Privacy Notice

1. Information we collect

We collect only information needed to provide and protect Kisandah.

• Account information such as name, email address, phone number and authentication records.
• Wedding and event details, cover photos, guest links, settings and package entitlements.
• Guest-submitted photos, videos, names and messages.
• Technical information such as device, browser, IP address, timestamps and security logs.
• Payment status, package, amount and transaction references. Payment providers handle payment credentials; Kisandah does not need to store full card or online-banking details.

2. How we use information

We use information to create and operate accounts, galleries, QR links, Live Walls and downloads; process payments; provide support; prevent fraud and abuse; maintain security; communicate service notices; and comply with legal obligations.

• We do not sell personal data or wedding memories.
• Marketing messages should only be sent where permitted, and recipients may opt out.

3. Couples and guest content

The account holder controls the wedding and event spaces. Guests should only upload content they are entitled to share. Couples are responsible for informing invited guests how their content will be displayed and retained.

• Guest names are optional unless a feature clearly requires them.
• Content may appear in the couple's gallery, Live Wall, replay, print or download features according to the event settings.

4. Service providers and disclosure

We may share the minimum necessary information with providers that support hosting, storage, databases, authentication, email, analytics, customer support and payments. They may process data only for the service they provide to us.

• We may disclose information where required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.
• Some providers may process data outside Malaysia. Where applicable, we take reasonable steps to use appropriate contractual and security safeguards.

5. Retention and deletion

Gallery access and media retention follow the purchased package and the expiry shown in the dashboard. A deleted event may remain soft-deleted for account integrity, fraud prevention and entitlement records, while public access is disabled.

• Operational backups may retain data for a limited period before automatic removal.
• Payment, security and entitlement records may be retained longer where reasonably necessary or legally required.
• Before expiry, account holders should download memories they wish to keep.

6. Security

We use reasonable technical and organisational safeguards, including access controls, secure authentication and restricted administrative access. No internet service can guarantee absolute security, so users should protect passwords and guest links.

7. Your choices and rights

Subject to applicable law, you may request access to or correction of personal data, ask about processing, withdraw consent where applicable, or request deletion. Some information may need to be retained for security, contractual or legal reasons.

• Account holders can update core details in Account settings.
• For guest-upload requests, include the event link and enough detail to identify the content.

8. Children

Kisandah is intended for adults organising celebrations. A parent or guardian should supervise any upload involving a child and ensure permission has been obtained.

9. Changes and contact

We may update this notice when the service or legal requirements change. Material changes will be communicated through the site or account where practical.

For privacy questions or requests, use the support contact published on Kisandah's Help page.