Privacy policy

What we collect, and why

Photographs you upload

To display them on the page you are making. We do not analyse them, do not use them to train anything, and do not show them to anyone who does not have your link.

Names and messages you write

To render your page. This is the content of the gift itself.

Your email address

Collected at payment to send your page and management link, and to warn you before expiry. If you later choose account access, the same verified email is used to find your purchases. We do not send marketing to it unless you ask.

Payment metadata

Amount, currency, order and payment identifiers, and status. We never see or store your card number, UPI PIN or bank credentials — those go directly to our payment processor. A record of the purchase is kept for as long as we are required to keep business records, and outlives the page itself.

Usage analytics

Which template you chose, which step you reached, and whether you finished. Used to find where people get stuck. Analytics use a per-visit identifier that is discarded when you close the tab; we do not store your IP address. No analytics cookie is set and no profile is kept. If you arrive through one of our campaigns, four short campaign codes may be kept only in that tab until you close it and, if you buy, stored with the order so we can tell whether the campaign worked. We never store search terms, advertising click IDs or a browser identifier that outlives the tab.

A draft token in a cookie

A random value that lets your browser return to its own unfinished draft. It is not linked to your identity and is strictly necessary for the service to function.

Where it is stored

Your database records are held in Supabase’s Mumbai (ap-south-1) region. Photographs are held in Cloudflare R2 object storage.

We use the following processors, each for one purpose:

Supabase

Database hosting (Mumbai region).

Open-source components

Some of the software we include is open source. The ones whose licences ask for it are listed, with links to their source, at /notices.

Netlify

Application hosting and website delivery.

Cloudflare (R2)

Photograph and audio file storage.

Razorpay

Payment processing. They handle card and UPI details, not us.

Resend

Sending your delivery email.

Google or Meta sign-in

Only if you choose their optional sign-in button after purchase. We receive the verified email needed to find purchases; we do not request contacts, posts or advertising access.

PostHog

Usage analytics, in a form that sets no cookie and keeps no profile of you. Analytics use a per-visit identifier that is discarded when you close the tab. We never attach your IP address to an event ourselves, and we ask PostHog to discard the address it observes; because that discard is a setting on their side rather than something our code can prove, we describe it as what we have asked for rather than as a guarantee. Approximate city and country, derived at their end before the address is discarded, may be retained — neither identifies you.

AI writing providers

Message drafting: if you press "draft it for me", we send the relationship, the occasion and the first names you typed to a third-party language model. Nothing you wrote is included. Lyric writing: if you ask for a lyric concept, we DO send the words you wrote on the page, along with those names and your four musical choices — words of yours cannot be set to music without them. Example text you have not edited, your photographs, your email address and your page address are never sent in either case. If you use neither button, nothing is sent.

Google, for the recording

Only if you ask for an audible sample or buy the page-and-recording bundle, and only after you tick the consent box on that screen. We send the approved lyrics and your four musical choices. We do not send your photographs, your email address, your names as a separate field, or your page address. The recording is stored with your page and is deleted when the page is deleted or expires.

Google Lyria music generation

Only if you first create a lyric concept, confirm you are 18 or older and consent to the transfer. We send the generated lyrics and the genre, feeling, voice and language choices to Google to create the sample and, if you buy the page-and-song bundle, one full recording. We do not send photographs, your email address or the rest of the page. A sample is returned only to the current browser tab. A purchased full recording is stored with the page and removed with it.

How long we keep it

• Unfinished drafts: deleted 30 days after you last touch them.
• Published paid pages: 365 days from publication, unless you renew or delete them sooner.
• Free pages: 7 days.
• Pages made in memory of someone: the same 365 days, but renewing is free and always will be.
• Photographs: deleted with the page they belong to.
• Unpaid song lyrics and music choices: deleted with an abandoned draft, normally 30 days after you last touch it.
• Purchased song lyrics and music choices: cleared after the recording succeeds; if it repeatedly fails, they are kept only while support can retry it and are cleared after 30 days.
• Purchased recordings: deleted with the page they belong to.
• Payment records: retained as long as Indian tax and accounting law requires, after which they are deleted.

Your rights

Under the DPDP Act you may ask for access to your personal data, correction of it, and its erasure. You may also withdraw consent you previously gave.

Two ways to exercise them:

• Use the private management link emailed to you when your page was created. It lets you edit the page or delete it permanently, immediately, without contacting us. This is the fastest route and needs no login.
• Or write to hello@fondtale.com from the address you used at checkout. We respond within 30 days.
• We set no analytics cookie. Analytics use a per-visit identifier that is discarded when you close the tab; we do not store your IP address. Campaign codes, when present, are limited to the same tab. If you would still rather we counted nothing at all, write to us and say so.

Grievance officer

If you are unhappy with how we have handled your personal data, you may complain to our Grievance Officer, as required under the DPDP Act and the Consumer Protection (E-Commerce) Rules, 2020:

Name

Atul Singh

Email

hello@fondtale.com

Address

Brigade Parkside East, Carmelaram, Chikkakannalli, Karnataka 560035

Response time

We acknowledge within 48 hours and resolve within 30 days.

Children

This service is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, write to us and we will delete it.

What we do not do

• We do not sell your personal data.
• We do not have a public gallery, and we never will. Pages are unlisted by default and search engines are instructed not to index them.
• We do not use your photographs or messages to train machine-learning models.