This policy explains what personal data PEXLUMI collects, why, how long we keep it, who we share it with and the rights you have. It is written for the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and for the Information Technology Act, 2000 and its rules.
- Only what we needThe details you send us to make your invitation or song, and the little our website needs to work.
- Never soldWe do not sell your data or use it for advertising.
- Your guests tooRSVP replies go to you, the host, and are deleted after your wedding.
- Not kept foreverInvitations, songs, photos and working files are deleted after your celebration.
- You stay in chargeAsk for a copy, a correction or deletion, or withdraw consent at any time.
- Real peopleA named person answers privacy questions and complaints.
Who we are
PEXLUMI (“we”, “us”) makes digital invitations, mainly animated invitation websites for Indian weddings, and custom songs, and runs pexlumi.com. PEXLUMI’s address is Mangal Marbles, Subhash Ganj, Dabra, District Gwalior, Madhya Pradesh 475110, India. For the personal data described here, we are the “Data Fiduciary” under Indian law: we decide why and how it is used.
Questions about your data: email contact@pexlumi.com or message us on WhatsApp (the green button on every page). Complaints and the Grievance Officer are in Contact and complaints below.
What we collect and why
We collect personal data only for the purposes below, and only the items listed for each. We will ask you again before using it for anything new.
| What we collect | When | Why | How long we keep it |
|---|---|---|---|
| Your name, mobile number and the messages you send | When you contact us on WhatsApp | To answer you, share the price and timeline, and make your order | 2 years after our last conversation |
| Name, email address, occasion and message | When you use the contact form | To reply to you | 1 year |
| Invitation details: names of the couple and families, dates, times, venues, dress codes, photographs, chosen music, wording | When you send them for your invitation | To design, preview, publish and fix your invitation, and to email you how it is coming along | While your invitation is online, then 6 months after your last function; sooner if you ask |
| Song requests: your name, WhatsApp number and email (if you give them); for each song, the occasion, a title, the names of the people and families in it, your choices (language, beat, mood, voice, who will dance and their age group), lyrics you paste, your notes and the date you need it; your invitation order number if you claim an offer | When you send the song form | To make your song, send you the preview and the final song, and check an offer | 6 months after we deliver your song; sooner if you ask |
| Your finished song (MP3) | When we deliver it | So we can send it again if you lose it | 6 months after delivery |
| Files you upload through our website (photos, documents, lyrics) | When you upload them for an order or a song | To make your invitation or song | Kept privately and deleted automatically 30 days after your order is delivered |
| Your Pexlumi account (optional): your name, email address and profile picture from Google, and which orders are yours | When you choose “Continue with Google” | To show your invitations, their progress and your details in one place | Until you delete your account; deleted automatically 2 years after your last sign-in if no order of yours is left with us |
| Your guests’ RSVP replies: name, email address, whether they are coming, number of guests, message | When a guest replies on your invitation | To pass the reply to you, the host | Sent to you by email; any copy we hold is deleted 30 days after your last function |
| Order details: billing name, email, phone, address, what you ordered | When online ordering is switched on and you order | To fulfil the order, send invoices and meet tax law | As long as tax and accounting laws require (currently up to 8 years) |
| Technical data: internet address (IP), browser and device type, pages visited, date and time | When you visit pexlumi.com | To keep the website working and secure, and to investigate misuse | 1 year |
Your consent. We use your data because you give it to us for the purpose described: for example, sending your wedding details so we can make your invitation. You can withdraw that consent at any time, as easily as you gave it (see Your data rights). Withdrawing does not affect what we did before, but we may not be able to finish your invitation without the details.
Details about your family and guests
Invitations and songs naturally include other people: family names, photographs and your guests’ replies. When you send us someone else’s details or photo, please make sure they are happy for it to appear on your invitation or in your song. Guests who reply on an invitation can ask us to delete their reply at any time.
Who can see your invitation. Your invitation is a web page that anyone with its link can open. We ask search engines not to list it, and we do not link to it from our website. Please share the link only with people you want to invite.
Children
Our services are for adults. For children’s celebrations (for example a birthday or naming ceremony), a parent or guardian sends us the child’s details and photographs and gives consent on the child’s behalf. We use them only to make that invitation or song, never for tracking or advertising, and delete them on the same schedule as other invitation details.
Who we share it with
We never sell personal data. We share it only with the service providers who help us run PEXLUMI, under contract and only for the purposes above:
- Hostinger: hosts our website and email.
- WhatsApp (Meta): carries our chats with you, and delivers your song.
- AI music service: the service we use to make custom songs. It receives only the lyrics and the names that go into your song, never your phone number or email address.
- Google: only if you choose “Continue with Google”. Google confirms who you are and shares your name, email address and profile picture with us. We never see your Google password.
- Payment provider: when we switch on online payment, we will name the provider here. It handles payments; we never see or keep your card or UPI details.
- YouTube and Instagram: show our videos and posts on the website. They receive data only when you play a video or interact with a post (see Cookies).
We may also share data where the law requires it, for example with a court or government authority acting lawfully. Some of these providers store data outside India; we use them only where Indian law allows the transfer.
Cookies
Cookies are small files a website keeps in your browser. pexlumi.com uses:
| Cookie | Why | How long |
|---|---|---|
| Shop session (woocommerce_*, wp_woocommerce_session_*) | Remembers your session and basket when online ordering is on | Up to 2 days |
| Login (wordpress_*) | Keeps you signed in, only if you sign in (our team, or you with Google) | Until you sign out, at most 14 days |
| Google sign-in | Set only while you sign in with Google, to bring you safely back to pexlumi.com | Removed when sign-in finishes |
| YouTube | Set by YouTube only after you tap a video to play it | Set by YouTube |
You can delete or block cookies in your browser settings; the website still works, but a basket may not be remembered. We do not use advertising or tracking cookies.
How we keep it safe
- The whole website uses an encrypted connection (https).
- Only the people working on your order can see your details and photos; uploads are stored privately.
- We keep access records so misuse can be found and investigated.
- Working files are deleted on the schedule above.
If something goes wrong. If a breach affects your personal data, we will tell you without delay: what happened, what it may mean for you and what you can do. We will also report it to the Data Protection Board of India as the law requires.
Your rights
You can ask us for a summary of the personal data we hold about you and how we use it; ask us to correct, complete, update or delete it; withdraw your consent; nominate someone to act for you if you die or cannot act yourself; and complain to us. How to ask is on Your data rights. If you have an account, you can also delete it yourself: My account → My invitations → Delete my account.
Contact and complaints
Complaints: email grievance@pexlumi.com, or submit one online on Your data rights.
Grievance Officer: Nishant Gupta, PEXLUMI, Mangal Marbles, Subhash Ganj, Dabra, District Gwalior, Madhya Pradesh 475110, India. Email nishantgupta@pexlumi.com for escalations.
Legal notices: legal@pexlumi.com.
Complaints submitted online are logged within 48 hours. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use data you have already given us, we will tell you on WhatsApp or by email first.