Legal

Privacy Policy

Effective date: February 18, 2026

Ayozan (“we,” “us,” or “our”) operates the website ayozan.com and related services (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

Information you provide

  • Account details — name, email address, and password when you create an account.
  • Guest lists — names, salutations, phone numbers, and language preferences you upload for per-guest personalization.
  • Design content — text, images, and customization choices you make in the Studio.
  • Payment information — processed securely by our payment provider (Razorpay / Stripe). We never store full card numbers on our servers.
  • Communications — emails, feedback, or support messages you send us.

Information collected automatically

  • Usage data — pages visited, features used, referral source, browser type, device type, and operating system.
  • Cookies & similar technologies— we use first-party cookies for session management and analytics. See Section 6 for details.
  • IP address — used for security, fraud prevention, and approximate geolocation (country/state level only).

2. How we use your information

  • Render and deliver personalized invitations and greeting cards.
  • Process transactions and send order confirmations.
  • Provide customer support and respond to inquiries.
  • Improve, personalize, and expand the Service.
  • Send optional product updates and promotional emails (you can opt out at any time).
  • Detect and prevent fraud, abuse, or security incidents.
  • Comply with legal obligations.

3. Guest list data

We understand that guest lists contain sensitive personal information. We commit to the following:

  • Guest names and contact details are used only to render your invitations and are never sold, rented, or shared with third parties for marketing purposes.
  • Guest data is encrypted at rest and in transit using industry-standard TLS and AES-256 encryption.
  • You may delete your guest list at any time from your account dashboard. Deleted data is purged from our servers within 30 days.

4. Sharing & disclosure

We do not sell your personal information. We may share data with:

  • Service providers — hosting (Cloudflare, Hetzner), payment processing (Razorpay/Stripe), analytics (Google Analytics), and email delivery partners — solely to operate the Service.
  • Legal compliance — when required by law, court order, or governmental request.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, with equivalent privacy protections.

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., tax records). Anonymized analytics data may be retained indefinitely.

6. Cookies

We use the following types of cookies:

  • Essential cookies — required for authentication, session management, and security. Cannot be disabled.
  • Analytics cookies — help us understand how visitors use the Service (Google Analytics). You may opt out via your browser settings or the Google Analytics opt-out extension.

We do not use advertising or third-party tracking cookies.

7. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal data.
  • Export your data in a portable format.
  • Withdraw consent for optional data processing.
  • Object to automated decision-making.
  • Lodge a complaint with a supervisory authority.

To exercise any of these rights, email us at [email protected].

8. Security

We implement appropriate technical and organizational measures to protect your data, including TLS encryption, AES-256 encryption at rest, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Children's privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Effective date” above. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: [email protected]

12. Grievance Officer (India)

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are published below. You may contact the Grievance Officer with any complaint regarding your personal data, content hosted on the Service, or a breach of these policies.

Name: Pravin Kumar Mishra

Email: [email protected]

Address:
Plot No. CP 1/B, 1st Floor, Shop No. 108B
Govindpuram
Ghaziabad, Uttar Pradesh 201013
India

We will acknowledge your complaint within 24 hours of receipt and resolve it within 15 days.