Skip to content

Data Processing & Retention Policy

Last Updated: July 1, 2026

1. Scope & Definitions

This Data Processing & Retention Policy (DPRP) describes how DigiVite.in manages personal data storage, limits retention windows, and purges obsolete invitation records. This policy applies to all accounts, uploaded media assets, RSVP logs, guestbook comments, and diagnostics stored on our application servers.

2. Data Processor and Fiduciary Designations

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India:

  • Data Fiduciary: DigiVite is the Data Fiduciary for account holder details (name, email, password, and transaction logs) and affiliate profile applications.
  • Data Processor: DigiVite acts as a Data Processor for guest RSVP logs, guestbook messages, and invitation customizations. The registered host is the primary Data Fiduciary for their specific invitation's guest list.

3. Storage & Location

All database tables (users, invitations, RSVPs, guestbook entries, transactions, and logs) are hosted on secure database servers. Media assets, including custom photos and background music files (MP3), are stored in write-restricted server directories (secure_uploads/). Unauthorized access attempts are automatically audited and logged.

4. Data Retention Schedule

We do not store personal data longer than necessary for the operational lifecycle of invitations or legal obligations. We enforce the following retention windows:

Data Category Retention Period Purging Action
Active User Accounts Duration of account active use Retained until account deletion request is finalized.
Inactive Free Accounts 12 months of consecutive inactivity Automated account removal and associated invitation purging.
RSVP & Guest Logs 90 days past designated event date Automated database truncate/deletion for that invitation ID.
Uploaded Photos & Music 90 days past designated event date Hard filesystem deletion from secure_uploads/.
System Log entries 30 days from creation date Automated rolling log deletion.
Billing & Financial transactions 7 years (or legal requirement) Archived database tables kept for accounting audits.

5. Data Deletion & Erasure

Hosts can request complete account deletion at any time via the Account Deletion Page. Deletions are processed and finalized within 15 days in compliance with DPDP guidelines. Guests wishing to have their RSVP data deleted prior to the 90-day automatic purge should contact the respective event host, or submit a request to our compliance team at compliance@digivite.in.