Privacy Policy

Last updated: 2026-10-09

This policy explains how WishMelo collects, uses and protects your information in line with India’s Digital Personal Data Protection Act, 2023.

What we collect

• Names and messages typed into the surprise
• Photos uploaded
• Optional email for the receipt
• Payment status from Razorpay (we never see or store card or UPI details)
• Device and usage analytics (PostHog)
• Advertising measurement (Meta Pixel and Conversions API)

Why we collect it

To build and deliver the surprise, process payment, provide support and measure ads.

Who can see the surprise

Only people with the private link. Links are not listed or searchable.

Photos and location data

We remove location data from uploaded photos as part of the upload pipeline.

Retention

• Unpaid drafts and their photos are deleted after 30 days
• Delivered surprises stay until the link expires (90 days or 1 year by package) plus 30 days, then are deleted
• Payment records are kept as required by law

Your rights

You can request access, correction or deletion of your data by emailing us. Grievance officer: [NAME] ([EMAIL]).

Children

Users must be 18 or older, or use the service with a parent’s permission.

Contact: [SUPPORT EMAIL]