Privacy Policy

The short version

• We collect what you add to an invitation, what guests submit (RSVPs and guestbook messages), your account details from Google sign-in, and basic technical information — and we use it only to run the Service.
• Published invitations are public by design. Anyone with the link can view them and, where enabled, RSVP or leave a message.
• You are responsible for the consent of the people you include — your partner, family and guests — before publishing their names, photos or details.
• We use trusted providers to operate, we do not sell your data, and you can access, correct or delete your information at any time.

Who we are

Nimto operates Shubha Bibaha, a bilingual (English and Nepali) online wedding invitation service based in Nepal. For any privacy question or request, contact us at support@nimto.online.

Your consent and its scope

Personal data may be collected and used with your consent and for a disclosed purpose. By creating an account, building and publishing an invitation, or submitting an RSVP or guestbook message, you consent to the collection and use of your information as described in this policy. You may withdraw consent by deleting your content or your account, or by contacting us — although some limited records may be kept where the law allows or requires.

Information we collect

Information you provide

• Account information. When you sign in with Google, we receive your name, email address and profile image from your Google account through our authentication provider. We never receive your Google password.
• Invitation content. The couple’s names, event dates (Bikram Sambat and Gregorian), venue details, messages, event schedule, photos, gallery images and any custom design you create.

Information from guests

Visitors to a published invitation may submit RSVPs (name, number of guests, whether they are attending, meal preference and an optional note) and guestbook messages (name and message). This is shared with the couple who owns the invitation, and guestbook messages are displayed publicly on the invitation page.

Information we collect automatically

• Usage and device data. Basic technical information such as browser type, request and log data, used to operate and secure the Service.
• View counts. We count views of a published invitation to show the couple simple aggregate analytics. We do not build advertising profiles.
• Abuse-prevention data. When someone reports an invitation, we store a one-way hashed form of their IP address only to prevent duplicate reports. We do not keep the raw IP address for this purpose.

How we use your information

We use your information only to:

• create, host, publish and display your invitations as you direct;
• authenticate you and keep your account secure;
• send you service messages — such as notifying you of a new RSVP or guestbook message, and reminders about your invitation;
• keep the Service safe — reviewing reports, and preventing abuse, impersonation and fraud — and enforce our Terms of Service;
• maintain, debug, improve and secure the Service, and comply with the law.

We do not use your information for unrelated purposes, and we do not sell it.

Consent for other people’s information

Your invitation includes personal information about other people — your partner, family members shown on the card, and guests. Under Nepali law, that information may only be published with those individuals’ awareness and consent. You confirm that you have the consent of everyone whose name, photograph or details you add or publish, and that you are responsible for that consent. If someone asks to be removed, tell us and we will help take the content down.

Published invitations are public

When you publish an invitation, its content — and any guestbook messages left on it — can be viewed by anyone with the link and may be indexed by search engines while the page is live. Please do not include sensitive personal information you would not want to be public, and only publish details of people who have agreed to appear.

How we share information

We do not sell your personal information and do not disclose it to third parties except as set out here. We share it with service providers who process it on our behalf, only as needed to run the Service:

• hosting and infrastructure providers that run the Service and store its data;
• a sign-in provider (Google) that authenticates your account;
• an email-delivery provider used to send service messages; and
• tools that help us monitor, debug and secure the Service.

We may also disclose information where required by law, a court order, or a competent authority; to enforce our terms; or to protect the rights, safety and security of our users, the public or the Service. If the Service is ever transferred to another operator, information may be transferred as part of that change, subject to this policy.

Cookies

We use only the cookies necessary to keep you signed in and to operate the Service. We do not use third-party advertising cookies.

Data retention

• Draft invitations you have not published are stored in your own browser until you publish them.
• Published invitations remain until they expire or you delete them; they are time-limited and expire by design.
• If you delete an invitation that has been reported, we keep it offline (marked deleted) for a limited period so we can complete any abuse review before permanent removal.
• Account information is kept while your account exists. You can ask us to delete your account and associated data at any time.

Your rights

Subject to applicable law and exceptions, you have the right to:

• be informed about, and consent to, the collection of your personal data;
• access the personal data we hold about you and have it kept confidential;
• correct or update inaccurate data — you can edit most information directly in your dashboard;
• request erasure of your account and personal data;
• withdraw consent to further processing; and
• complain and seek a remedy — raise it with us first, and you may also pursue the remedies available to you under Nepali law.

To exercise any of these, email support@nimto.online and we will respond within a reasonable time.

Security

We take reasonable measures to protect your information, including row-level access controls and encryption of data in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your personal data, we will take appropriate steps and notify you and any competent authority where required by law.

Third-party links and services

Invitations and the Service may link to or rely on third-party sites and providers (for example, venue map links). We do not control those sites and are not responsible for their content or privacy practices; their own policies apply when you use them.

International data transfers

We rely on providers whose infrastructure may be located outside Nepal. By using the Service, you understand that your information may be processed and stored in other countries, and you consent to such transfer for the purposes described in this policy.

Children’s privacy

The Service is intended for adults arranging weddings and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will remove it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and significant changes will be made clear on this page.

Grievances and contact

For any question, request or grievance about your data or this policy, contact support@nimto.online. We aim to acknowledge and address privacy grievances promptly.