Privacy Policy

Last updated: 6 September 2026

Balcony provides digital event invitation services. Balcony is currently operated by an individual service provider in India.

This Privacy Policy explains how we collect, use, store, and protect personal data of Hosts and Guests who use our Service.

1. Information We Collect

Hosts

We may collect:

• Name and email address.
• Mobile number, where required.
• OTP/account verification information.
• Event details.
• Photos, text, and other uploaded content.
• Guest information entered by the Host.
• RSVP information.
• Purchase and transaction information.
• Customer support communications.

Guests

A Host may add Guests to their own invitation. Depending on the invitation, the following Guest information may be entered by the Host:

• Guest name, and the name to be shown on the invitation.
• Mobile (WhatsApp) number, where provided.
• A greeting, and an optional group or label chosen by the Host, such as “Friends” or “Family”.

A Guest may also provide information themselves when they open an invitation and respond:

• RSVP status.
• Number of attendees, where applicable.
• A contact number entered in the RSVP form, where provided.
• Messages, wishes, or responses submitted through the invitation.

The Service also generates limited information linked to a Guest, such as the unique invitation link created for them and basic delivery and viewing information, for example whether and when their invitation link was opened.

Guests do not need to create a Balcony account to view an invitation or to RSVP.

Guest information is subject to the additional commitments set out in Section 3.

Technical Information

We may also collect basic technical information such as IP address, browser/device information, access times, and security logs.

2. How We Use Information

We use personal data to:

• Create and manage accounts.
• Verify accounts using OTP.
• Create and display invitations.
• Process purchases and payments.
• Record and display RSVPs.
• Provide customer support.
• Send service-related emails or notifications.
• Maintain website security.
• Prevent fraud and abuse.
• Improve and maintain the Service.
• Comply with applicable laws and legal requirements.

Guest information added by a Host is used only for the narrower purposes described in Section 3.

Where consent is required by applicable law, we will obtain consent before processing personal data.

3. Guest Data Added by Hosts

Balcony allows a Host to build a guest list for their own event, typically a guest name and a mobile (WhatsApp) number, so that a personalised invitation can be created and shared. Because this information concerns people who are usually not Balcony account holders themselves, the following additional commitments apply to it.

3.1 Roles and Responsibility

• The Host decides which Guests to add, what details to enter, and how the invitation is shared. In relation to Guest data, the Host determines the purpose and the means of processing.
• Balcony stores and processes Guest data on behalf of, and on the instructions of, the Host, solely to provide the invitation and RSVP features of the Service.
• By adding a Guest, the Host confirms that they have an appropriate relationship with that person and a lawful basis or permission to provide those details to Balcony.

3.2 Purpose Limitation

Guest data is used only to:

• Create and display the personalised invitation for that Guest.
• Generate the unique invitation link for that Guest, and help the Host share it.
• Record the Guest’s RSVP, headcount, and message, and display them to the Host.
• Show the Host basic delivery and viewing information for their own invitation.
• Keep the Service secure, prevent abuse, and meet legal obligations.

We do not use Guest data for any other purpose. In particular, we do not:

• Sell, rent, licence, or trade Guest data.
• Use Guest data for our own marketing, advertising, promotional messaging, or profiling.
• Build contact, marketing, or mailing lists from Guest data.
• Share Guest data with other Hosts, advertisers, data brokers, or unrelated third parties.
• Use Guest data to train machine-learning or artificial-intelligence models.
• Contact Guests ourselves for anything unrelated to the invitation they were sent.

3.3 Who Can See Guest Data

• Guest data is available only within the account of the Host who added that Guest. Only that Host can view, edit, export, or delete it.
• No other Host or account holder can view, search, or otherwise access another Host’s guest list.
• Guest lists are not published on the website, are not made publicly searchable, and do not form part of any public or shared directory.
• A Guest’s personalised invitation page is reachable only through the unique link created for them (see Section 4).

3.4 Administrative Access

Balcony maintains an internal administration area used to operate and support the Service. Access to it is restricted to a small number of authorised personnel. Guest data may be accessible there only where it is necessary to:

• Provide technical or customer support to the Host, including at the Host’s request.
• Investigate errors, abuse, fraud, spam, or security incidents.
• Operate, maintain, back up, or restore the Service.
• Comply with a legal obligation or a lawful request from a government or judicial authority.

Administrative access is limited to these purposes and is subject to internal access controls. Sensitive administrative actions, including any session in which a member of our team views the Service as a Host, are recorded in an internal audit log. Guest data is never accessed for marketing, resale, or any of the purposes listed as prohibited in Section 3.2.

3.5 How Invitations Are Sent to Guests

• Balcony does not itself send WhatsApp messages, SMS, emails, or calls to Guests. The Host shares the invitation from their own device and their own messaging account.
• A Guest’s mobile number is used to prepare that message and to keep the Host’s guest list accurate. It is not passed to a bulk messaging, telemarketing, or advertising provider.
• If Balcony introduces a feature that sends messages to Guests directly, this Privacy Policy will be updated before that feature is used (see Section 7).

