Legal

This Privacy Policy is our privacy notice under Malaysia's Personal Data Protection Act 2010, as amended (PDPA). It explains how Sendvitation collects, uses, shares and protects personal data when you use our website, build or manage an e-card, or respond to an event as a guest.

It is available in English and Bahasa Malaysia. If the two versions differ, the English version prevails.

Sendvitation is operated by Arisea Ventures Trading (SSM no. 202603146018 (TR0343525-A)), B2-2-3, SOLARIS DUTAMAS NO. 1, JALAN DUTAMAS 1 , 50480 KUALA LUMPUR, WILAYAH PERSEKUTUAN. Email: hello.sendvitation@gmail.com. Phone / WhatsApp: +60102472168.

For the data in your customer account and the e-cards you create, we are the “data controller” under the PDPA, which means we decide how that data is used. Guests' data is handled a little differently; see section 7, “Guests' data and event hosts”.

The data we collect depends on how you use the service. We only ask for what we need for each feature.

Most data comes from you directly. Account details come from Google when you sign in. A guest's details may also be entered or imported by the host who invited them.

You do not have to give us this data, but without it we cannot provide the related feature (for example, we cannot create an account without a Google sign-in, or record an RSVP without a name).

We use personal data to:

• Provide and operate the service, including building, showing and managing e-cards and event features.
• Activate paid add-ons and membership after we confirm your payment.
• Give customer support and reply to your enquiries.
• Keep the service secure and prevent fraud, spam and abuse, including checking and removing guest content that breaks our rules.
• Comply with the law and respond to lawful requests from authorities.

We do not sell personal data. We do not use it for advertising, and we do not build profiles of you for marketing. We do not currently send marketing emails or messages.

Event hosts: the host of an event can see the details their guests give through that event's forms (for example RSVP replies, check-in, messages and photos). Helpers the host invites with a PIN-protected helper link can see and manage the parts the host allows. Anyone who opens an e-card sees what the host has put on it, and live wall messages and photos are shown to everyone viewing that event's showcase. Hosts may also upload payment QR codes and account names (for example for e-wallet angpao); these are shown to anyone who opens the host's RSVP link until about 7 days after the event, and are stored until the host deletes them or the card is deleted. Payments are made directly between the guest and the host in their own banking or e-wallet apps, and we do not process or keep payment amounts.

Service providers: we use the companies below to run the service. They process data for us and only as needed to provide their service.

Some e-card or showcase designs load fonts, style files, images or other files from third-party networks (for example font libraries or video thumbnails). As with any website, those providers receive your device's IP address when your browser loads these files. Our image and audio storage provider may also log your IP address, as any web host does. When you choose “Continue with Google”, Google sets its own cookies on its own sign-in pages; we do not control these, so please see Google's own policies. We can tell you the names of the specific providers we use if you ask us (see “Your rights” for how to contact us).

We may also disclose personal data where the law requires it (for example to a court or an authority), or where it is needed to protect our rights, our users or the public, such as when investigating abuse.

Our service providers, including those listed in section 5, may store or process personal data on servers located outside Malaysia.

We use established providers that apply appropriate security and data-protection safeguards.

By using our service, you consent to your personal data being transferred to, and processed in, these places outside Malaysia for the purposes described in this notice.

When a host creates an e-card and turns on features such as RSVP, check-in, seating or the live showcase, the host decides what guest data to collect and how to use it for their event.

The host is responsible for having the right to enter and use their guests' details, for example by telling guests that their details are being collected and why, and by only adding people who are actually invited.

We process guest data on the host's behalf, to provide these features. We do not use guest data for our own marketing.

If you are a guest and have a question, or want your details corrected or removed, please contact the host first. You can also contact us using the details in section 14, and we will help or pass your request to the host.

The short privacy notice shown on guest forms (RSVP, check-in, live messages and photo uploads) links to this policy.

We use only strictly necessary cookies and similar browser storage, for example to keep you signed in. We do not use advertising or tracking cookies. To see how many people visit our public pages, we use Vercel Web Analytics, which sets no cookie and does not build a profile of you; it counts page views with the page address (without any query string), the country and the type of browser or device. Private pages such as the dashboard and admin area are not counted.

