Privacy Policy

Effective Date: 15 September 2026

Welcome to Bulava ("Bulava", "we", "our", or "us"). This Privacy Policy describes how we collect, use, store, disclose, and protect your information when you access or use the Bulava platform, website, applications, invitation hosting services, RSVP services, and related offerings (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

1.1 Account Information

When you create an account or use our Services, we may collect:

  • Full name
  • Email address
  • Phone number
  • Profile information
  • Authentication credentials provided through supported login methods

1.2 Invitation and Event Information

To provide our Services, we may collect and store information that you voluntarily submit, including:

  • Bride and groom names
  • Event details
  • Event dates and timings
  • Venue information
  • Guest lists
  • RSVP information
  • Photos and media uploaded by users
  • Custom messages and invitation content

1.3 Payment Information

Payments are processed through authorized third-party payment processors such as Razorpay.

Bulava does not store complete debit card, credit card, banking, or payment instrument information on its servers.

We may receive limited transaction-related information including:

  • Transaction identifiers
  • Payment status
  • Purchase history
  • Order information

1.4 Automatically Collected Information

When you access our Services, we may automatically collect:

  • IP address
  • Browser type
  • Device information
  • Operating system
  • Referral source
  • Usage activity
  • Session information
  • Log data

1.5 Analytics Information

We may use analytics and monitoring tools that collect information regarding usage of our Services, including:

  • Page views
  • User interactions
  • Session duration
  • Performance metrics
  • Error reports

1.6 Information Processed by AI Features

Some optional features use artificial intelligence services provided by Google Cloud (Vertex AI). These features are:

  • The support chat assistant, which processes the messages you send to it in order to answer your question
  • Writing assistance in the invitation editor, which processes text you ask it to rewrite or improve

Where you use these features:

  • The content you submit is sent to Google Cloud for processing, and a response is returned to you.
  • Support conversations are stored so that our team can follow up on your enquiry.
  • Under our agreement with Google Cloud, content submitted through these features is not used to train their models.

You are not required to use these features. Please do not enter sensitive personal information into the chat assistant.

2. How We Use Your Information

We use collected information for legitimate business purposes, including:

  • Providing and operating the Services
  • Hosting digital invitations
  • Processing RSVPs
  • Managing user accounts
  • Processing purchases and transactions
  • Sending service-related communications
  • Providing customer support
  • Improving platform functionality
  • Monitoring system security
  • Detecting fraud and abuse
  • Operating AI-assisted support and writing features
  • Enforcing our policies and terms
  • Complying with legal obligations

3. Legal Basis for Processing

Where applicable, we process information based on:

  • User consent
  • Contractual necessity
  • Compliance with legal obligations
  • Legitimate business interests
  • Protection of rights and security of our platform

4. Cookies and Similar Technologies

Bulava uses cookies, local storage, and similar technologies in two categories:

  • Necessary. Required to keep you signed in, remember your preferences, secure the platform, and operate features such as RSVP. These are always active.
  • Analytics. Used to understand how the platform is used so that we can improve it. These are set only after you accept them.

When you first visit, we ask whether you accept analytics cookies. You may decline, and the platform will continue to work. You may change your choice at any time by clearing site data in your browser.

Published invitation pages use necessary cookies only. Analytics and marketing cookies are never set on an invitation page opened by a guest.

You may also configure your browser to restrict cookies, although certain features may then not function properly.

5. Third-Party Service Providers

To operate the Services, we may engage trusted third-party providers including, but not limited to:

  • Google Firebase. Account authentication, database, file storage, and server functions.
  • Google Cloud (Vertex AI). AI support chat and writing assistance.
  • Google Analytics and Google Tag Manager. Usage analytics, loaded only after you accept analytics cookies.
  • Google reCAPTCHA and Firebase App Check. Protection against bots and platform abuse.
  • Google Maps. Venue location and directions links shown on invitations.
  • Razorpay. Payment processing.
  • ZeptoMail. Transactional and service email.
  • WhatsApp, operated by Meta. Optional delivery of invitations and reminders where you choose to use it.
  • Pixabay. Optional stock image and media search inside the editor.
  • Hostinger. Website hosting and media delivery.

These providers may process information on our behalf subject to their respective privacy practices and contractual obligations.

6. Sharing and Disclosure of Information

We do not sell personal information.

