Privacy Policy
Effective since 30 June 2026
Aditya Invitation (Usaha Perorangan) respects your privacy and is committed to protecting personal data in accordance with Indonesia's Law No. 27 of 2022 on Personal Data Protection (the PDP Law). Under this policy, we act as the Data Controller.
1. Data We Collect
- Orderer data: name, email, and WhatsApp number (for delivering the invitation & order communication).
- Invitation content: the couple's names, parents' names, event details, stories, and photos you upload.
- Guest data: names, attendance confirmations (RSVP), and wishes guests send through the invitation page.
- Transaction data: payment status from the payment provider (we do not store your card/payment-account details).
2. Legal Basis & Purpose
We process data based on your consent, for the purposes of: creating and publishing the invitation, sending the invitation link to your email, processing payment, and displaying guest RSVPs and wishes on the invitation page.
3. Third-Party Providers (Data Processors)
We use trusted third-party services that process data on our behalf:
- Supabase — database & file storage.
- Midtrans — payment processing.
- Resend — email delivery.
- Vercel / Cloudflare — hosting & content delivery.
4. Responsibility for Guest Data
If you enter guest names (e.g. to personalize links), you confirm that you have a lawful basis to share that data. You are responsible for the third-party data you enter into the invitation.
5. Storage & Security
Data is stored securely with restricted access and encrypted connections (HTTPS). We apply reasonable technical and organizational measures to prevent unauthorized access, leakage, or destruction of data.
6. Retention Period
Invitation data is kept for the invitation's active period (up to 4 months after the event date, depending on the package) and a reasonable period afterward for administrative purposes, after which it may be deleted or anonymized. You may request earlier deletion (see Your Rights).
7. Your Rights as a Data Subject
Under the PDP Law, you have the right to:
- Access and obtain a copy of your data.
- Correct inaccurate data.
- Request deletion of your data.
- Withdraw consent you have given.
Requests can be submitted via the contact below.
8. Incident Reporting
In the event of a personal-data protection failure, we will endeavor to notify the data subject and the authorities in accordance with the PDP Law.
9. Policy Changes
This policy may be updated from time to time. Changes will be published on this page with an updated effective date.
10. Contact
For privacy questions or to exercise your rights, contact WhatsApp 085117119320.