The full list, with what each one does and how long it lasts, is in the Cookie Policy section of this page.

We keep personal data only for as long as we need it for the purposes in this notice:

• Account and e-card data, including your guests' details, is kept while your account exists.
• You can ask us to delete your account. We will delete it, together with your e-cards and all related guest data, within 30 days of your request.
• Live showcase content (guest messages, photos, videos and music) becomes due for deletion 14 days after the event date and is then deleted in our regular clean-up. The showcase itself is switched off from 7 days after the event.
• E-cards with no active paid add-on may expire and be hidden from the public from 90 days after the event date. An expired e-card is not deleted, and you can still see it in your dashboard.
• Free accounts with no membership and no active add-on may be made inactive from 180 days without activity. An inactive account cannot use the dashboard until we reactivate it, but it is not deleted.
• Contact form enquiries are kept as a record of our communication until they are no longer needed, or until you ask us to delete them.
• Copies in backups and logs may remain for a short time after deletion before they are overwritten.
• Where the law requires us to keep certain records (for example business or tax records), we keep them for as long as required.

We protect personal data with measures such as:

• Access controls on our database, so each customer can only reach their own e-cards and guest data.
• Encrypted connections (HTTPS) between your browser and our website.
• Optional PIN codes for showcase pages, and required PIN codes for event-day helper links.
• Staff access limited to people who need it, with a separate staff sign-in and permission levels.
• Limits on repeated requests to our public forms, to reduce spam and abuse.

No system is completely secure, so we cannot guarantee that data will never be accessed without permission. If a personal data breach happens that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and the affected people as soon as practicable, as the law requires.

Under the PDPA you can:

• Ask for access to the personal data we hold about you. We will respond within 21 days.
• Ask us to correct data that is inaccurate, incomplete, misleading or out of date. We will respond within 21 days.
• Withdraw your consent, or ask us to stop or limit processing your data. Some features may then stop working; for example, we cannot keep your account without your sign-in details.
• Ask us to delete your data. We will do this within 30 days, except data the law requires us to keep. For guest details an event host has entered, please also see section 7.
• Ask us to transfer the personal data you gave us to another data controller you name, in a structured and commonly used format, where the law gives you this right and it is technically feasible.
• Ask us not to use your data for direct marketing. We do not send any direct marketing at the moment.

To make a request, write to hello.sendvitation@gmail.com or hello.sendvitation@gmail.com, from the email address linked to your account if you have one. We may ask you to confirm your identity before we act, so that we do not give your data to someone else.

Our contact for data protection matters is hello.sendvitation@gmail.com. If the law requires us to appoint a data protection officer, this is also the contact for that role.

We will only charge a fee where the law allows it, and we will tell you before charging anything. If we refuse a request, we will tell you why, as the law requires.

Accounts are for people aged 18 or over, or younger people with a parent's or guardian's consent (see Terms section 1). We do not knowingly collect personal data from children without that consent.

Photos or details of children (for example a family member named in an invitation, or a guest's child included in an RSVP) may be added by the event host or a guest. The host is responsible for having the right to share them, for example permission from a parent or guardian. If you believe a child's data has been included without permission, contact us and we will review and remove it where appropriate.

We may update this notice from time to time, for example when we add features or when the law changes. The “Last updated” date at the top of this page shows which version you are reading.

If we make an important change, we will announce it on our website before or when it takes effect.

For questions, requests or complaints about personal data:

• Data requests: hello.sendvitation@gmail.com
• Email: hello.sendvitation@gmail.com
• Phone / WhatsApp: +60102472168
• Address: Arisea Ventures Trading, B2-2-3, SOLARIS DUTAMAS NO. 1, JALAN DUTAMAS 1 , 50480 KUALA LUMPUR, WILAYAH PERSEKUTUAN

If you are not satisfied with our response, you can complain to the Personal Data Protection Commissioner of Malaysia (Jabatan Perlindungan Data Peribadi).

This notice is provided in English and Bahasa Malaysia, as required by the PDPA. Use the language switch at the top of the page to change versions. If there is any inconsistency between the two, the English version prevails.