We may disclose information in the following circumstances:

6.1 Service Providers

To trusted vendors and service providers necessary for operation of the Services.

6.2 Legal Requirements

Where required by law, court order, governmental authority, or regulatory request.

6.3 Protection of Rights

To investigate, prevent, or address:

  • Fraud
  • Security incidents
  • Illegal activities
  • Violations of our Terms

6.4 Business Transfers

In connection with mergers, acquisitions, restructuring, financing transactions, or asset transfers.

7. User Content and Guest Information

7.1 Your Content

Users remain solely responsible for the content they upload, publish, distribute, or share through Bulava.

By uploading content, users represent that they possess all necessary rights, permissions, and authorizations required to use such content.

7.2 Guest and RSVP Information

An invitation may collect information from the people you invite. Where an RSVP form is enabled, a guest may submit:

  • Name
  • Whether they are attending
  • Number of guests
  • Phone number
  • Email address
  • Dietary preference
  • Notes or a message

This information is collected on behalf of the user who created the invitation, and is made available to that user as the organiser of the event. It is used to operate the RSVP service. We do not use guest information for our own marketing, and we do not sell it.

The user who created the invitation is responsible for having the permission of the people they invite, as set out in our Terms and Conditions.

If you are a guest and you wish to know what information an invitation holds about you, to correct it, or to have it removed, please write to us at support@bulava.to. We will pass your request to the organiser of the event and assist where we are able to.

8. Data Retention

We retain information only for as long as reasonably necessary to:

  • Provide the Services
  • Fulfill contractual obligations
  • Resolve disputes
  • Enforce agreements
  • Comply with legal requirements

Unless a longer period is required by law, we retain information as follows:

  • Account information. For as long as your account remains open, and for up to 90 days after you ask us to close it.
  • Published invitations and their RSVP data. For as long as the invitation remains published, and for up to 12 months after it is unpublished or after the event has passed.
  • Payment and transaction records. For 8 years, as required by Indian tax and accounting rules.
  • Support conversations. For up to 24 months.
  • Analytics data. For up to 26 months.

You may ask us to delete information sooner, and we will do so where we are not required to keep it.

9. Data Security

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction.

However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.

Accordingly, Bulava cannot guarantee absolute security.

If a personal data breach occurs that is likely to affect you, we will notify the affected users and the relevant regulatory authority without undue delay, in the manner and within the timelines required by applicable law.

10. Children's Privacy

The Services are not directed toward individuals under the age of 18.

We do not knowingly collect personal information from children.

If we become aware that personal information from a child has been collected, we may take appropriate steps to delete such information.

11. International Data Transfers

Information may be processed, stored, or transferred to locations where our service providers maintain operations.

By using the Services, users acknowledge and consent to such transfers where permitted by applicable law.

12. User Rights

Subject to applicable laws, users may request:

  • Access to personal information
  • Correction of inaccurate information
  • Deletion of certain information
  • Withdrawal of consent where applicable

To exercise any of these rights, write to support@bulava.to from the email address registered to your account.

We will respond within 30 days of receiving your request. We may need to verify your identity before acting on it, and we may decline a request where the law requires or permits us to keep the information.

13. Third-Party Links

The Services may contain links to external websites or services.

Bulava is not responsible for the privacy practices, content, or security of third-party websites.

Users should review the privacy policies of those third parties independently.

14. Changes to This Privacy Policy

Bulava reserves the right to modify this Privacy Policy at any time.

Updated versions will be posted on this page with a revised effective date.

Continued use of the Services following publication of changes constitutes acceptance of the updated Privacy Policy.

15. Contact Information

For privacy-related questions, requests, or concerns, please contact:

Business Details

  • Business name: bulava.to
  • Registration: Registered as a micro enterprise under the MSME (Udyam) scheme. Not registered for GST.
  • Address: Ambur, Tamil Nadu, India
  • Customer care phone: +91 93615 49079
  • Customer support: support@bulava.to

Grievance Officer

In accordance with applicable Indian law, any grievance regarding your personal information, or regarding content hosted on the platform, may be addressed to our Grievance Officer:

We will acknowledge a grievance within 24 hours of receipt and seek to resolve it within 15 days.

16. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India.

Any disputes arising in relation to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in Chennai, Tamil Nadu, India.