Who is responsible
A. Mustaq Ahmed is the owner and data controller for this private wedding website. Questions, access requests, corrections, and deletion requests may be sent to mustaqahmed.althafhussain@gmail.com.
Information the website may collect
- RSVP details such as name, contact information, attendance, guest count, family side, travel origin, an optional message, consent choices, and certificate delivery preferences.
- Guest uploads and recordings, including filenames, folder paths, file type, size, uploader details, transfer status, and Google Drive identifiers.
- Optional analytics and security information after consent, including a random session identifier, page paths without query strings, allowlisted interaction events, IP address, coarse location, timezone, and a bounded user-agent string.
- Optional precise location only when a guest deliberately selects that RSVP feature and grants browser permission.
- Optional gift-intention details. This website does not collect card, bank-account, PayPal, or UPI credentials.
- AI concierge questions and limited recent conversation context when the AI provider is enabled.
- Email and WhatsApp delivery status, provider message identifiers, and bounded provider errors when a guest requests certificate delivery.
Why information is used
- To manage invitations, RSVPs, certificates, guest communications, travel guidance, uploads, recordings, the approved gallery, livestream access, and wedding-day operations.
- To protect the service against abuse, diagnose failures, maintain auditability, and understand consented, high-level guest journeys.
- To answer guest questions through the AI concierge and to provide services a guest deliberately requests.
Service providers and external links
The website may use Vercel for hosting, Supabase/Postgres for private application records, Google Drive and Google Sheets for owner-controlled archives and exports, Gmail for email delivery, Meta WhatsApp for requested messages, Google Analytics 4 and PostHog for consented analytics, OpenAI for the AI concierge when enabled, and YouTube or Google Maps only after a guest opens those features.
PayPal, UPI applications, airlines, railways, accommodation providers, map services, and tourism websites are independent external services. Their own privacy terms apply after a guest follows an external link.
Consent and analytics
Optional analytics providers are not initialized before consent. Declining is remembered on the device so the prompt does not repeat. Guests can reopen the analytics preference from the Privacy & Security module. Legal, certificate, admin, and status routes are excluded from application analytics.
The application sends only allowlisted event names and bounded properties to analytics providers. It does not attach RSVP messages, names, phone numbers, email addresses, invitation codes, precise locations, or payment details to analytics events.
Storage and retention
- RSVP and analytics network metadata is marked to expire after 30 days, and allowlisted first-party analytics events after 180 days.
- Guest media is uploaded directly to the owner's private Google Drive archive. It is kept until the owner deletes it or completes a verified deletion request; nothing is published automatically.
- RSVP, certificate, gift, delivery, and operational records may remain for wedding administration until they are no longer needed or a verified request is completed, subject to legal and security requirements.
- Infrastructure and external providers may retain separate security, delivery, or access logs under their own policies and account settings.
Security and sharing
Private records are accessed through server-only credentials and owner-protected administration. The website does not sell personal information. Information is shared only with the providers needed to deliver a requested feature, to protect the service, or when legally required.
No internet service can promise absolute security. Guests should not upload passwords, one-time codes, payment credentials, identity documents, or unrelated sensitive files.
Your choices and requests
You may ask to access, correct, or delete identifiable information by following the instructions at https://mustaqfaayiza.com/data-deletion or emailing mustaqahmed.althafhussain@gmail.com. The owner may ask you to verify the same contact information used for the RSVP or upload before acting on a request.