Privacy Policy

a) Consent-Based Processing:

We process your personal data with your explicit consent in situations such as:

• When you create an account or submit contact details;
• When you upload guest information or documents;
• When you opt in to receive updates, messages, or event-related notifications;
• When you voluntarily connect your account to third-party services (e.g., WhatsApp)

You may withdraw your consent at any time by contactingsupport@planorama.in. Please note that withdrawal may limit your ability to use certain features of the Platform.

b) Performance of a Contract:

We process your data as necessary to fulfill our contractual obligations to you, including:

• Creating and managing your account;
• Enabling event planning, guest management, and RSVP tracking;
• Facilitating communication and payment tracking;
• Providing support and fulfilling service requests.

c) Legitimate Interests:

We process certain data based on our legitimate interests, provided those interests are not overridden by your rights. This includes:

• Improving Platform usability and performance;
• Securing your account and detecting fraud;
• Responding to inquiries or feedback;
• Conducting internal analytics to enhance services.

d) Compliance with Legal Operations:

We may process or retain your personal information to comply with legal and regulatory requirements. This includes:

• Financial record-keeping;
• Fraud prevention;
• Responding to lawful requests from public authorities or regulators.

a) Service Delivery and Core Features

• To create, manage, and maintain your account;
• To enable event setup, guest list management, and RSVP tracking;
• To facilitate secure payment tracking and financial workflows;
• To personalize the RSVP website and event dashboard features based on your preferences.

b) Communication and Notifications

• To send invitations, updates, and reminders via integrated tools (e.g., WhatsApp, email);
• To respond to support inquiries or platform notifications;
• To provide onboarding guidance, service-related messages, or feature updates.

c) Platform Security and Fraud Prevention

• To monitor login activity and access logs;
• To detect unauthorized access, suspicious behavior, or potential misuse;
• To maintain platform integrity and safeguard guest data.

d) Legal and Contractual Compliance

• To retain records for audit, tax, or regulatory purposes;
• To comply with applicable laws (e.g., KYC, financial reporting);
• To respond to lawful requests from public authorities.

e) Experience Optimization and Development

• To analyze how users interact with the Platform and improve navigation, features, and UX;
• To run internal analytics for system performance and load balancing;
• To improve future versions of the product through anonymized behavioral insights.

f) Third-Party Integrations

• To enable optional tools (e.g., WhatsApp bulk messaging or Razorpay payment gateway);
• To ensure these integrations function smoothly and deliver the intended user experience.

a) Data Retention:

We retain your personal information:

• For as long as your account is active and you are using the Platform;
• As needed to deliver services, manage events, or fulfill legal, accounting, or regulatory obligations;
• For a limited period after account deactivation or inactivity (typically up to 12 months, unless otherwise required by law).

b) Deletion Requests:

You may request deletion of your personal information at any time by emailingsupport@planorama.in. We will verify your identity and, where eligible, process the request in a reasonable timeframe.

Please note:

• Certain data may be retained in backups for disaster recovery or auditing purposes;
• We may decline a deletion request if the data is necessary for legal compliance, resolving disputes, or enforcing our rights.

c) Inactivity-Based Deletion:

If your account remains inactive for an extended period (e.g., 12 months), we may deactivate or delete your account and associated data. You will be notified in advance and given the opportunity to reactivate.

d) Account Holder Responsibilities:

If you are an Account Holder who uploads guest or collaborator information:

• You are responsible for managing and deleting such data in accordance with applicable data protection laws;
• Upon deleting your account, associated guest data may also be removed unless otherwise retained under a lawful basis.

e) Impact of Deletion:

Deletion of your personal data may affect your ability to use certain features of the Platform. Once deleted, information cannot be restored.

a) Internal Access (Planorama Employees):

Your information may be accessed by authorized employees of Planorama based on their role—such as support, compliance, or engineering—under strict confidentiality obligations.

b) Trusted Service Providers and Vendors:

We may share your data with third-party service providers who help us operate the Platform, including:

• Payment processors
• Cloud storage and hosting providers
• Analytics and customer support tools

These partners are contractually bound to use your data only for the services they provide and must delete or return data once processing is complete, unless otherwise required by law.

c) Third-Party Integrations (e.g., WhatsApp):

If you use integrated services such as WhatsApp, we may share limited information (e.g., recipient name or ID) to enable those features. You are encouraged to review their respective privacy policies as they process data independently.

d) Legal and Regulatory Disclosures:

We may disclose your information:

• To comply with applicable laws or legal processes;
• In response to court orders, law enforcement requests, or government inquiries;
• To investigate fraud, enforce agreements, or protect the rights and safety of Planorama and its users.

e) With Your Consent or Instruction:

We may share your information when:

• You explicitly direct us to (e.g., enabling a new integration);
• You give permission to share event or guest information with collaborators or vendors.

f) Business Transfers:

If Planorama undergoes a merger, acquisition, asset sale, or corporate restructuring, your information may be transferred as part of that transaction. We will ensure that such transfers are done securely and in accordance with this Privacy Policy.

g) Anonymized Data for Analytics:

We may use or share de-identified or anonymized data for internal research, product development, and system optimization. This data does not identify you or your guests and is used solely for aggregate analysis.

a) Data Storage:

Your data is stored on secure cloud infrastructure provided by trusted third-party hosting providers. Our primary servers are located in India (AWS India Region), with physical and digital security controls in place.

