Legal
Last updated 6 September 2026
VowBox builds digital wedding invitations for Indian couples. This page explains, in plain language, what information we collect, why, and how long we keep it. It reflects what VowBox actually does today — not a generic template.
From the couple building an invite: names, an optional opening message, event details (event names, dates, times, and venue addresses), the email address you give when you pay (where we send your payment confirmation and your dashboard link), and — if you turn RSVP on — up to two email addresses where we send your RSVP notifications.
From a wedding guest submitting an RSVP: their name, mobile number, number of guests, and which events they’re attending.
We never ask anyone to upload a personal photo. Every invite uses pre-selected template imagery — no guest or couple photo ever passes through our systems.
VowBox has no accounts and no login — access to your invite is a private link, not a profile. We don’t use cookies, we don’t run third-party advertising or analytics trackers, and we don’t sell or share your data with anyone for marketing.
To understand how many people visit VowBox and whether our ads are working, we keep simple aggregate counts: how many times our home page is viewed, which steps of the invite builder people reach, and which website or marketing campaign referred a visit (for example, an Instagram ad). These counts are kept without cookies, without any third-party analytics service, and without your IP address, your device details, or anything else that identifies you. They’re counts, not profiles. All of this stays in our own database (Supabase, listed below) — no analytics company is involved.
If you start building an invite after clicking one of our ads, we store the name of that campaign alongside your invite so we know which ads lead to real bookings. It is never linked to anything that identifies you as a person.
One small technical note, not a cookie: while you’re building your invite, your browser briefly remembers which steps it has already told us you’ve reached — so refreshing the page doesn’t get counted twice. This lives only in that browser tab, disappears the moment you close it, and is never sent to us or saved anywhere on our end.
Couple details are used to build and display your invite. The email address you give at payment is used to send your payment confirmation and dashboard link, and to contact you about your invite if we ever need to. Guest RSVP details are used for exactly one purpose: letting you know who’s coming, by emailing your RSVP notification address(es) each time a guest responds.
If you don’t finish building your invite, we don’t keep the draft indefinitely — an inactive draft is automatically and permanently deleted, typically within about an hour of you stepping away.
Once your invite is live, it — and every guest RSVP submitted to it — stays until 30 days after your last event, then it’s permanently deleted. There is no archival or “keepsake” copy kept anywhere after that.
The aggregate visit and invite-builder counts described above are kept indefinitely — since they hold no cookies, IP address, or anything else that identifies you, there’s nothing tied to you to expire. We may introduce an automatic deletion schedule for this data in the future.
We use a small number of service providers to run VowBox, each only able to access what they need to do their job: Supabase (database and file storage), Resend (delivering RSVP notification and payment confirmation emails), and Razorpay (processing your payment; VowBox never sees or stores your card details). None of these providers may use your data for their own purposes.
Anyone with your invite’s link can view it and RSVP — the same way a physical invitation works. Don’t share your configurator draft link with anyone you wouldn’t hand a house key to; it’s meant only for you and your co-planner while building.
To ask what we hold about you, or to have it deleted early, write to hello@thevowbox.com. We respond to every request within 30 days.