By using our website or creating an account, you agree to these Terms, together with our Privacy Policy, Cookie Policy and Refund Policy (all on this page). If you do not agree, please do not use Sendvitation.

You must be at least 18 years old to create an account, or have the consent of a parent or guardian.

These Terms are available in English and Bahasa Malaysia. If the two versions differ, the English version prevails.

Sendvitation lets you build and share online invitation cards (“e-cards”). A free account can create 1 e-card. With Membership you can create up to 3.

You can also buy optional paid products for your e-card: RSVP, Seat Arrangement, Live Showcase, QR Check-in and Premium Template. What each one includes and its current price are shown on our website.

We may change features and limits over time (see section 10, “Availability and changes”).

You sign in with your Google account (or, in some cases, a one-time sign-in link we provide). Please give accurate information and keep it up to date.

You are responsible for everything done through your account. Keep your sign-in secure, and keep private the PIN codes for any helper links and showcase pages you create: anyone with a helper link and its PIN can manage the parts of your event you allowed.

If you think someone has used your account or a helper link without permission, turn the helper link off in your dashboard and contact us at hello.sendvitation@gmail.com.

Prices are shown on our website in Malaysian Ringgit (RM).

Paid products are arranged manually with our team over WhatsApp. We do not collect card or bank details on this website. We activate the product on your account after we confirm your payment.

Where we show a “was” price next to the current price, the “was” price is our previous standard price for that product.

We may change our prices for future purchases. A price change does not affect a purchase we have already confirmed.

All sales are final, subject to your statutory rights. If a paid product is faulty, not as described, or not activated, you can still ask us to put it right. The details are in the Refund Policy section of this page.

You keep ownership of the content you put on the service, such as names, event details, photos, and any photos, videos or music you send us for your showcase.

You give Sendvitation a limited, non-exclusive licence to host, store, process and display that content, only so that we can run the service for you. This includes showing your e-card to the guests and anyone else you share it with, and, for showcase content, showing it to anyone who has the showcase link (and its PIN, if you set one). The licence ends when the content is deleted, except for copies in backups that are overwritten within a short time.

You promise that you own, or have permission to use, everything you upload, type or send us, including photos, music, names and other people's personal data (for example your guests' names and phone numbers), and that your content does not infringe anyone's copyright, privacy or other rights. For guests' personal data, please also see section 7 of our Privacy Policy.

When using the service, you must not, and must not let others:

• Post or share content that is unlawful, defamatory, obscene, hateful, harassing, threatening or misleading.
• Post any content involving minors that is sexual, exploitative or otherwise inappropriate.
• Upload malware, or scrape, probe, overload or try to break into the service, including trying to guess or bypass PIN codes or get around rate limits.
• Pretend to be another person or organisation, or misrepresent your connection with them.
• Use the service to send spam or unsolicited messages.
• Use the service for fraud, scams or any other illegal purpose.

If you turn on the Live Showcase, your guests can post messages and photos to it. As the host, you are responsible for the guest content on your showcase and for keeping an eye on it during your event.

Guest messages pass through an automatic profanity filter that masks some words, but no filter is perfect. The host can choose which guest messages and photos appear on the showcase screen and can delete guest photos, and we can hide or delete any guest content that breaks these Terms or the law.

To report abusive or unlawful content, email hello.sendvitation@gmail.com with the e-card or showcase link and a short description. We will act promptly on valid reports, including content that may break Malaysian law.

To keep the service tidy and limit how long we hold data, some things expire after your event:

• A Live Showcase is switched off from 7 days after the event date.
• Showcase content (guest messages and photos, and the showcase's photos, videos and music) becomes due for deletion 14 days after the event date and is then deleted in our regular clean-up. Deleted showcase content cannot be recovered.
• E-cards with no active paid add-on may expire and be hidden from the public from 90 days after the event date. An expired e-card is not deleted, and you can still see it in your dashboard.
• Free accounts with no membership and no active add-on may be made inactive from 180 days without activity. An inactive account cannot use the dashboard until we reactivate it, but it is not deleted.

If your e-card has expired or your account has been made inactive, contact us and we can reactivate it. Please keep your own copies of any photos, guest lists or messages you want to keep, as we do not keep them for you after deletion.

