Privacy policy

What we collect

• What you put in a gift: names, the letter and other words, photos, a voice note, and settings such as the theme, the opening time and the recipient’s time zone. A secret word is stored only in a scrambled form we can’t read back.
• Your phone number or email from checkout, for your receipt and to help you find your link again.
• Payment details from Razorpay: the payment ID, amount, status and the UPI reference. We don’t receive your card number, UPI ID or bank details.
• Replies the recipient sends you, and reports anyone sends us about a gift.
• If you sign in with Google (when available): your name, email and profile picture.
• Technical data: our servers keep short logs of requests (time, page, result) without your IP address. We use your IP address briefly, in memory, to stop abuse such as too many attempts; for reports we keep only a scrambled version of it.
• Usage counts: which steps of making a gift were reached (for example “opened the preview”, “paid”, “shared”), tied to a random number stored on your phone, never to your name, contact details or what the gift says. We count these ourselves; no analytics company is involved.

What stays on your phone

While you make a gift, your draft, photos and voice note are kept in your browser on your phone, together with a key that lets that phone change the gift, and the random number used for usage counts. Clearing your browser data removes them from the phone.

If your browser asks sites not to track you (Global Privacy Control or Do Not Track), we don’t record usage counts.

Why we use it

• to make your gift and show it to the people who open its link;
• to take payment and send your receipt, and to help you find your link;
• to keep Greetroot safe: limit abuse, act on reports and take down gifts that break our Terms;
• to fix problems and improve Greetroot, including counting how many people reach each step of making a gift.

We don’t sell your data, and we don’t use it for advertising.

Your consent, and the people in your gift

By making a gift you consent to us handling this data for these purposes. A gift usually includes details about someone else (their name, photos, your words about them): only add what you are sure they would be happy to share, and you can ask us to remove it at any time.

Who we share it with

Only service providers that run Greetroot for us, under contract, and only what they need:

• Razorpay, for payments;
• Cloudflare, which hosts the website and stores photos and voice notes;
• Fly.io and Supabase, which run our server and database in Singapore;
• Sentry, which receives error reports (what went wrong in the code, never a gift’s words, photos or link);
• Google, if you choose to sign in with Google.

Our server and database are in Singapore, and Cloudflare and Sentry may handle data in other countries, so your data is stored outside India. We may also share data when the law requires it.

How long we keep it

• Drafts that are never paid for: deleted, with their photos and voice notes, 30 days after they were last changed.
• Paid gifts: live for 90 days (or for as long as Greetroot runs with “Keep it forever”). Photos and voice notes are deleted 30 days after a gift expires.
• Payment records: as long as tax and accounting law requires.

Cookies

We use only the cookies Greetroot needs to work: one remembers your language (a year), one keeps a gift unlocked after you enter its secret word (12 hours), and one keeps you signed in if you sign in (30 days). No advertising or tracking cookies.

Your rights

You can ask us for a summary of the personal data we hold about you, to correct it, or to erase it (including a gift’s photos and voice notes before it expires). You can also withdraw your consent, nominate someone to act for you, and complain to us or to the Data Protection Board of India.

Write to [TODO: support email]. We may ask you to show that the gift is yours, for example with its payment reference.

Security

Photos and voice notes are stored privately and shown only through links that expire after a few hours. Connections are encrypted. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Children

Only adults can buy gifts. Gifts are often made for children; the adult who makes one is responsible for what it contains and who they send it to.

Grievance Officer

[TODO: grievance officer name], [TODO: legal name], [TODO: postal address]. Email: [TODO: support email]. We reply within 7 days and resolve complaints within 30 days.

Changes

We may update this policy; the date at the top shows the latest version. If a change matters for gifts already made, we will say so on the website.