Privacy Policy

1. Who operates Sandeesa

Sandeesa is a Pakistan-based digital invitation and software service operated by Abdul Rehman. This policy applies to the website at https://sandeesa.com and the related invitation, account, studio, RSVP, guest-management, and support services.

Questions or privacy requests can be sent to sandeesa.official@gmail.com.

2. Information we collect

Depending on how you use Sandeesa, we may collect:

• account details, including name, email address, phone number, and sign-in records;
• order and support details, including package, amount, payment reference, receipt or payment-proof upload, and correspondence;
• wedding and event content, such as names, dates, venues, photographs, audio, stories, and design choices;
• guest information uploaded by a customer, including names, contact details, invitation permissions, household details, and notes;
• RSVP information submitted by guests, including attendance, party details, meal or event responses, and messages;
• technical information such as IP address, browser type, device information, security logs, cookie identifiers, and pages used; and
• transaction status supplied by a payment provider. Payment providers process payment credentials under their own terms and privacy notices.

Please do not send full card numbers or card security codes to Sandeesa by email, support message, or payment-proof upload.

3. How we use information

We use information where reasonably necessary to:

• create accounts, orders, invitations, guest links, and event-specific access;
• publish and deliver the digital service requested by the customer;
• collect and display RSVPs to the relevant event host;
• process or verify payments, prevent fraud, and maintain transaction records;
• provide support, communicate service updates, and resolve complaints;
• secure, troubleshoot, maintain, and improve the platform; and
• comply with applicable law, lawful requests, and accounting or dispute obligations.

We do not sell personal information. We do not use a customer's guest list to market unrelated services directly to those guests.

4. Customers and guest information

Customers decide what guest information to upload and which events each guest may see. Customers must have a lawful and appropriate reason to provide that information and must use it respectfully. Sandeesa processes guest information to provide the invitation and RSVP service on the customer's instructions.

Private links are access credentials. Recipients should avoid forwarding them unless the event host permits it. No internet transmission or access control can be guaranteed to be completely secure.

5. When information is shared

We may share only the information reasonably needed with:

• hosting, database, storage, authentication, email, analytics, and security providers;
• payment providers, including Safepay when it is offered at checkout, and the financial institutions involved in a transaction;
• the customer or event host responsible for an invitation, including RSVP responses intended for that host;
• professional advisers where necessary to obtain legal, accounting, or security assistance; and
• public authorities or other parties when required by law or necessary to protect users, the service, or legal rights.

Some providers may process information outside Pakistan. In those cases, information is handled under the provider's safeguards and applicable legal requirements.

6. Public invitations, private invitations, and links

A customer may choose to publish an invitation publicly or restrict it using a private guest link. Content on a public invitation can be viewed and shared by anyone who reaches it. A private link limits ordinary access but should not be treated as a guarantee that a recipient will keep its contents confidential.

Invitations may link to maps, calendars, messaging services, Wallet passes, or other third-party services. Those providers apply their own privacy practices.

7. Cookies and similar technology

Sandeesa may use essential browser storage and cookies for authentication, security, invitation access, preferences, and core functionality. Additional measurement tools, if enabled, are used to understand service performance. Browser settings can limit cookies, but doing so may prevent account or invitation features from working correctly.

8. Retention and security

We retain information for as long as needed to provide the service, maintain legitimate business and transaction records, resolve disputes, enforce agreements, and meet legal obligations. Retention can differ by record type. Backups and security records may remain for a limited period after active data is removed.

We use reasonable administrative and technical safeguards, including access controls and protections appropriate to the service. Customers are responsible for protecting account credentials and private invitation links.

9. Your choices and requests

You may ask to access, correct, export, or delete personal information associated with you. You may also object to or ask questions about particular processing. We may need to verify identity and may retain records where required for security, transactions, disputes, or law. A guest may contact the relevant event host or Sandeesa regarding RSVP information.

10. Children

Sandeesa is sold to adults arranging events and is not directed to children as account holders. Customers should avoid uploading information about children unless it is appropriate and they have authority to do so.

11. Changes and contact

We may update this policy as the service or legal requirements change. The date above identifies the current version. Material changes will be communicated through an appropriate service notice where reasonably possible.

Privacy questions and requests: sandeesa.official@gmail.com.