We aim to keep the service reliable, but we cannot guarantee it will always be available, uninterrupted or free of errors, for example during maintenance or problems with our providers.

We may change, suspend or stop offering features. Where it is practical, we will give reasonable notice of changes that significantly affect a paid product you have bought.

The website, templates, designs, music tracks and software belong to Sendvitation or the people who license them to us.

You may use our templates, designs and music tracks only within your own e-cards and showcases, for your event. You must not copy, resell, extract or redistribute them, or use them outside the service.

To the extent the law allows, the service is provided “as is” and “as available”, without promises beyond those set out in these Terms.

To the extent the law allows, we are not liable for:

• Indirect or consequential loss, such as loss of opportunity or goodwill.
• Loss of data or content caused by the actions of guests, helpers or other third parties.
• Events outside our reasonable control, such as outages of internet, hosting, sign-in or messaging providers.

To the extent the law allows, our total liability for any claim relating to the service is limited to the amount you paid us in the 12 months before the claim.

Nothing in these Terms excludes or limits any liability that cannot be excluded or limited by law, including your rights under the Consumer Protection Act 1999, and our liability for death or personal injury caused by our negligence, or for fraud.

We may suspend or close an account, or hide or remove an e-card or showcase, if it breaks these Terms or the law, or to protect our users, guests or the service.

You can stop using the service at any time and ask us to delete your account, as described in section 11 of our Privacy Policy. We will delete it, together with your e-cards and related guest data, within 30 days of your request, except data the law requires us to keep.

Sections that by their nature should continue after an account ends, including the content licence (for copies still being removed), our intellectual property, the disclaimer and limit of liability, and governing law, continue to apply.

These Terms are governed by the laws of Malaysia.

The courts of Malaysia have jurisdiction over any dispute about these Terms or the service. If you are a consumer, this does not take away any right you have under Malaysian law to bring a claim in another forum, such as the Tribunal for Consumer Claims Malaysia.

We may update these Terms from time to time, for example when we add features or when the law changes. The “Last updated” date at the top of this page shows which version you are reading.

If you continue to use the service after a change takes effect, you accept the updated Terms. If we make a significant change, we will announce it on our website before or when it takes effect.

For questions about these Terms:

• Arisea Ventures Trading (SSM no. 202603146018 (TR0343525-A))
• Address: B2-2-3, SOLARIS DUTAMAS NO. 1, JALAN DUTAMAS 1 , 50480 KUALA LUMPUR, WILAYAH PERSEKUTUAN
• Email: hello.sendvitation@gmail.com
• Phone / WhatsApp: +60102472168

You can delete cookies and browser storage in your browser settings at any time. If you block the sign-in cookies you will not be able to stay signed in.

Questions about this policy: hello.sendvitation@gmail.com (Arisea Ventures Trading, SSM no. 202603146018 (TR0343525-A)).

All purchases are final. Our products are digital services that are set up and made available to your account soon after we confirm your payment, so we do not offer refunds, cancellations or exchanges once you have paid, and we do not refund because you changed your mind, your event date or plans changed, or you no longer need the product.

Please check the description, the price (in Malaysian Ringgit, RM) and what is included before you pay. You can build and preview an e-card for free, and ask us any question over WhatsApp before buying.

Nothing in this policy limits any right you have under Malaysian law, including the Consumer Protection Act 1999. If a paid product is faulty, is not as described, or we fail to activate it, we will fix it, activate it, or (if we cannot) refund you for that product.

• Tell us within 14 days of payment, with your account email and what is wrong.
• We will respond within 3 working days and tell you how we will put it right.

Payments are arranged manually with our team over WhatsApp. No card details are collected on this website. We activate the product on your account after we confirm your payment.

Arisea Ventures Trading (SSM no. 202603146018 (TR0343525-A)), B2-2-3, SOLARIS DUTAMAS NO. 1, JALAN DUTAMAS 1 , 50480 KUALA LUMPUR, WILAYAH PERSEKUTUAN. Email: hello.sendvitation@gmail.com. Phone / WhatsApp: +60102472168.