve a dispute or meet a legal requirement.

Limited booking, consent, payment, invoice and communication records may be retained for longer where reasonably necessary for accounting, tax, fraud prevention, legal claims or other legal obligations. Portfolio material may be retained while permission remains valid. Information no longer needed for these purposes will be deleted or anonymised where reasonably practicable.

11. Customer and guest requests

Subject to applicable law and appropriate verification, a customer or guest may ask us to explain what information we hold about them, provide access to it, correct inaccurate information, withdraw optional portfolio permission, or delete information that is no longer required.

Email requests to contact.naqshdigital@gmail.com. Include enough information to locate the relevant booking or RSVP, but do not send passwords, PINs or complete financial records. We may need to verify the requester’s identity or authority and may retain information that applicable law requires us to keep.

Withdrawing information that is necessary to complete an active booking may prevent us from providing the remaining service and does not automatically create a refund right; the Refund Policy will apply.

12. Security and limitations

We use measures reflected in the service code, including access-controlled storage, private upload paths, server-side validation, signed Sheet synchronisation, secure booking links and rate limiting in applicable forms. Access is limited to people and providers who reasonably need it for the service, security, accounting or legal purposes described above.

No website, database, email or internet transmission can be guaranteed completely secure. If a material incident affects personal information, we will investigate, limit the impact where reasonably possible and provide notices where applicable law requires them.

13. Adults, children and other people’s details

The booking and payment form is intended for people aged 18 or older. If you provide another person’s name, photograph, contact information or other personal detail, you confirm that you are authorised to do so.

Children’s information should be submitted only where genuinely needed for an invitation or RSVP and with appropriate parent or guardian authority. Guests who have a concern about information submitted by an event host may contact us using the process in section 11.

14. Processing across locations

Some service providers may process or store information on infrastructure outside your state or outside India. The location depends on the provider’s systems and service configuration. We use established providers and limit the information shared to what is reasonably needed for the relevant service.

15. Grievances and changes

Privacy questions or grievances may be sent to Mohammed Musaddiq at contact.naqshdigital@gmail.com. We aim to acknowledge grievances within 48 hours and resolve them within one month where reasonably possible.

We may update this notice when the service, providers or applicable law changes. The effective date and version shown on this page identify the notice presented for current bookings.