← Home

Privacy Policy

Effective 5 September 2026

the short version
  • Your gift and everything in it is deleted automatically after 90 days.
  • We never sell your personal data.
  • We never see or store your UPI PIN or bank details; Razorpay handles the payment.
  • No Google Analytics, heatmaps or session recording.
  • Email us to see, correct or delete your data. We reply within 7 days.
the full version

OurMoments.live lets you build a personal digital gift (a birthday page, an apology, an anniversary timeline) and share it as a private link. To do that we handle some of your information. This policy explains exactly what we take, why we take it, how long we keep it, and what you can ask us to do about it.

This policy is written to meet India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. Under that law we are the Data Fiduciary and you are the Data Principal.

Siddharth Haldhar, operating the service OurMoments.live
Email: support@ourmoments.live
Phone: +91 84348 44427

We are a small independent business based in India. We are not a Significant Data Fiduciary and have not been notified as one.

This is the complete list. If something is not on this table, we do not collect it.

WhatWhy we need itHow long we keep itOur legal basis
Recipient's name, the relationship, their age if you enter itTo build the gift you asked for90 days, then deleted automaticallyYou gave it to us voluntarily for this purpose: Section 7(a)
Your written message, captions and answersTo show them inside the gift90 days, then deleted automaticallySection 7(a)
Photos and voice notes you uploadTo show them inside the gift97 days, then deleted automaticallySection 7(a)
Email address and phone numberCollected by our payment gateway at checkout, so we can send your receipt or invoice and help you if a payment failsWith the tax record belowNeeded to complete your purchase, and required by tax law
Payment reference, amount, status, payment methodTo confirm your payment, deliver your gift, and handle refundsAs long as accounting and tax law requireLegal obligation
Tax invoice detailsTo issue you a valid invoice and to keep the records the law requiresAs long as Indian tax law requires. Section 36 of the CGST Act sets this at 72 months. Automatic deletion after that period is being rolled out.Legal obligation
IP address and browser typeTo stop abuse of our upload and payment endpoints, and to measure which advertisement led to a saleUp to 97 days. We are reducing this to 7 days.Security of the service, and your consent for the advertising part
Campaign identifiers from an ad link (utm tags, numeric campaign IDs)To know which advertisement worked. These identify the advertisement, never you.Up to 180 daysSection 7(a)
Page visit countsTo count how many people opened a product page180 daysNo identifier of any kind is stored with these, not even your IP

Swipe the table sideways to see every column.

We never store your card number, UPI PIN, CVV or any banking credential. Those go straight to our payment gateway and never touch our servers.

Your gift link stays live for 90 days. After that our servers delete the gift and everything in it (the names, your message, the photos) automatically, whether or not you ask us to. Photos are removed a week later so a gift never shows a broken image before it expires.

This is not a promise we keep by hand. It is a scheduled job that runs every day.

We do not sell your personal data to anyone. We never have.

We share only what is necessary, only with these:

  • Razorpay (India): processes your payment and collects your email and phone at checkout. Their own privacy policy applies to that step.
  • Meta (Facebook/Instagram): we advertise there, so we send Meta a signal when a purchase happens, to measure which advertisement worked. Your email and phone are hashed (scrambled one way) before they are sent; we do not send your message, your photos or the recipient's name.
  • Google Fonts: our pages load their typefaces from Google's servers, which means Google can see your IP address when a page loads. We use this only for fonts, and no other Google service runs on our product pages.
  • Our hosting provider: stores the site and its database on our behalf.
  • Legal authorities: only where the law requires it.

We do not run Google Analytics, and we do not use any heatmap, session-recording or profiling tool.

Two of the services above are outside India: Meta and Google Fonts, both in the United States.

Section 16 of the DPDP Act permits transfer to any country the Central Government has not restricted. No country has been restricted so far. If that changes, we will change what we do and update this page.

Under the DPDP Act you can ask us to:

  • Show you what personal data of yours we hold, and who we shared it with
  • Correct or complete anything that is wrong
  • Erase your data, where we are not required by law to keep it
  • Raise a grievance if you are unhappy with how we handled something
  • Nominate someone to exercise these rights for you if you die or become unable to act

How to ask: email support@ourmoments.live. Please include your gift link or your payment reference so we can find the right record without asking you for identity documents.

We reply within 7 days. The law allows longer; we do not intend to take it.

Two honest limits. We cannot erase a tax record the law requires us to keep; we will tell you if that is the case. And if the gift has already been opened by the person you sent it to, we cannot un-send it.

Our gifts are made for another person, so a gift often contains someone else's name and photographs. When you build one, you confirm that you have that person's permission to use their name and pictures.

If your name or photograph is inside a gift somebody made and you want it removed, email support@ourmoments.live with the link. We will take the gift down first and ask questions afterwards.

This service is not intended for anyone under 18 years of age.

We do not knowingly collect the personal data of a child. We do not track, profile, or show behavioural advertising to anyone we know to be a child.

If you are a parent or guardian and believe a child has given us their information, email support@ourmoments.live and we will delete it.

  • The whole site runs over HTTPS
  • Gift links use random codes that cannot be guessed in sequence
  • Our upload and payment endpoints have rate limits and origin checks
  • Access to our admin dashboard is restricted and password protected
  • Everything expires on a schedule, so old data does not sit around

No online service can promise perfect security, and we will not pretend otherwise. If a breach ever affects your personal data, we will inform you and the Data Protection Board of India within the timelines the DPDP Rules require, and we will tell you plainly what happened and what to do about it.

We use a small number of cookies and similar storage: some to make the site work, and some for advertising measurement. The full list, and how to turn them off, is in our Cookie Policy.

If you have a question or a complaint about how we handle your personal data, contact:

Siddharth Haldhar, Grievance Officer
Email: support@ourmoments.live
Phone: +91 84348 44427
Response time: within 7 days

If you have raised a grievance with us and you are not satisfied with how we handled it, you have the right to complain to the Data Protection Board of India, which is established under the Digital Personal Data Protection Act, 2023.

You do not need our permission to do this, and we will not ask you to withdraw a complaint.

If we change how we handle your information, we will update this page and change the version and date at the top. If the change is significant, we will say so clearly rather than quietly editing the text.

Contact us

For anything about privacy, your data, or this policy:
Email: support@ourmoments.live
Phone: +91 84348 44427

WhatsApp +91 84348 44427