Privacy Policy

Reveel (reveel.in) lets you create interactive digital gifts and share them by link. Reveel is operated by Aman Agarwal, an individual based in New Delhi, India (“we”, “us”), who is responsible for your personal data under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

This policy explains what we collect, why, who we share it with, and the choices you have. It covers people who create Gifts (“you”) and people who open them (“recipients”). It should be read with our Terms of Service.

Account information. Your name, email address and how you signed up. If you use email and password, your password is handled by Google Firebase Authentication and we never see it.

Information from Google Sign-In. If you sign in with Google, Google shares your name, email address, profile picture and a unique account ID with us. We store your name and email address. We do not store your profile picture, and we do not receive your Google password or any access to your Gmail, Drive, Contacts or other Google data.

Phone number. We ask for your mobile number when you create an account (or right after you first sign in with Google, which does not share it with us) and confirm it at checkout, so we can contact you about your gifts and orders.

Email for template demos. To watch a full template demo without an account, we ask for your email address. We store it with the templates you previewed and when, and, with the consent you give at that point, send you occasional gift ideas and offers. You can unsubscribe at any time.

Gift content.Whatever you put into a Gift — for example messages, names and nicknames (yours, the recipient's and others'), dates, quiz questions and answers, photos, and YouTube links. If you use the writing helper, the text you type into the writing helper, with your Gift's names and the words already on that page, is sent to OpenAI to draft suggestions.

Payment information. Payments are processed by Razorpay. We receive and store only the order and payment IDs, amount, currency and status. We never receive or store your card, UPI or bank details.

Usage information. When you are signed in, we record the pages you visit, time spent on them, a session identifier, your device type and browser, the referring page and when you were last active. On our main website (not on Gift pages) we also use Google Analytics, which collects similar information along with your approximate location, using cookies. We also use PostHog to understand how people use the site and the gift editor: which pages and buttons are used, which editor steps are reached, and where something goes wrong. PostHog may record sessions on our main website so we can see where people get stuck; in those recordings everything you type, your photos and the gift preview are hidden, and we never send the contents of your Gift to PostHog.

Recipients and Gift viewers.When someone opens a Gift link, we record their IP address and the hour of the visit so we can count unique views for the Gift's creator. Recipients do not need an account, and we do not run Google Analytics on Gift pages. On Gift pages we use PostHog, without cookies or any browser storage, to count anonymously whether a Gift was opened, which scenes were viewed and whether it was watched to the end. We do not record sessions on Gift pages or send the Gift's contents to PostHog.

Messages to us. If you email us, we keep the conversation so we can help you.

We use your information only to:

• create and secure your account and sign you in;
• build, store and publish your Gifts, and show them to people who open the link;
• take payments, prevent fraud, and contact you about your orders;
• respond to support requests, refunds and complaints;
• send occasional gift ideas and offers by email, if you agreed to them (for example when watching a template demo), until you unsubscribe;
• understand how Reveel is used so we can fix problems and improve it; and
• meet our legal obligations and enforce our Terms.

We do not sell your personal data, share it with advertisers, or use your Gift content to train artificial intelligence models. We process your data on the basis of the consent you give when you sign up and use Reveel, and where the law otherwise allows.

Reveel only requests basic sign-in information from Google: your name, email address and profile picture. We use it only to create your account, sign you in, and show your name and email inside Reveel. We do not share it with third parties except the service providers listed below that help us run Reveel, we do not use it for advertising, and we do not use it to train AI or machine-learning models.

Reveel's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Reveel's access at any time from your Google Account settings, and ask us to delete the data we hold (see section 9).

People you share a Gift with.Anyone with a Gift's link can see its content, including photos, and can forward the link. Please read the “Gift Links Are Shareable” section of our Terms. We ask search engines not to index Gift pages.

Service providers who process data on our behalf:

• Google (Firebase Authentication, Cloud Firestore, Cloud Storage and Google Analytics);
• Razorpay (payments — we pass your name, email and phone to pre-fill checkout);
• PostHog (product analytics and session recordings, hosted in the United States);
• Sentry (error reports when something breaks, hosted in the United States; we strip photo links and Gift contents before sending);
• Railway (website hosting);
• OpenAI (drafting suggestions in the writing helper, from only the text you choose to send it; hosted in the United States; OpenAI does not use it to train its models and keeps it for up to 30 days for abuse monitoring);
• YouTube, Google Fonts and jsDelivr, which receive a visitor's IP address when a Gift loads a video, font or script from them.

Legal reasons.We may disclose information if required by law, court order or a valid request from a government authority, or to protect someone's safety or our rights.

Business changes. If Reveel is transferred to a company we set up to run it, or to a successor, your information will move with it under this policy, and we will tell you.

• Essential: a __session cookie that keeps you signed in (expires after 1 hour), and Firebase sign-in storage in your browser.
• Analytics: Google Analytics cookies (such as _ga) and PostHog cookies (such as ph_<id>_posthog) on our main website, and a session identifier stored in your browser for our own usage statistics. Gift pages set no analytics cookies.
• Embedded content: YouTube may set its own cookies when a video in a Gift is played.

We do not use advertising cookies. You can block or delete cookies in your browser settings, or opt out of Google Analytics with Google's opt-out add-on. Blocking essential cookies will stop sign-in from working.

Your data is stored with Google Cloud (Firebase) and our hosting provider, whose servers may be located outside India, including in the United States. We only use providers that protect data to a standard comparable to this policy, and we follow any restrictions on cross-border transfers notified under Indian law.

• Account and usage information: while your account is open.
• Emails given to watch a demo: until you unsubscribe or ask us to delete them.
• Gifts, their photos and view records: until you delete the Gift or your account.
• Payment records: for as long as tax and accounting laws require (generally up to 8 years), even after your account is deleted.
• Google Analytics data: up to 14 months.
• PostHog analytics data: up to 12 months; session recordings: up to 30 days.
• Deleted data may remain in backups for up to 30 days before it is erased.

You can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct or update inaccurate data;
• delete your data or your account;
• withdraw your consent — we will then stop processing your data, though this may mean you can no longer use Reveel; and
• record someone you nominate to exercise these rights on your behalf if you die or become unable to.

You can unsubscribe from our marketing emails at any time with the link in any of them. You can delete individual Gifts yourself from your dashboard. For anything else, email privacy@reveel.in from the email address on your account. We will reply within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India. If you live in the European Union or the United Kingdom, you also have the right to object to our processing, to data portability, and to complain to your local data protection authority.

If you are named or shown in someone else's Gift and want it removed, email us with the Gift link and we will review it promptly.

We use reasonable security practices, including encrypted (HTTPS) connections, access controls on our database and storage, and limiting who can access personal data. No system is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you and the relevant authorities as the law requires.

Reveel is for adults aged 18 and over, and we do not knowingly collect data from children through accounts. If you include a child's photo or details in a Gift, you must be their parent or guardian or have their parent's permission. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy as Reveel changes. We will change the “Last updated” date above, and for significant changes we will tell you by email or with a notice on the site before they take effect.

For privacy questions, data requests or complaints, contact our Grievance Officer:

Aman Agarwal, Founder, Reveel
New Delhi, India
Email: privacy@reveel.in

We acknowledge complaints within 24 hours and aim to resolve them within 15 days.