Privacy Policy

HeartNotes (“HeartNotes”, “we”, “us”, or “our”) operates https://myheartnotes.in/ and occasion-specific services including https://birthday.myheartnotes.in/.

HeartNotes is an India-focused digital platform that allows users to create personalized digital surprise experiences containing messages, photographs, voice recordings and other personalization features.

HeartNotes can be contacted at support@myheartnotes.in.

Depending on how you use HeartNotes, we may collect:

Account information — name, email address, phone number, authentication information, and account creation information.

Guest creation information — recipient name, recipient date of birth/birthday information, sender/creator name, optional email address, optional phone number, and other information needed to create or manage the HeartNote.

HeartNote content — messages and letters, uploaded photographs or images, voice recordings, theme/design selections, occasion information, personalization information, recipient-related information, and any feedback or responses submitted through the recipient experience.

Payment/order information — order ID, amount, transaction status, payment reference, and related transaction information.

Technical information — browser type, device information, IP address, operating system, access times, pages visited, and technical/security logs.

Authentication — OTP verification information, and, where Google login is used, basic information made available through Google such as name and email.

HeartNotes does not store full card numbers, CVV, UPI PIN, or similar sensitive payment credentials on its own systems.

We may use information to:

• create and operate HeartNotes;
• save and manage drafts and completed experiences;
• allow users to edit, share, or manage HeartNotes;
• provide the recipient experience;
• process payments and orders;
• verify identity through OTP or supported login methods;
• associate eligible guest creations with user accounts;
• provide customer support;
• detect fraud, abuse, or unauthorized activity;
• maintain platform security;
• maintain transaction and operational records;
• understand website usage;
• improve functionality, design, and user experience; and
• comply with applicable legal obligations.

HeartNotes allows users to share HeartNotes through links and QR codes.

Recipients may access a HeartNote without creating an account or signing in.

Because the sharing feature is designed to work through a shareable link or QR code, anyone who obtains that link or QR code may be able to access the corresponding HeartNote.

Users should therefore only include information, photographs, recordings, and other content that they are comfortable sharing with anyone who may obtain the link.

Uploaded photos and customer-provided media are used to create and display the requested HeartNote.

Users are responsible for having appropriate rights or permission to upload the content.

A customer may delete a created HeartNote from their account where that feature is available. Super Admin may also delete a HeartNote through administrative controls.

When a created HeartNote is deleted, associated uploaded photographs and related media are also intended to be deleted. Technical deletion processes, backups, legal retention requirements, or security records may require limited retention where applicable.

Voice recordings may be retained for up to 7 days, unless the associated HeartNote is deleted earlier. If the HeartNote is deleted earlier, the associated voice recording is intended to be deleted with it.

HeartNote and account information generally remains stored until:

• the customer deletes it, where supported;
• Super Admin deletes it; or
• HeartNotes determines it is no longer reasonably necessary.

Some information may need to be retained for legal, accounting, payment, fraud prevention, security, dispute resolution, or other legitimate purposes.

HeartNotes may use essential cookies or local storage for authentication, security, preferences, and core functionality.

HeartNotes may also use Google Analytics or similar analytics technologies to understand website usage, engagement, and performance.

Non-essential analytics or tracking technologies are subject to applicable law and available consent or preference controls, where applicable.

HeartNotes may use Razorpay or other payment service providers to process payments. Payment providers process payment information according to their own applicable privacy notices and terms.

HeartNotes does not intend to store full card numbers, CVV, UPI PIN, or similar sensitive payment credentials on its own systems.

HeartNotes may use third-party service providers for:

• hosting and infrastructure (e.g. Vercel);
• authentication, database, and storage (e.g. Supabase);
• payment processing (e.g. Razorpay);
• email and communications;
• analytics; and
• security and fraud prevention.

Information may also be disclosed where reasonably necessary to comply with law, legal process, or lawful requests; to protect rights or safety; to investigate fraud or misuse; or to protect HeartNotes and its users.

We do not sell your personal information as a commercial product.

Supported HeartNotes creation can be started without mandatory signup.

Contact information voluntarily provided during guest creation may be used for appropriate access, management, or later account association where supported by the product.

Subject to applicable law, you may have rights including access, correction, deletion, withdrawal of consent where applicable, and grievance redressal. You can contact us at support@myheartnotes.in to exercise these rights.

HeartNotes is not specifically directed toward children.

Users should not knowingly submit personal information relating to a child without appropriate parental or lawful authorization where required. If you have concerns about a child's information, contact us at support@myheartnotes.in.

HeartNotes uses reasonable technical and organizational safeguards intended to protect information against unauthorized access, misuse, alteration, loss, or disclosure. Safeguards may include authentication, access controls, secure infrastructure, encrypted transport where appropriate, logging, and administrative controls.

No online service can guarantee absolute security.

HeartNotes may use or link to third-party services such as payment, authentication, analytics, hosting, or other providers. Those third parties may have separate privacy policies and terms.

HeartNotes may update this Privacy Policy to reflect changes in services, technology, data practices, or legal requirements. The effective date at the top of this page will be updated when appropriate.

Questions about this Privacy Policy can be sent to support@myheartnotes.in.

HeartNotes