1. Who We Are

MindMyEvent is an event planning and guest management platform and a product of Spade Technologies, a company incorporated in India. Spade Technologies operates the MindMyEvent brand, app, and website. Our registered contact for data-related matters is:

2. Data We Collect

We collect the following categories of personal data when you use MindMyEvent:

2.1 Account & Identity Data

• Full name — provided during registration or profile setup
• Mobile number — used for authentication via OTP
• Email address — optional, used for account recovery
• Profile photograph — optional, uploaded by you

2.2 Event Data

• Event title, description, date, time, venue, and location (GPS coordinates)
• Event banner images and media you upload
• Event category, attire, food preferences, and other event details you choose to add

2.3 Guest & Contact Data

• Guest names and mobile numbers — selected by you from your phone's contacts to invite to events
• RSVP responses submitted by guests via the web link
• Invitation status (invited, accepted, declined, pending)

2.4 Media

• Photos and videos you upload as event banners or memory media
• Profile photos uploaded during account setup

2.5 Device & Usage Data

• Device type, operating system, and app version (for crash reporting)
• App performance data collected via Firebase Crashlytics and Firebase Performance
• IP address and general location (not precise GPS unless you create an event with a location pin)

2.6 Contact Permissions

When you invite guests, the app requests access to your device contacts. We access only the names and phone numbers of contacts you explicitly select. We do not upload your entire address book to our servers.

3. How We Use Your Data

• Account creation & authentication — to verify your identity via OTP and create your account
• Event creation & management — to store and display your event details
• Guest invitations — to send personalised WhatsApp messages with RSVP links to the guests you select
• RSVP tracking — to record and display guest responses against your events
• Media storage — to store event banners and memory photos you upload
• App improvement — to diagnose crashes and improve performance via anonymised analytics
• Customer support — to respond to your queries and resolve issues
• Legal compliance — to comply with applicable Indian laws and regulations

We do not use your personal data for advertising, profiling, or selling to third parties.

4. Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data on the following grounds:

• Consent — you provide explicit consent when you register, grant contact access, or upload media
• Legitimate uses — processing necessary for providing the service you have requested
• Legal obligation — where we are required to process data to comply with Indian law

You may withdraw consent at any time by contacting us or deleting your account. Withdrawal of consent may affect your ability to use the service.

5. Third-Party Services & Data Sharing

We use the following trusted third-party services to operate MindMyEvent. Each operates under its own privacy policy:

5.1 Google Firebase (Google LLC)

• Firebase Authentication — handles phone number OTP-based login
• Cloud Firestore — stores your account, event, and guest data
• Firebase Storage — stores media files you upload
• Firebase Crashlytics — collects anonymised crash reports
• Firebase Performance — collects anonymised performance metrics
• Firebase Cloud Functions — processes WhatsApp notification requests

Data is stored on Google's cloud infrastructure. Google may process data in regions outside India. Google's privacy policy: policies.google.com/privacy

5.2 Meta Platforms (WhatsApp Business API)

When you choose to send WhatsApp invitations, the guest's phone number and the message content (event name, date, venue, RSVP link) are transmitted to Meta via the WhatsApp Business API. Meta may process this data per its own policies. Meta's privacy policy: whatsapp.com/legal/privacy-policy

5.3 Google Maps

If you use the location/venue picker, the selected coordinates are processed by Google Maps APIs. Google's privacy policy applies.

We do not sell, rent, or share your personal data with any other third party for marketing purposes.

6. WhatsApp Integration

MindMyEvent uses the WhatsApp Business API to send event invitations on your behalf. When you select a guest and choose to invite them:

• The guest's name and phone number (which you provided) are used to personalise and route the message
• A unique, one-time RSVP link is generated per guest — this link cannot be reused and is tied only to that invitation
• Only guests you explicitly mark as "invited" receive a WhatsApp message — we do not send unsolicited messages
• We do not send the same guest repeated messages — each new invitation generates a distinct link and is sent only once per event creation/edit cycle

By using the invitation feature, you confirm that you have the permission of the invited guest to contact them via WhatsApp for this purpose.

7. Media & Photos

Photos and videos you upload (event banners, profile photos, memory media) are stored securely on Firebase Storage (Google Cloud). These files are:

• Accessible only to you and, where applicable, guests viewing your event
• Not used for training AI models or for any advertising purpose
• Deleted when you delete the associated event or your account

8. Data Retention

• Account data — retained for as long as your account is active. Deleted within 30 days of account deletion request.
• Event data & media — retained while your account is active. Deleted on account deletion or on your request.
• Guest contact data — retained as part of the event record. Deleted with the event or account.
• RSVP tokens — retained for the lifetime of the event.
• Crash & performance logs — anonymised, retained for up to 90 days by Firebase.

We do not retain personal data beyond what is necessary for the purposes stated in this policy, unless required by law.

9. Data Security

We implement industry-standard security measures including:

• All data transmitted over HTTPS/TLS encryption
• Firebase Security Rules restricting data access to authenticated, authorised users only
• OTP-based authentication — no passwords stored
• Access controls limiting internal access to personal data on a need-to-know basis

No system is completely secure. In the event of a data breach affecting your personal data, we will notify you as required under applicable law.

10. Your Rights

As a data principal under the DPDP Act, 2023 and the IT Act, 2000, you have the following rights:

• Right to access — request a summary of the personal data we hold about you
• Right to correction — request correction of inaccurate or incomplete personal data
• Right to erasure — request deletion of your personal data (subject to legal obligations)
• Right to grievance redressal — raise a complaint with our Grievance Officer
• Right to withdraw consent — withdraw consent for data processing at any time
• Right to nominate — nominate another individual to exercise these rights in case of death or incapacity

To exercise any of these rights, contact us at support@mindmyevent.com or via WhatsApp at +91 98332 73330. We will respond within 30 days.

11. Children's Privacy

MindMyEvent is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will delete such data promptly.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, a Grievance Officer has been designated to address complaints and concerns regarding the processing of personal data:

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify you via the app or by email. The "Last updated" date at the top of this page will always reflect the most recent revision.

Continued use of MindMyEvent after changes are posted constitutes your acceptance of the revised policy.

14. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data: