Privacy Policy

Depending on how you use SurpriseVerse, we may collect:

• Your name and email address where requested.
• Sender and recipient names, occasion details, dates, personalisation choices, and personal messages.
• Photos, music, audio notes, and other content you choose to upload.
• Order IDs, payment references, transaction status, and related support records.
• Receiver response choices in interactive experiences that support a response.
• Basic technical and security information, such as request logs, device or browser details, and information used to prevent misuse.
• On public marketing, catalogue, and sample-demo pages only, Google Analytics may process a query-free page path and standard technical analytics signals such as browser, device, approximate region, and cookie or client identifiers.

We use this information to create and deliver your personalised surprise, verify email OTPs, process and reconcile payments, send order and delivery messages, provide support, prevent abuse or fraud, and maintain the service.

We use public-page analytics to understand aggregate visits and improve the public website. Analytics is disabled on order, payment, tracking, private surprise, and administrative routes, and analytics page locations omit query strings and URL fragments.

Marketing consent is optional. Transactional messages may still be necessary to verify, fulfil, support, or deliver an order.

Payment-card and UPI credentials are handled by Razorpay and are not stored directly by SurpriseVerse. We may retain payment references and status information needed to confirm and reconcile a transaction.

We use service providers including Razorpay for payments, Supabase for database and file storage, Resend for transactional email, Vercel for website hosting, and Google Analytics for aggregate use of public pages. These providers process information under their own terms and privacy policies.

Uploaded content may include personal information about another person. By submitting it, you confirm that you have the right or appropriate permission to use that material for the requested surprise.

Each delivered page uses an unlisted private link. Share it only with intended people: anyone who receives or obtains the link may be able to open the page.

• Standard surprise pages remain active for 3 months from publication.
• Premium surprise pages remain active for 6 months from publication.
• Custom hosting and retention are agreed separately.

Order and operational records may be retained longer where reasonably needed for support, fraud prevention, accounting, dispute handling, or legal obligations. Expiry of a hosted page does not necessarily cause immediate deletion of every related operational record.

You may ask us to correct or delete information where reasonably available and legally permissible. Some records may need to be retained for legitimate operational or legal reasons.

You can limit public-page analytics through browser privacy controls, cookie controls, content blockers, or Google's available analytics opt-out tools.

To make a request, contact us using the method below and include enough order information for us to identify the relevant record.

We use reasonable technical and organisational safeguards, but no online service can guarantee absolute security.

SurpriseVerse does not knowingly seek personal data from children without appropriate adult involvement or permission. If you believe a child's information was submitted inappropriately, please contact us.

We may update this policy as the service or legal requirements change. The latest version and update date will appear on this page.

Send privacy questions to orders@surpriseverse.in.