3.6 Retention and Deletion of Guest Data

• Guest data is retained for as long as the Host keeps that Guest on their list and the related invitation exists.
• When a Host removes a Guest, that Guest no longer appears on the guest list and their personalised invitation link stops working. A limited internal record may be kept so that an invitation allowance cannot be bypassed, and so that an accidental removal can be corrected.
• When an invitation or a Host account is deleted, the associated guest list, RSVP responses, and related analytics are deleted with it, subject to backups and to Section 8.

3.7 Guest Choices and Requests

• A Guest who wishes to be removed, to have their details corrected, or to know what information is held about them should normally contact the Host who invited them, because the Host controls that guest list and can act on it directly.
• A Guest may also contact Balcony using the details in Section 15. We will assist and, where appropriate, forward the request to the relevant Host and act on their confirmed instructions, subject to applicable law.
• A Guest may choose not to respond to an invitation, and may decline to provide a contact number or a message in the RSVP form.

4. Invitation Links

• Some invitations may be accessible through a unique invitation URL.
• Anyone who obtains the URL may potentially view information made available through the invitation.
• Hosts should therefore avoid publishing unnecessary sensitive or confidential information.

5. Who We Share Information With

We do not sell, rent, or trade Host or Guest personal data, and we do not share it with advertisers or data brokers.

Guest data is shared only as described in Section 3, and with the service providers below strictly to the extent needed to operate the Service.

We may share information with service providers that help us operate Balcony, such as:

• Payment providers.
• Email/OTP providers.
• Hosting and database providers.
• Cloud storage and backup providers.
• Security and technical service providers.
• Analytics providers, if used.
• Messaging providers, if used.

We may also disclose information when required by law or a lawful government or judicial authority.

Actual third-party providers used by Balcony will be reflected in this Privacy Policy where appropriate.

6. Payments

• Payments may be processed by third-party payment providers.
• Balcony does not normally store complete payment card or banking credentials.
• Payment providers may process payment information according to their own terms and privacy policies.

7. WhatsApp and Messaging

Balcony currently does not send messages to Guests. Where the Service helps a Host share an invitation, it prepares a message that the Host then sends from their own WhatsApp or other messaging account, on their own device. That message, and any information in it, is handled by the messaging platform the Host uses, under that platform’s own terms and privacy policy.

Balcony does not transmit Guest mobile numbers to a bulk messaging, SMS, or telemarketing provider.

If Balcony introduces WhatsApp, SMS, or other messaging features that send messages directly, relevant information such as mobile numbers, invitation links, message content, and delivery information may be processed by the relevant messaging provider. This Privacy Policy will be updated before such features are introduced.

8. Data Retention and Deletion

We retain personal data only for as long as reasonably necessary to:

• Provide the Service.
• Maintain accounts and invitations.
• Process transactions.
• Provide support.
• Maintain security.
• Resolve disputes.
• Meet legal, tax, accounting, or other applicable requirements.

Specific retention and deletion rules for Guest data are set out in Section 3.6.

You may request deletion of your account or applicable personal data.

Some information may need to be retained where required by law or reasonably necessary for security, fraud prevention, backups, accounting, or dispute resolution.

9. Privacy Rights

Subject to applicable law, you may have the right to:

• Request information about your personal data.
• Request correction of inaccurate information.
• Request deletion of applicable personal data.
• Withdraw consent where applicable.
• Raise a privacy grievance.

We may request reasonable information to verify your identity before processing a request.

10. Security

• We use reasonable technical and organisational measures to protect personal data from unauthorised access, misuse, loss, alteration, or disclosure.
• Security measures may include HTTPS/TLS, authentication, access controls, secure hosting, database restrictions, backups, and security monitoring.
• However, no internet-based service can be guaranteed to be completely secure.
• Where required by applicable law, we will take appropriate steps in response to a personal data breach.

11. Cookies

Balcony may use essential cookies required for:

• Login and sessions.
• Security.
• Website functionality.
• User preferences.

If we introduce analytics, advertising, or other non-essential tracking technologies, we will provide appropriate information and obtain consent where required by law.

12. Children’s Data

• Balcony is not specifically designed for children.
• Hosts should avoid providing unnecessary personal information about children.
• Where children’s personal data is processed, we will comply with applicable requirements under Indian law.

13. Third-Party Services and International Processing

• Some third-party service providers may process or store information outside India.
• Where applicable, we will take steps required by Indian law regarding such processing.
• Third-party services may also have their own privacy policies and terms.

14. Changes to This Policy

• We may update this Privacy Policy from time to time.
• Material changes may be communicated through the website or email where appropriate.
• The “Last updated” date will show when the policy was most recently changed.

15. Contact and Privacy Complaints

For privacy questions, requests, or complaints:

• Balcony
• Operated by: Anika Patel
• Email: support@itsbalcony.com
• Address: Pune, Maharashtra, India.

We will make reasonable efforts to review and respond to privacy requests and grievances within the period required by applicable law.

16. Governing Law

This Privacy Policy is governed by the applicable laws of India.

17. Related Policy

For information about accounts, purchases, refunds, templates, acceptable use, liability, and other terms of using Balcony, please see the Terms of Service.