Privacy Policy

Last updated: Nov 2025

Welcome to Two Wishes (“we,” “our,” or “us”).

We value your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, and share your information when you use our website, app, or related services (collectively, the “Platform”).

By accessing or using Two Wishes, you agree to this Privacy Policy.
If you do not agree, please do not use our Platform.

1. Who We Are

Two Wishes is a registered business in India that helps users create digital invitations, collect and send monetary gifts, and make charitable donations.
We act as a platform provider and facilitator, not as a charity or financial institution.

2. Information We Collect

We collect the following types of information when you use our Platform:

2.1 Information You Provide

Account Information: Name, email address, password, phone number (if provided).
Event Details: Event name, date, theme, and any custom messages or media uploaded by you.
Payment Information: Contributions, payment method, transaction history (processed through secure third-party gateways).
Donation Preferences: Charity selected, donation split percentage, and related details.
Guest Details: Names and email addresses of guests you invite.
Support Requests: Any messages, feedback, or inquiries sent to our team.

2.2 Automatically Collected Information

When you visit our site or app, we automatically collect:

Device and browser information
IP address and location (approximate)
Usage data such as pages visited, time spent, and interactions
Cookies and similar tracking technologies (see Section 10)

3. How We Use Your Information

We use your information to:

Provide, personalize, and improve our services
Facilitate payments, contributions, and donation transfers
Verify user accounts and prevent fraud
Communicate updates, confirmations, and support messages
Comply with legal and tax obligations
Analyze usage trends and improve the user experience
Display personalized event pages and confirmations to guests

We will never sell or rent your personal data to unaffiliated third parties for marketing purposes.

4. Sharing of Information

We share information only as necessary to provide our services, as follows:

With Payment Processors: To complete secure financial transactions.
With Charitable Organizations: To transfer donations and issue receipts.
With Service Providers: Such as cloud storage, analytics, and customer support tools (bound by confidentiality agreements).
With Legal Authorities: When required by law or to protect our users and platform from fraud or abuse.

We ensure all partners and processors follow strict data protection standards.

5. How We Handle Contributions & Donations

All contributions are processed via secure payment gateways (e.g., Razorpay, Stripe, etc.).
Two Wishes does not store your full card details.
When a donation is directed to a charity, we share only the minimum data necessary (such as contributor name and amount) for legal and acknowledgment purposes.
For privacy, contributors’ payment details are never shared with Hosts.

6. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process your personal data based on:
Consent: When you register, share event details, or make a contribution.
Contractual Necessity: To deliver the services you request.
Legal Obligation: For tax or regulatory compliance.
Legitimate Interest: For analytics, fraud prevention, and service improvement.

7. Data Retention

We retain your data only as long as necessary for:
Providing our services and support,
Legal or tax obligations, and
Resolving disputes or enforcing agreements.
Afterward, your data is securely deleted or anonymized.
You can request deletion of your account and associated data at any time (see Section 11).

8. Data Security

We use advanced security measures, including:
SSL encryption for all transactions,
Secure payment gateways,
Access controls and encrypted data storage, and
Regular audits and compliance checks.
However, no online system is completely secure. You acknowledge that you share data at your own risk and agree to notify us immediately if you suspect unauthorized access to your account.

9. Your Rights

As a user, you have the following rights under the DPDP Act:
Right to Access: Request a copy of your personal data.
Right to Correction: Ask for inaccurate or outdated data to be updated.
Right to Deletion: Request deletion of your personal data and account.
Right to Withdraw Consent: Stop certain types of processing (e.g., marketing).
Right to Grievance Redressal: Lodge a complaint with our Data Protection Officer.
To exercise these rights, email us at info@twowishes.in.

10. Cookies and Tracking

We use cookies and similar tools to:
Remember your preferences,
Track platform performance, and
Improve usability.
You can modify your browser settings to decline cookies, but some features may not function properly.

11. User Controls and Account Deletion

You can:

View and update your account details anytime,
Delete your account by contacting support@twowishes.in, and
Opt out of promotional communications via unsubscribe links or your settings page.
Please note that transaction and donation records may be retained as required by law even after account deletion.

12. Data of Guests and Third Parties

If you upload guest lists or invite others to your event:
You are responsible for ensuring that those individuals have consented to share their data.
We process guest data solely to deliver invitations, track RSVPs, and process their contributions (if any).
We do not contact guests for unrelated purposes or share their data externally.

13. Cross-Border Data Transfers

Your information may be processed outside India when using international payment or storage providers.
We ensure all such partners comply with equivalent data protection standards.

14. Children’s Privacy

Our services are not intended for individuals under 18.
We do not knowingly collect personal data from minors. If we learn that a child’s information has been collected, we will delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time.
Any updates will be posted on this page with a new “Last Updated” date.
Significant changes will be communicated via email or in-app notifications.

16. Contact Us

For privacy-related queries, concerns, or complaints, please contact:

Two Wishes Private Limited
Email: support@twowishes.in
Business Registration No.: U56210MH2025PTC452082

We will respond to all verified requests within 30 days.

17. Grievance Redressal

If you believe your privacy rights have been violated, you may contact our DPO as above.
If unresolved, you may escalate the issue to the Data Protection Board of India as per the DPDP Act.

support@twowishes.in

Terms & Conditions