Privacy Policy

1. Types of Data We Collect

To provide our website builder and hosting services, we collect and process the following categories of information:

2. How We Use Your Data

Your data is used strictly for legitimate technical and transactional purposes:

• Generating and hosting your live website on designated subdomains (e.g., https://arjun-ananya.cortinex-webstudio.com).
• Provisioning automated TLS/SSL encryption certificates for your domain.
• Processing guest RSVP responses and compiling them in real-time in your private host dashboard.
• Dispatching critical operational emails (such as 6-digit login OTP verification codes and hosting receipt confirmations).
• Defending against distributed denial-of-service (DDoS) attacks, brute-force login attempts, and abuse.

3. Storage, Security & Encryption Standards

We implement comprehensive defense-in-depth technical and organizational measures:

• Encryption in Transit: All communications between your browser, guest devices, and our servers are encrypted via HTTPS utilizing modern TLS 1.3 cryptographic protocols.
• Password Hashing: User passwords are encrypted using salted one-way cryptographic hashing algorithms; plain-text passwords never touch our databases.
• Storage Architecture: Media and database records are housed in enterprise-grade cloud datacenters featuring physical security, automated encrypted backups, and isolated tenant permissions.
• Client-Side Audio Cropping: Audio files uploaded to our studio are processed in your local browser sandbox via the HTML5 Web Audio API to prevent unauthorized full-track transmission.

4. Third-Party Service Providers

We partner with trusted, industry-leading infrastructure providers under strict data processing agreements:

• Payment Processing (Razorpay): When you purchase a hosting plan, financial transactions are processed directly by Razorpay in compliance with PCI-DSS Level 1 certification. Bandhana never stores or has access to your full credit card numbers or banking passwords.
• Email Communications (SMTP / Transactional API): Transactional login codes and verification messages are transmitted via secure SMTP mail gateways.
• DNS & Cloudflare Edge Network: Domain routing and edge caching are handled via high-security DNS and CDN infrastructure to protect against regional latency and cyber attacks.

5. Cookies, Local Storage & Offline Caching

We use minimal, strictly necessary cookies and browser storage technologies:

• Session Cookies: HTTP-only, secure cookies used exclusively to authenticate your login state and dashboard access.
• Service Worker Cache: A lightweight background cache that pre-loads our luxury Network Error recovery page, ensuring that if you experience an internet disconnection, an offline recovery screen is displayed without degrading your browsing speed.

6. Data Retention & Erasure Rights

We retain your website content and RSVP records for the duration of your active hosting plan and a grace period of 90 days thereafter, allowing you ample time to download or export your memories.

You have the right at any time to:

• Export and download all guest RSVP submissions in CSV or JSON format from your dashboard.
• Modify, replace, or delete photos, audio clips, or narrative texts directly via the live customizer.
• Request complete permanent erasure of your account, website assets, and database records by contacting our privacy compliance team.