Privacy policy

Momen9 has two kinds of people. Hosts create an account and run a celebration. Guests never create an account; they open a personal link a host sent them.

When a host uploads a guest list, that host decides what to collect and who to invite. We hold and process it on their behalf. If you are a guest and want your details removed, the fastest route is to ask the host, and you can also write to us.

• Your Google account: name, email address and Google's account identifier. Sign-in is Google only, so we never receive, store or check a password.
• Your celebrations: titles, dates, venues, invitation content, themes and settings.
• Your guest list: whatever you add, typically names and phone numbers, sometimes email addresses, relationships and private notes.
• Payments: the plan, the amount and the payment reference. Card and UPI details go directly to our payment provider and never reach our servers.
• Technical records: sessions, and an audit log of significant actions with the IP address and browser that made them.

• Your RSVP: whether you are coming, party size, dietary notes and any answers you give.
• Anything you choose to add: wishes, photos, quiz and poll answers.
• That your invitation was opened, so the host knows their message arrived.

You are never asked to create an account, set a password, or install anything. Your invitation link is the only credential involved.

• We do not sell, rent or share guest lists with anyone.
• We do not show advertising to hosts or to guests, and nothing on an invitation or a memory page is shared with an advertising platform.
• We do not show one guest another guest's phone number, email address or private notes. A guest link shows that guest their own invitation and nothing else.
• We do not put personal details into our own usage statistics. Those record that something happened, never who it happened to.

On invitations and memory pages we use only strictly necessary cookies, and no advertising or tracking cookies at all. Across the site there are three of those.

• A sign-in cookie for hosts, so you stay signed in. It expires after thirty days of inactivity and ninety days regardless.
• A guest cookie set when you open your invitation, so the celebration knows it is still you when you reply. It lasts twelve hours.
• A sign-in handshake cookie that exists for ten minutes while Google confirms who you are.

The rest of the site (the home page, occasion pages, the demo, the sign-in pages and the host dashboard) also carries the Meta Pixel, which sets a _fbp advertising cookie lasting ninety days. It lets us measure and show Momen9 ads on Facebook and Instagram to people who have visited those pages. You can block it with your browser's cookie settings or an ad blocker, and manage how Meta uses it in your Facebook or Instagram ad preferences.

We use a small number of providers, each for one job. They act on our instructions and do not get your data for their own purposes.

• Google, for host sign-in. We ask only for your name, email address and that the address is verified.
• MongoDB Atlas and Amazon Web Services, for the database and for photo storage, hosted in India.
• Cashfree Payments, for payments. They handle the card or UPI details; we receive only the outcome.
• OpenAI, when a host asks the assistant to draft invitation copy, a festival wish or a memory story. Only what is needed for that draft is sent, guest contact details are never part of it, and we ask that nothing be stored after the reply.
• Google Analytics, on the public pages of this site only: never on an invitation, a memory page or the host dashboard. It runs without cookies, so it counts visits to a page rather than following a person from one visit to the next.

One provider is different: Meta Platforms, through the Meta Pixel. Meta receives which pages of this site were visited, along with the browser details and cookie it uses to recognise the visitor, and uses them under its own privacy policy, including for advertising. In the host dashboard it is told only the page address, never what is on the page or typed into it, so it never sees a guest list. It is never loaded on an invitation or a memory page.

• Celebration and guest data stays until the host deletes the celebration or the account.
• A revoked or rotated guest link stops working immediately and cannot be brought back.
• Records of assistant drafts are deleted automatically after ninety days.
• Usage statistics, which contain no personal details, are kept to understand how the product is used.

• Everything travels over HTTPS.
• Guest links are long random values. We store only a one-way hash, so a copy of our database does not hand anyone a working invitation link.
• Photos are served through links that expire, not from a public folder.
• Significant actions are recorded in an audit log, so a host can see what changed and when.

Write to techsatish4u@gmail.com from the address you signed in with, and you can ask for a copy of what we hold, a correction, or deletion of your account and everything in it. We will confirm within thirty days.

Hosts can delete a celebration at any time from the dashboard, and can revoke a single guest link from the guest list.

Momen9 is not intended for children under thirteen, and we do not knowingly create accounts for them. Children are of course often guests at celebrations. In that case their details are added by an adult host, who is responsible for having a reason to share them.

If this policy changes in a way that matters, we will say so on this page and update the date at the top. Continuing to use Momen9 after that means the new version applies.

Questions about any of this go to techsatish4u@gmail.com, or see the terms of service.