Privacy Policy
How we collect, use, share and protect personal information when you create, publish and share a wedding website.
Version 1.0 · Last updated 10 November 2026
1. Who we are
JustWe2 (available at justwe2.com) is a service for designing, publishing and sharing wedding websites. It is owned and operated by Resiara Software Private Limited, a company incorporated in India, with its registered office at Jaipur, Rajasthan, India [CIN: U46512RJ2025PTC106048] ("we", "us", "our").
This policy explains how we collect, use, share, store and protect personal data, in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules made under them. By creating an account or using JustWe2 you accept this policy. Where the law requires your consent, we will ask for it separately.
2. Who this policy covers
- Couples / account holders ("you"): people who create an account and build a site. You must be at least 18 years old.
- Guests / visitors: people who open a published site or invite link, and who may choose to submit an RSVP or a guestbook message.
Roles. For your own account and payment data, we decide why and how it is used (we act as the "Data Fiduciary"). For guest information that you add or collect through your site, such as guest lists, RSVPs and guestbook entries, you decide the purpose, and we process it on your behalf as your service provider (the "Data Processor"). You are responsible for having a lawful basis, including guest consent where needed, for the guest data you add.
3. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account details | Name, email address, sign-in and verification records | You |
| Site content | Names of the couple and family, dates, venues, stories, photographs, videos, music, text | You |
| Guest information | Guest names, household details, contact details you enter, invite links, RSVP responses, guestbook messages | You, or guests who choose to submit it |
| Payment records | Amount, currency, status, date, transaction and order references. Card, UPI and bank details are entered on our payment partner's page and are not stored by us | You, payment partner |
| Technical data | IP address, device and browser type, pages requested, date and time, error and security logs | Automatically |
| Support communications | Emails you send us and our replies | You |
We do not knowingly collect personal data of children under 18. If you believe a child has created an account, email us and we will delete it.
4. Why we use your information
| Purpose | Data used |
|---|---|
| Create your account, verify your email and keep you signed in | Account details, technical data |
| Host, publish and display your site, preview links and invite links | Site content, guest information |
| Take payment, issue receipts, handle refunds and meet tax and accounting duties | Payment records, account details |
| Deliver RSVPs and guestbook messages to you | Guest information |
| Send service messages, such as sign-in links, receipts and notices | Account details |
| Respond to support, takedown and legal requests | Support communications, relevant content |
| Detect fraud, abuse and security incidents and enforce our Terms of Use | Technical data, account details, site content |
| Comply with law and respond to lawful requests from authorities | As required |
We do not sell personal data. We do not use it for advertising and do not currently run marketing profiling. If we start sending promotional messages, we will ask for your consent first and let you opt out at any time.
5. Consent and guest information
- Guests are never required to submit personal data to view a public site. RSVP and guestbook submissions are voluntary, and by submitting them the guest agrees that the details will be shared with the couple who owns the site.
- If you add guests' details yourself, you confirm that you have permission to do so and that guests may withdraw it. You must respond to guest requests relating to that data. We will help where we are able to.
- You can withdraw consent at any time by emailing us. Withdrawal does not affect processing done before it, and it may mean we can no longer provide some features.
6. Who we share information with
We share personal data only as needed to run the service, with providers bound by confidentiality and data-protection obligations:
- Payment partner: Razorpay, to process payments and refunds.
- Cloud hosting and media storage: Amazon Web Services, with servers located in India (Mumbai region).
- Email delivery provider (currently Resend), to send sign-in and service emails. This provider may process data outside India.
- Map and location services: Google and Mapbox, to show venue maps. These providers may receive your device's IP address and the location requested when a map is displayed.
- Professional advisers such as auditors and lawyers, under confidentiality.
- Government and regulatory authorities, courts and law-enforcement agencies, where we are legally required to or where needed to protect rights, safety or prevent fraud.
- A successor business, if we are involved in a merger, acquisition or sale of assets, with notice to you.
Published sites are public. Anyone who has your site link, and the passcode if you set one, can see what you published. Share links only with people you wish to invite and do not publish information you are not comfortable making visible.
7. Cookies and similar technologies
We use only essential cookies and local storage, to keep you signed in, secure your account and remember basic preferences. We do not currently use analytics, advertising or tracking cookies. If this changes, we will update this policy and ask for your consent where required.
8. Where your data is stored and international transfers
Our primary servers and databases are located in India. JustWe2 is available worldwide, so personal data of users located in other countries is also stored and processed in India. Some service providers listed in section 6 may process limited data outside India. We transfer data only to countries and providers permitted by Indian law and take reasonable steps to keep it protected.
9. How long we keep information
| Data | Retention |
|---|---|
| Account, site content and guest information | While your account is active and your site is live. After your site expires, or after you ask us to delete your account, content is deleted within 30 days, and from backups within 90 days of that request or expiry |
| Payment and transaction records | As long as required by tax, accounting and other laws (for example, up to 8 years under Indian rules). These records are kept after account deletion |
| Security and access logs | Up to [12] months, or longer if needed for an investigation |
| Support emails | Up to [3] years after the matter closes |
We may keep information longer where needed for a legal claim, dispute or legal obligation. When retention ends we delete or anonymise the data.
10. Security
We apply reasonable security safeguards appropriate to the nature of the data, including access restrictions, encrypted connections and monitoring. No system is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the Data Protection Board of India as required by law. Please keep your sign-in links and passcodes confidential.
11. Your rights
Subject to the DPDP Act and other applicable law, you may:
- Access a summary of the personal data we process about you and who we share it with.
- Correct or update inaccurate or incomplete data.
- Erase your personal data, unless we need to keep it by law.
- Withdraw consent at any time.
- Grievance redressal: raise a complaint about how we handle your data.
- Nominate another person to exercise your rights in the event of your death or incapacity.
To exercise a right, email [email protected] from the address linked to your account. We may ask you to verify your identity first. We aim to respond within 30 days.
12. Users outside India
If you are outside India, your use of JustWe2 and this policy are governed by Indian law. We will handle access, correction and deletion requests from any user as described in section 11. This policy does not create rights under foreign data-protection laws that apply only to businesses established in or targeting those countries.
13. Grievance and data protection contact
For privacy questions, requests and complaints:
Grievance and Data Protection Contact, Resiara Software Private Limited Email: [email protected] Address: Jaipur, Rajasthan, India
We acknowledge complaints within 72 hours and aim to resolve them within 15 days. If you are not satisfied, you may complain to the Data Protection Board of India once it is operational, after first using this process.
14. Changes to this policy
We may update this policy. We will change the "Last updated" date above and, for material changes, notify you by email or in the product. Earlier versions are kept on file and are available on request.
Questions about this document?
[email protected]