Privacy Policy

1. Introduction

Welcome to Magic Moments ("we", "our", or "us"), accessible at https://www.magicmoments.live. We are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy details how we collect, use, protect, and disclose information when you use our interactive celebration creator, authentication services, and shared memory pages.

2. Information We Collect

We only collect information necessary to provide and enhance our services:

• Account & Authentication Information: When you sign in via Google OAuth or Email verification, we collect your email address, name, and profile picture (if provided by Google) to authenticate your account and maintain your saved celebration drafts.
• Celebration Content: When you design a celebration page, you may provide names, nicknames, birthdates, personalized messages, curated reasons, and photographs you choose to upload.
• Payment Information: All financial transactions are processed securely through our verified payment gateway, Razorpay. We do not store credit/debit card numbers, CVVs, or banking credentials on our servers.
• Usage & Device Information: We log non-personally identifiable technical information such as browser type, operating system, device category (mobile/desktop), and approximate timestamps to ensure interactive features (such as candle blowing, animations, and sound effects) render properly on your device.

3. Google User Data Policy & OAuth Compliance

Magic Moments complies with the Google API Services User Data Policy, including the Limited Use requirements:

• Data Access: We strictly request read-only profile access (openid, email, profile) solely to verify your identity and link your purchased or drafted celebration links to your account.
• No Transfer or Sale: We never sell, rent, trade, or transfer your Google user data to third-party advertisers, data brokers, or information resellers.
• No AI Model Training: Your Google user data is never used to train generalized artificial intelligence or machine learning models.
• Data Retention: You may request deletion of your account and associated celebration pages at any time by contacting our support team.

4. How We Use Your Information

We use collected data solely for:

• Generating your personalized interactive celebration surprise page.
• Authenticating your session and providing discounted member pricing (₹49 tier vs ₹199 non-login tier).
• Sending transactional notices (e.g., payment confirmation receipts and optional milestone reminders).
• Diagnosing technical issues, preventing fraud, and optimizing system uptime.

5. Data Storage and Security

We implement industry-standard encryption (HTTPS/TLS) across all client-server communications. User credentials and tokens are securely stored using cryptographic hashing and strict environment separation.

6. Third-Party Services

We partner with trusted third-party providers for core infrastructure:

• Google Identity Services: For secure OAuth authentication.
• Razorpay: For RBI-compliant, PCI-DSS certified payment processing.
• Cloudinary: For secure storage and CDN delivery of user-uploaded celebration photos.
• MongoDB Atlas: For secure database management and encrypted record storage.

7. Contact Us

If you have questions about this Privacy Policy or wish to request data deletion, contact us at: