Privacy Policy
Welcome to MyGala!, a digital invitation platform operated by Avneer Solutions Private Limited ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use the MyGala app, website, or related services (collectively, the "Service"). We are committed to safeguarding your privacy and complying with applicable laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act) in India.
By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service. This Policy applies to all users, including individuals creating or receiving invitations ("Users") and vendors ("Vendors").
1. Information We Collect
We collect information to provide and improve the Service. The types of information may include:
- 1.1 Personal Information You Provide
- 1.1.1 Account and Profile Data: When you create an account or use features, we may collect your name, email address, phone number, postal address, and other details you provide (e.g., event details like bride and groom information, point-of-contact details).
- 1.1.2 Event-Related Data: Information such as customizable messages, RSVP responses, guest lists, accommodation details, gift contributions, wishlist items, and uploaded content (e.g., images or videos in shared albums).
- 1.1.3 Payment Information: For premium features, we collect billing details like credit/debit card numbers or other payment methods, processed through secure third-party providers.
- 1.1.4 Vendor Data: If you are a Vendor, we may collect business details like branding information, contact numbers, Instagram profiles, and website links.
- 1.1.5 Communications: Information from inquiries, feedback, or support requests sent to support@mygala.in.
- 1.1.6 Other Voluntary Data: Any additional information you choose to share, such as survey responses or preferences.
- 1.2 Automatically Collected Information
- 1.2.1 Device and Usage Data: IP address, browser type, device identifiers, access times, pages viewed, links clicked, and location data (e.g., for Google Maps integration).
- 1.2.2 Log Information: Details about your interactions with the Service, including mouse movements, non-sensitive text entries, and navigation patterns.
- 1.2.3 Cookies and Tracking Technologies: We use cookies, web beacons, and similar tools to enhance functionality, analyze usage, and personalize experiences. Most browsers accept cookies by default, but you can modify settings to reject them. Note that disabling cookies may affect Service availability.
We do not collect sensitive personal data (e.g., financial details beyond payments, health information) unless necessary and with your explicit consent.
2. How We Use Your Information
We use collected information for the following purposes:
- 2.1 To provide and maintain the Service, including creating and sharing digital invites, managing RSVPs, facilitating gift contributions, and enabling shared albums.
- 2.2 To process payments for premium features and notify you of changes to pricing or features.
- 2.3 To support Vendors by enabling branded invites, direct contacts (e.g., WhatsApp or calls), and lead generation without commissions.
- 2.4 To improve the Service, such as analyzing usage patterns, troubleshooting issues, and developing new features.
- 2.5 To communicate with you, including sending updates, notifications, promotional materials (with your consent), and responding to inquiries.
- 2.6 For security and fraud prevention, including monitoring for unauthorized access.
- 2.7 To comply with legal obligations, such as under the DPDP Act or other applicable laws in India.
- 2.8 For marketing and analytics, like understanding user preferences and conducting surveys.
We process data based on lawful grounds, including your consent, contractual necessity, legitimate interests (e.g., improving the Service), and legal requirements.
3. How We Share Your Information
We do not sell your personal information. We may share data in these limited ways:
- 3.1 With Service Providers: Third parties like payment processors, cloud storage providers, analytics tools (e.g., Google Analytics), and IT infrastructure services that help operate the Service. These providers are bound by confidentiality and data protection agreements.
- 3.2 For Vendor Features: If you are an invitee, your contact details may be shared with Vendors for direct communication, as facilitated by the invite.
- 3.3 Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, with notice provided where required.
- 3.4 Legal Compliance: To comply with laws, respond to legal requests, or protect our rights, users, or the public (e.g., in cases of fraud or safety threats).
- 3.5 With Your Consent: For any other purpose you explicitly approve, such as sharing event photos in shared albums.
We may disclose anonymized or aggregated data that does not identify individuals.
4. Data Security and Retention
We implement reasonable organizational and technical measures to protect your information from unauthorized access, loss, or alteration. However, no system is completely secure, and we cannot guarantee absolute protection against breaches. We retain your data only as long as necessary for the purposes outlined in this Policy, or as required by law. For example:
- 4.1 Account data is kept while your account is active and for a reasonable period after closure.
- 4.2 Usage logs may be retained for analytics for up to 2 years.
- 4.3 We anonymize data where possible after the retention period.
If you request deletion, we will erase your data unless retention is legally required.
5. Your Rights and Choices
Under applicable laws like the DPDP Act, you have rights regarding your personal data, including:
- 5.1 Access: Request a copy of your data.
- 5.2 Rectification: Correct inaccurate information.
- 5.3 Erasure: Request deletion of your data (subject to exceptions).
- 5.4 Objection: Opt out of certain processing, like marketing communications.
- 5.5 Portability: Receive your data in a structured format.
- 5.6 Withdraw Consent: Revoke consent at any time, without affecting prior processing.