Data is retained only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. Once no longer needed, data is deleted or anonymized securely.

b) Access Controls:

Only authorized Planorama employees and contractors have access to user data, based strictly on job responsibilities. All personnel are bound by confidentiality obligations and undergo training in secure data handling.

c) Security Practices:

We maintain a multi-layered security approach, including:

• Encryption in transit and at rest;
• Role-based access controls (RBAC);
• Network monitoring and threat detection;
• Periodic security audits and vulnerability assessments.

d) Incident Response and Breach Notifications:

Planorama has an incident response plan in place. In the unlikely event of a data breach, we will take appropriate steps to contain the incident, notify affected users (as required by law), and work to remediate any harm.

e) Backups and Disaster Recovery:

Data backups are maintained for system recovery purposes and are automatically deleted after a defined retention period. Backup data is not actively accessed or used.

f) No Absolute Guarantee:

While we implement strong security measures, no internet-based platform can guarantee 100% security. By using the Platform, you acknowledge and accept this inherent risk.

g) Account Holder Responsibility:

As an Account Holder, you are responsible for choosing collaborators carefully and ensuring that access to your event data is granted only to trusted parties.

a) Right to Access:

You have the right to know if Planorama is processing your personal data. Upon request, we must provide you with a copy of the personal data we hold about you, along with details about how we are using it, the purposes of processing, and with whom it has been shared. This right allows you to understand how your data is being used and verify its accuracy. We have already specified this information in this Privacy Policy.

b) Right to Correction:

If you find that any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. This ensures that your information remains accurate and reliable.

c) Right to Erasure:

Also known as the "right to be forgotten", this right allows you to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, if you withdraw your consent (where consent was the legal basis for processing), or if you believe your data is being processed unlawfully. However, this right may be subject to certain exceptions, such as where the data must be retained for legal reasons.

d) Right to Data Portability:

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. This allows you to easily transfer your data to another service provider.

e) Right to Withdraw Consent:

Where the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the legality of processing conducted before your consent was withdrawn. However, withdrawing consent may impact your ability to use certain features of the platform that rely on that data.

f) Right to Grievance Redressal:

If you have concerns or complaints about how your personal data is being handled, you have the right to file a grievance with our Grievance Officer whose details are provided in Section 13 below. We will respond to you within the timeline prescribed under the DPDP Act, 2023, and/or rules framed thereunder.

a) Right to Access:

You have the right to request information about how we process your personal data, and to receive a copy of the personal information we hold about you.

b) Right to Rectification:

You have the right to request the correction or completion of any inaccurate or incomplete personal data we hold.

c) Right to Erasure ("Right to Be Forgotten"):

You may request deletion of your personal data in certain situations, such as:

• The data is no longer necessary for the purpose it was collected;
• You withdraw your consent and there is no other legal basis for processing;
• You object to processing and there are no overriding legitimate grounds;
• The data has been processed unlawfully.

d) Right to Restrict Processing:

You may request that we restrict the use of your personal data where:

• Its accuracy is contested;
• The processing is unlawful, but you do not wish for it to be erased;
• We no longer need the data, but you require it to establish or defend a legal claim;
• You object to processing and we are assessing your request.

e) Right to Object:

You may object to processing based on legitimate interests, including profiling or automated decision-making. We will cease processing unless we can demonstrate compelling legitimate grounds.

f) Right to Data Portability:

Where processing is based on your consent or a contract and carried out by automated means, you may request that we provide your personal data in a structured, machine-readable format, or transfer it to another data controller of your choice.

g) Right to Withdraw Consent:

If processing is based on your consent, you may withdraw it at any time. Please note that withdrawal may limit access to certain features of the Platform.

h) Right to Information on Cross-Border Transfers:

You may request information about the safeguards under which your personal data is transferred outside your jurisdiction.

a) Marketing and Promotional Communications:

If you have subscribed to receive marketing or promotional communications from Planorama, you may opt out at any time by:

• Clicking the "unsubscribe" link included in our emails, or
• Contacting us at support@planorama.in

Even after opting out, you may still receive non-promotional communications related to your account, billing, or ongoing event activity.

b) Third-Party Integrations and Data Sharing:

If you use third-party integrations (e.g., WhatsApp), you may manage your data-sharing preferences via:

• Your account settings, where available, or
• By contacting support@planorama.in

Please note that opting out of certain integrations may limit your ability to use related features, such as guest messaging or RSVP follow-ups.

c) Cookies and Tracking Technologies:

You can manage cookie preferences and disable certain types of tracking by:

• Adjusting your browser settings, or
• Using cookie consent tools on our website

For more detailed instructions, please refer to our Cookie Policy. Disabling cookies may affect the availability or functionality of some platform features.

d) Withdrawal of Consent for Data Processing:

Where our processing relies on your explicit consent (e.g., use of optional features, certain types of guest data), you may withdraw this consent at any time by contacting us. We will process such requests promptly, subject to any legal or operational limitations.