Privacy Policy

Welcome to GiftThem (“we”, “us”, or “our”), operated by Hipartner Technologies. We provide digital event planning, bespoke online invitations, live RSVP headcounts, vendor discovery, and secure gift settlement infrastructure.

Our Fundamental Promise: We believe celebration data is private. We neversell, rent, or trade your guests' phone numbers, names, or attendance information to telemarketers, third-party advertisers, or data brokers.

We collect information only to facilitate your events and invitations:

• Event Host Details: Name, phone number, email address, event dates, venue coordinates, and verified UPI Virtual Payment Address (VPA) or bank details for direct cash gift settlement.
• Guest RSVP Information: Guest names, contact numbers, headcounts, and dietary preferences submitted voluntarily when responding to an invitation.
• Event Memories & Media: Photos and videos uploaded by hosts, wedding photographers, or celebration guests to private event PhotoDump galleries.
• Face Templates: When a photo is added to an event gallery, we record a numeric template for each face in it so guests can find their own photos. A template is a list of numbers, not a picture. Selfies used for searching are compared once and never stored.
• Transaction Metadata: Unique Transaction Reference (UTR) numbers, timestamps, and payment status. We never see or store card PINs, CVVs, or internet banking passwords.

Your data is utilized solely for lawful purposes to deliver platform features:

• Delivering WhatsApp, SMS, and digital web invitations to your invited guests.
• Calculating and displaying real-time RSVP headcounts on your host dashboard.
• Generating personalized UPI QR codes for direct gift settlements into your account.
• Enabling AI face recognition within private PhotoDump galleries so guests can easily find their own photos.
• Connecting you with verified service providers upon your explicit request.

Event galleries are private. A shared folder link or QR code does not show any photo by itself:

• Sign-in required: Anyone opening a shared folder must register or sign in first. Event photos are only delivered to signed-in people who are allowed to see them, and are never cached by browsers or shared networks.
• Who can see photos: the event host, the photographers attached to the event, the person who uploaded a photo, and guests a folder was shared with, who see only the photos they appear in, plus anything they upload themselves.
• How face search works: a guest takes a selfie or chooses a photo, with their consent. We compare it with the face templates of the folders shared with them, show the matching photos, and discard the selfie. The list of matching photos is remembered for 30 days so the guest can return to them.
• Where it runs:face detection and matching run on GiftThem's own servers. We do not send faces to any outside face-recognition service.
• Limits on use: face templates are used only to find photos within the same event. They are never shared with third parties, government databases, or advertisers, never sold, and never used to identify people across events.
• Deletion:a photo's face templates are deleted when the photo is deleted. Anyone may ask us to remove the face templates of photos they appear in by writing to our Grievance Officer below.
• Hosts: by enabling shared folders, hosts confirm they have informed their guests that event photos may be searched by face.

We employ multi-layered technical safeguards to prevent unauthorized access or disclosure:

• Encryption in Transit: All data is transmitted using modern TLS 1.3 encryption.
• Encryption at Rest: Database backups and media storage are encrypted using AES-256.
• Access Control: Strict role-based access control (RBAC) ensures only authorized staff can access server logs for troubleshooting.
• Private Event Media: Event photos and videos are served only to signed-in users with permission for that event or folder.

In full accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act), you possess the following rights:

• Right to Access & Summary: Request a complete summary of personal data held about you.
• Right to Correction & Erasure: Modify inaccurate details or permanently delete your event, guest list, and albums with one click.
• Right to Grievance Redressal: Direct access to our designated Grievance Officer.

In accordance with the Information Technology Act 2000 and the Rules made thereunder, the contact details of our Grievance Officer are provided below: